Personal Data Protection Policy

1. Core Principles of Data Collection

CA Strategia places the highest importance on the protection and confidentiality of personal data belonging to clients, prospects, partners, and website visitors. All personal data is processed lawfully, fairly, and transparently for specified, explicit, and legitimate purposes.

2. Collected Data & Purposes of Processing

Information collected through our portal includes:

• Contact / Briefing Inquiry Form: Full name, professional email address, telephone number, organization name, inquiry subject, and message content. This data enables us to process your inquiries and establish customized service proposals.
• Interactive Diagnostic Simulator: Purely volumetric metrics inputted anonymously for self-assessment purposes (no personally identifiable records are stored without explicit form submission).
• Technical Browsing Data: Anonymized IP addresses, connection server logs, and security trackers strictly necessary for operational stability and cyber defense.

3. Legal Basis for Processing

Data processing operations are conducted pursuant to:

• The explicit consent of the data subject (when submitting the contact form);
• The performance of pre-contractual measures or contractual service agreements;
• The legitimate interest of the firm to maintain infrastructure security and provide high-quality services.

4. Data Retention Periods

Inquiry and prospect records are retained for a maximum of 3 years from the last active interaction with the user. Data related to executed advisory contracts is archived for 5 years (commercial statutory limitation) and up to 10 years for mandatory accounting documentation under French commercial law.

5. Data Recipients & Non-Disclosure

Personal data collected is strictly reserved for the internal use of CA Strategia. Under no circumstances does the firm sell, rent, commercialize, or transfer your personal data to third parties without prior explicit authorization.

6. Individual Rights Under GDPR

In accordance with Articles 15 to 22 of the GDPR, you have the right to access, rectify, erase (right to be forgotten), restrict processing, port your data, and object to processing on legitimate grounds.

To exercise your rights, you may contact our DPO by post:
CA Strategia – Data Protection Officer
34 Rue Pierre Pérol, 19100 Brive-la-Gaillarde, France
Or via email: [email protected]

If, after contacting us, you believe your rights have not been respected, you are entitled to lodge a complaint with the French National Data Protection Authority (CNIL – 3 Place de Fontenoy, 75007 Paris – www.cnil.fr).