1. Controller
CL Corporate Affairs Consulting is a French sole proprietorship (entreprise individuelle) registered under VAT number FR58902992189, with its registered office at 1 avenue de l'Observatoire, 75006 Paris, France, and a representation office at Avenue de Tervueren 103, B-1040 Brussels, Belgium (hereinafter « the Firm »).
The Firm is the controller of the personal data processed through this website, within the meaning of Regulation (EU) 2016/679 (« GDPR ») and French Law No. 78-17 of 6 January 1978.
2. Scope of this policy
This policy covers only the personal data processed through this website while the Firm's consulting activity is dormant, that is, essentially the enquiry form published on the contact page.
The Compass Political Intelligence Platform is a distinct service with its own privacy policy, available at compass.eu.com. The present policy does not govern it.
3. Data collected
Through the enquiry form: your first name and surname, the organisation you belong to, your email address, your telephone number, the subject and the content of your message. All of these fields are required.
For security purposes: your IP address, recorded by the site itself when the form is submitted, in order to limit abusive submissions and to keep a log of submissions, together with the technical data processed by the anti-abuse check described in section 5.
4. Purpose and legal basis
Your data is processed for the sole purpose of answering the enquiry you send. The legal basis is your consent, given when you submit the form (Article 6(1)(a) GDPR), and the Firm's legitimate interest in replying to messages addressed to it (Article 6(1)(f) GDPR).
Your data is not used for prospecting and, the consulting activity being dormant, is not used for any commercial purpose.
5. Anti-abuse check (Cloudflare Turnstile)
The form is protected against automated abuse by Cloudflare Turnstile, provided by Cloudflare, Inc. This check processes technical data (including the IP address and browser characteristics) and may place a strictly necessary technical token in order to distinguish a human from a robot.
This processing is necessary for the security of the service and does not build an advertising profile. For further information, see the Cloudflare Privacy Policy.
6. Recipients
Your data is accessible only to César Lesage, legal representative of CL Corporate Affairs Consulting. It is not sold, rented or transferred to third parties, save to the technical providers strictly necessary to operate the website and deliver the message (hosting and email delivery), acting as processors.
7. Retention
Messages received through the form are retained for the time needed to handle the enquiry and, at most, for three years from the last contact, after which they are deleted.
8. Transfers outside the European Union
The website and the messages received are hosted on servers located within the European Union. The anti-abuse check is operated by Cloudflare, Inc., which may process technical data outside the European Union under the safeguards provided for in Chapter V of the GDPR.
9. Your rights
You have the right of access, rectification, erasure, restriction and objection, the right to data portability and the right to withdraw your consent at any time, as well as the right to give directions concerning your data after your death.
These rights may be exercised through the form on the contact page or by post to CL Corporate Affairs Consulting, 1 avenue de l'Observatoire, 75006 Paris, France. A reply is provided within one month.
You also have the right to lodge a complaint with the supervisory authority, in France the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris cedex 07 — cnil.fr.
10. Cookies and Audience Measurement
We do not use any tracking or profiling cookies on our website. It is a self-hosted static site. The items described below are strictly necessary within the meaning of Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive), whose second sentence exempts from prior consent any cookie or similar technology used solely to carry out an electronic communication or to provide a service explicitly requested by the user. Accordingly, no cookie consent banner is required on this site.
Language preference cookie ("lang"): a single functional cookie containing only a two-letter language code (e.g. "fr"), set when you select your preferred language on our homepage. It does not collect any personal data, expires after one year, and is strictly necessary to deliver the service you have explicitly requested (display in your chosen language).
Cloudflare Turnstile (contact form only): if you use our contact form, the security verification service Cloudflare Turnstile may set a minimal technical cookie to distinguish human visitors from automated bots. This cookie is strictly necessary for the security of the form and does not collect any personal or profiling data. For further information, please consult the Cloudflare Privacy Policy.
Umami (self-hosted audience measurement): Umami is an open-source audience measurement tool that we self-host on our own infrastructure. It does not set any cookies and does not store or access any information on your device, so the consent requirement of Article 5(3) does not apply. It does not collect any personally identifiable data and does not track visitors across websites. The data collected (pages visited, country of origin, browser and device type, referral source) is anonymised and never leaves our servers. No data is passed on to third parties.
11. Amendments
This policy may be amended, in particular should the consulting activity resume. Any amendment is published on this page with an updated date.