Privacy Policy

STC CONSULT — Version 3.0 / 19 June 2026

1. Purpose and Scope of This Policy

1.1. Purpose

This Privacy Policy is intended to inform users of the website www.stcconsult.fr, prospects, professional clients and their representatives and contacts about how STC CONSULT processes their personal data in connection with the use of the website and its B2B professional relationships.

1.2. Scope

This Policy applies to personal data processing carried out by STC CONSULT in connection with:

— access to and the technical operation of the website;

— requests sent by email;

— pre-contractual and commercial exchanges;

— the management of orders, reports, services and deliverables;

— the preparation and follow-up of quotations, contracts and invoices;

— the performance and follow-up of B2B professional relationships.

 

2. Data Controller

2.1. Identification

The data controller is STC CONSULT, a French single-member simplified joint-stock company (société par actions simplifiée unipersonnelle — SASU) with share capital of €30,000, whose registered office is located at 45 Boulevard de la Croisette, 06400 Cannes, France, registered with the Cannes Trade and Companies Register under SIREN number 983 955 634.

2.2. Contact

For any question relating to the processing of your personal data: office@stcconsult.fr.

2.3. Data Protection Officer

STC CONSULT has not appointed a Data Protection Officer.

Any request relating to the protection of personal data may be sent to: office@stcconsult.fr.

 

3. Personal Data Processed

3.1. No Contact Form on the Website

The website www.stcconsult.fr does not contain an online contact form. STC CONSULT does not collect personal data through any form embedded in the website.

3.2. Data Provided Directly

When a user, prospect, professional client or its representative contacts STC CONSULT by email or otherwise enters into a relationship with it, the personal data processed may include:

— first name and surname;

— job title and company name;

— professional email address;

— telephone number;

— information contained in the request or correspondence;

— information required to prepare a quotation, contract, order or invoice;

— information required to perform and follow up a service.

3.3. Technical Data

When the website is accessed, certain technical data may be processed by the Wix platform in order to ensure the operation, security and technical integrity of the website, including the IP address, connection data, browser type, device used and cookie-related information.

3.4. Sensitive Data

STC CONSULT does not request the disclosure of data falling within the special categories referred to in Article 9 of the GDPR.

Users are requested not to send such data in their messages or documents.

3.5. Mandatory or Optional Nature of the Data

Providing personal data is optional when making a simple request for information.

However, certain data is required to prepare a quotation, enter into or perform a contract, manage an order and issue an invoice. If such data is not provided, STC CONSULT may be unable to respond to the request, enter into the contract or perform the relevant service.

Technical data required for the operation and security of the website is processed automatically when the website is accessed.

 

4. Sources of the Data

4.1. Data Provided Directly

Personal data is mainly provided directly by the user, prospect, professional client or its representative, in particular by email or in the course of pre-contractual or contractual exchanges.

4.2. Technical Data

Certain technical data may be generated automatically when the website is accessed and processed by Wix for hosting, security and the technical operation of the platform.

 

5. Purposes of Processing

5.1. Purposes

Personal data may be processed for the following purposes:

— responding to requests and questions sent to STC CONSULT;

— following up exchanges with prospects and professional clients;

— preparing and sending commercial proposals, quotations and contracts;

— managing orders for B2B reports, services and deliverables;

— performing and following up the agreed services;

— issuing, sending and following up invoices and payments;

— managing the administrative, accounting and legal aspects of the professional relationship;

— complying with applicable legal, regulatory, tax and accounting obligations;

— ensuring the operation, security and technical integrity of the website;

— establishing, exercising or defending STC CONSULT's legal rights.

 

6. Legal Bases for Processing

6.1. Pre-Contractual Measures

Data required to process a request, prepare a quotation or organise a service may be processed in order to take pre-contractual measures at the request of the data subject.

6.2. Performance of a Contract

Where the data subject is personally a party to the contract, the data required to manage an order, perform a service, deliver a report or other deliverable and follow up the contractual relationship is processed on the basis of the performance of the contract.

Where the data subject acts as a representative, employee or contact person of a professional client, the processing of their data is based on the legitimate interests of STC CONSULT and the relevant client in entering into, performing and following up their contractual relationship.

6.3. Legal Obligations

Data required for invoicing, accounting and compliance with STC CONSULT's legal obligations is processed on the basis of compliance with a legal obligation.

6.4. Legitimate Interests

STC CONSULT may process certain data on the basis of its legitimate interests, in particular to:

— respond to professional enquiries;

— follow up its B2B commercial relationships;

— secure and administer the website;

— prevent technical incidents and fraudulent use;

— establish, exercise or defend its legal rights.

Such processing is carried out with due regard for the rights and freedoms of the data subjects.

 

7. Recipients and Service Providers

7.1. Internal Recipients

Personal data is accessible only to authorised persons within STC CONSULT, within the limits of their duties and the requirements of the relevant processing.

7.2. Service Providers and Advisers

Personal data may be disclosed, strictly to the extent necessary, to the following recipients:

— Wix, for hosting, operation and technical security of the website;

— Gandi, for domain name and email management;

— STC CONSULT's accounting service provider, for invoicing and compliance with accounting and tax obligations;

— legal advisers or other professionals bound by confidentiality obligations, where their involvement is necessary;

— competent administrative authorities, courts or public bodies where disclosure is required or permitted by law.

Service providers act only within the scope of the tasks entrusted to them and are subject to their contractual and legal obligations concerning confidentiality, security and data protection.

7.3. No Commercialisation of Personal Data

STC CONSULT does not sell, rent or transfer personal data to third parties for advertising or commercial purposes.

 

8. No Contact Form, Newsletter, Advertising or Behavioural Tracking

8.1. Features Not Used on the Website

According to the technical information provided by the website developer, www.stcconsult.fr does not include:

— an online contact form;

— a newsletter subscription system;

— targeted advertising or remarketing tools;

— advertising pixels such as Meta Pixel, Google Ads, LinkedIn Insight or equivalent tools;

— behavioural analytics tools;

— A/B testing;

— reCAPTCHA or any third-party anti-spam tool.

STC CONSULT does not use the website to carry out automated individual decision-making or profiling that produces legal effects or similarly significantly affects data subjects.

 

9. Data Retention Periods

9.1. Enquiries and Prospects

Data relating to enquiries and prospects is retained for the time required to process the request and, where applicable, for a maximum period of three (3) years from the prospect's last contact.

9.2. Contractual Relationships

Data required for the performance and follow-up of a contract is retained throughout the contractual relationship. Once that relationship has ended, data required to establish, exercise or defend legal rights may be retained in a restricted-access intermediate archive for the applicable limitation periods, including for five (5) years where that period applies to the relevant claim.

9.3. Accounting Data and Invoices

Invoices and accounting records are retained for ten (10) years in accordance with applicable legal obligations.

9.4. Technical Data and Cookies

Technical data and cookie-related information are retained for the periods required for their purposes, as specified, where applicable, in the Cookie Policy or in the documentation of the relevant technical service provider.

9.5. Deletion or Archiving

At the end of the applicable periods, the data is deleted, anonymised or placed in an intermediate archive where limited retention remains necessary to comply with a legal obligation or defend STC CONSULT's rights.

 

10. Rights of Data Subjects

10.1. Applicable Rights

Depending on the nature of the processing and subject to the conditions laid down by applicable law, each data subject may exercise the following rights:

— the right of access to their data;

— the right to rectification of inaccurate or incomplete data;

— the right to erasure;

— the right to restriction of processing;

— the right to object, in particular to processing based on legitimate interests;

— the right to data portability, where the legal conditions are met;

— the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;

— the right to give instructions concerning the handling of their personal data after death, under the conditions provided for by French law.

 

11. Exercising Your Rights

11.1. How to Exercise Your Rights

Rights may be exercised by sending a request to:

office@stcconsult.fr

The request must contain sufficient information to identify its author and specify the right they wish to exercise.

Proof of identity may be requested only where there is reasonable doubt as to the identity of the requester.

11.2. Response Time

STC CONSULT responds to requests within one month of receipt.

This period may be extended by a further two months where justified by the complexity or number of requests. The data subject will be informed of any such extension within the initial one-month period.

 

12. Data Security

12.1. Protective Measures

STC CONSULT implements technical and organisational measures appropriate to the nature of the data, the purposes of processing and the risks involved, in order to protect personal data against loss, destruction, alteration, unauthorised access or unlawful disclosure.

12.2. Restricted Access

Access to personal data is limited to persons and service providers who require it to perform their duties.

12.3. Technical Service Providers

STC CONSULT selects service providers that are subject to contractual and legal obligations relating to security, confidentiality and data protection.

 

13. Transfers of Data Outside the European Economic Area

13.1. Possible Transfers

In connection with the use of the Wix platform, certain data may be processed in, or accessed from, countries located outside the European Economic Area.

13.2. Applicable Safeguards

Where such transfers take place, they are governed in accordance with the GDPR, in particular by means of:

— an adequacy decision adopted by the European Commission;

— standard contractual clauses adopted by the European Commission;

— or any other appropriate safeguard provided for by applicable law.

13.3. Further Information

Any data subject may obtain further information about the applicable safeguards by contacting STC CONSULT at: office@stcconsult.fr.

 

14. Cookies

14.1. Cookies Used on the Website

The website mainly uses cookies that are strictly necessary for its operation, security and the provision of services requested by the user.

14.2. No Advertising or Tracking Cookies

According to the technical information provided by the website developer, no targeted advertising, marketing tracking, behavioural analytics or A/B testing tool is enabled on the website. Cookies used on the website are not used for advertising or marketing tracking purposes.

14.3. Further Information

Detailed information on the cookies used, their purposes and retention periods is provided in the Cookie Policy available on the website.

 

15. Complaint to the CNIL

15.1. Right to Lodge a Complaint

Any data subject has the right to lodge a complaint with the French Data Protection Authority (Commission nationale de l'informatique et des libertés — CNIL):

CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — France — www.cnil.fr

The data subject may contact STC CONSULT at office@stcconsult.fr to allow the company to review the request, without prejudice to their right to lodge a complaint directly with the CNIL.

 

16. Updates to This Policy

16.1. Changes

STC CONSULT may amend this Privacy Policy to reflect legal, regulatory, technical or organisational developments.

The version applicable is the version published on the website on the date it is accessed.

The date and version number appear at the beginning of the document.

 

STC CONSULT — Privacy Policy — Version 3.0 / 19 June 2026