Privacy policy

1. Who processes data

Sidéral Technologies Group is responsible for processing data collected via this website, unless stated otherwise.

No data protection officer is currently publicly designated.

2. Data categories

Depending on the features you use, we may process the following categories — only when necessary:

• Identification: firstName, lastName
• Contact details: email, phone
• Professional data: organization, role, sector
• Project data: projectType, description, budget, timeline
• Academy data: training, session, profile, goals
• Application data: resume, portfolio, skills, experience
• Technical data: ip, logs, device, browser, cookies, trafficSource

3. Purposes

• Contact requests and commercial qualification — Respond to requests, qualify needs and manage commercial follow-up.
• Academy registrations and requests — Manage registrations, sessions and training-related communications.
• Job applications and talent pool — Manage applications, assessments and recruitment opportunities.
• Security and abuse prevention — Protect the site, prevent spam and secure forms.
• Data subject requests — Handle access, rectification, deletion or objection requests.

4. Legal bases

The applicable basis depends on the processing and territory involved (contract, legitimate interest, legal obligation or consent).

• Contact requests and commercial qualification : Pre-contractual steps and legitimate interest, depending on context.

5. Retention periods

• contactLead: 24 months (delete_or_anonymize)
• careerApplication: 24 months (delete_or_anonymize)
• academyRegistration: 36 months (delete_or_anonymize)
• newsletterSubscriber: until_unsubscribe (delete)
• analyticsEvents: 14 months (provider_retention)
• securityLogs: 90 days (delete)

6. Recipients

Data is accessible to authorized internal teams according to their role (sales, Academy, HR, support, administration).

7. Processors

The following providers are currently used or planned:

• Serveur privé virtuel (VPS) opéré par Sidéral Technologies — Website hosting and delivery.

8. International transfers

Depending on active tools, data may be processed outside your country. This section must be completed after validating all providers.

9. Security

• TLS encryption in transit
• Private storage for attachments
• Role-based access control (future RBAC)
• Minimal logging without unnecessary PII
• Rate limiting and server-side validation

10. Forms

Contact, Academy, applications and resource requests only collect data necessary for their purpose. Marketing is always separate from processing required to handle the request.

11. Your rights

Depending on your territory, you may request access, rectification, deletion, objection, consent withdrawal, portability or limitation where applicable.

12. Exercise your rights

Contact: contact@sideraltechnologies.com. You may also use our request form: /en/privacy/request.

Proportionate identity verification may be requested for certain sensitive requests.

13. Changes

This policy may evolve. The update date and version will be shown at the top of the page.