Privacy policy

Data controller

The data controller for the personal data collected on this site is:

Company

Stratelio SAS

Address

12 avenue Jacques Bujault, 79000 Niort

Email

[email protected]

Data collected

We collect the following data when you use our services:

• Identification data: last name, first name, email address, phone number
• Professional data: job title, company, industry
• Browsing data: IP address, browser type, pages viewed, length of visit
• Questionnaire data: answers to the Dynastrat questionnaire and to other Stratelio tools

We do not collect any special category data within the meaning of Article 9 of the GDPR (ethnic origin, political opinions, religious beliefs, health data, etc.) unless you have given explicit consent.

Purposes of processing

Your data is processed for the following purposes:

• Providing and managing our services (questionnaire, reports, support and workshops)
• Communicating with you about our services (answering your requests, customer follow-up)
• Improving our services and the user experience
• Sending marketing information with your prior consent
• Complying with our legal and regulatory obligations

Legal basis for processing

Each processing operation relies on a legal basis in accordance with Article 6 of the GDPR:

• Consent: for sending marketing communications and placing non-essential cookies.
• Performance of a contract: for providing our services (questionnaire, reports, support and workshops).
• Legitimate interest: for improving our services and the security of our platform.
• Legal obligation: for complying with our accounting and tax obligations.

Retention period

Your data is kept for a period proportionate to the purpose of its processing:

• Customer data: for the duration of the contractual relationship, then 3 years after the end of the contract for marketing purposes
• Browsing data: 13 months maximum
• Questionnaire data: for the duration of the engagement, then archived for 5 years in accordance with legal obligations

Data sharing

Your data may be shared with:

• The certified coach or consultant who supports you, or the accredited coach or consultant who leads your workshop
• Our technical processors (hosting, analytics tools), who are bound by contractual confidentiality obligations

We never sell your personal data to third parties. We do not share your data with third parties for direct marketing purposes without your explicit consent.

International transfers

Your data is hosted on servers located within the European Union. In the event of a transfer to a third country, we ensure that appropriate safeguards are in place in accordance with the GDPR (European Commission standard contractual clauses, adequacy decision or other authorised mechanisms).

Data security

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (TLS) and at rest
• Strict access control and strong authentication
• Regular backups and a business continuity plan
• Periodic security audits and penetration tests

Cookies

This site uses cookies to ensure it works properly and to improve your experience:

• Essential cookies: necessary for the site to work (session, language preferences). They do not require your consent.
• Analytics cookies: used to measure site traffic (Google Analytics). They are placed only with your consent.

You can manage your cookie preferences at any time via the consent banner or your browser settings.

Your rights

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request the deletion of your data under the conditions set out in the GDPR.
• Right to restriction: restrict the processing of your data in certain circumstances.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to the processing of your data on grounds relating to your particular situation.

To exercise your rights, send your request to [email protected].

In the event of a dispute, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority): www.cnil.fr.

Protection of minors

Our services are not intended for people under 18. We do not knowingly collect personal data about minors. If we learn that a minor has provided us with personal data, we will take the necessary steps to delete it.

Changes to this policy

We reserve the right to change this privacy policy at any time. Any change will be published on this page with a revised update date. We invite you to check this page regularly to stay informed of our data protection practices.