Privacy policy

Data controller

The data controller is Adama Diallo, a sole trader operating under the brand STRATA ESG, whose full details appear in the legal notice. Any question about your data can be sent to contact@strata-esg.fr.

Data protection contact

contact@strata-esg.fr

Data protection officer

None appointed, appointment not being required under Article 37 GDPR

What this site collects

This site is a public showcase. It offers no account, no authenticated area and no form submitted to a server. There is no database on the site side.

• No user account, no sign up, no password.
• No server side contact form: contact buttons open your own email client, and the message is sent from your own address.
• No advertising tracker, no social network pixel, no data resold to anyone.
• One audience measurement and one journey analysis, both optional, both refused by default and described in detail below.
• No font called from a third party server: fonts are served from the site's own domain.

Data you send us by email

If you write to contact@strata-esg.fr, we process the data contained in your message, usually your name, your email address and the content of your request.

Purpose

Answering your request and following up on the exchange

Legal basis

Legitimate interest in answering an enquiry, Article 6.1.f GDPR

Retention

Three years from the last exchange, unless a legal obligation requires otherwise

Recipients

The STRATA ESG staff handling the request, and the email provider

Trackers and audience measurement

This site offers two optional and separate measurements, which you accept or refuse independently. Neither starts before your decision: until you answer the banner, no measurement script is downloaded and no request is sent. Refusing is exactly as easy as accepting, in one click on the same screen.

Your decision is kept for six months, then asked again. You can change it at any time from the tracker management link at the bottom of every page. Withdrawing your agreement stops the measurement and deletes the cookies already placed.

Audience measurement

Pages viewed, response times and rendering quality. No cookie and no personal identifier. Processor Vercel Inc. Retention thirteen months

Journey analysis

Page sequences and clicks on calls to action, to understand where information is missing. Places cookies prefixed ph_. Processor PostHog, European Union region. Retention thirteen months

Legal basis

Your consent, Article 82 of the French Data Protection Act and Article 6.1.a GDPR

No session recording

Your mouse movements and keystrokes are neither recorded nor replayed. That feature is disabled in the code, not merely in a setting

Local storage in your browser

Apart from the trackers described above, the site stores a single technical item in your browser's local storage. It never leaves your device and cannot identify you.

strata_consent_v1

Remembers your decision on the banner, its date and the version of this policy. Written only after you act

• The language choice is no longer stored: it is carried by the page address, English pages living under /en.
• These items are removed by clearing the site data in your browser.
• No tracker subject to consent is placed before your explicit agreement, under Article 82 of the French Data Protection Act.

Technical logs from the host

As with any site available on the internet, the host's servers record connection logs containing in particular an IP address, the date and time of the request, the page requested and the browser type. These logs are used solely for security and for the proper operation of the service. Their retention period is set by the host.

This site performs no server side processing. The only operations carried out before a page is returned are redirects from former addresses to current ones, which neither read nor record any personal data.

Host

Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States

Log retention

Set by Vercel Inc. The publisher neither uses nor stores these logs

Execution region

European Union. This is the region the publisher has selected for all of its services

Server location

The site's files are cached and served from the point of presence closest to the visitor, inside the European Union for a European visitor. The main Vercel Inc. facilities are located in the United States

Transfers outside the European Union

The publisher has selected an execution region inside the European Union for all of its services. That configuration does not remove every transfer: Vercel Inc. is a company incorporated in the United States and its delivery network is global by design, so technical connection data may be processed outside the European Union.

That transfer is framed by the standard contractual clauses adopted by the European Commission in 2021, to which Vercel Inc. subscribes in its data processing agreement.

Hosting processor

Vercel Inc., United States, hosting and delivery of the site

Email processor

The provider of the contact@strata-esg.fr mailbox, for the emails you send us only

Audience measurement processor

Vercel Inc., United States. Loaded only if you accept audience measurement, framed by the same standard contractual clauses as the hosting

Journey analysis processor

PostHog, project configured in the European Union region. Loaded only if you accept journey analysis

Other processors

None. This site calls no advertising service, no social network and no third party resource beyond those listed above

Your rights

Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights over your data.

• Right of access: obtain confirmation that data about you is processed, and receive a copy.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of your data, within the limits set by the regulation.
• Right to restriction of processing, in the cases provided for by the regulation.
• Right to object: object to processing based on legitimate interest, on grounds relating to your particular situation.
• Right to portability, where processing is based on consent or on a contract and is automated.
• Right to give instructions on the fate of your data after your death.

Exercising your rights and complaining

To exercise these rights, write to contact@strata-esg.fr. You will receive an answer within one month, extendable by two months for complex requests. Proof of identity may be requested in the event of reasonable doubt.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority, Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr.

Changes to this policy

This policy may be updated to reflect a change in the site or in the applicable rules. The date of the last update appears at the top of the page.