This notice covers asc.digital only: the contact form, the CRM audit, and booking a call. It does not cover a Salesforce org we implement for a client. That work is governed by the contract.
Who is responsible
Sublime Traders SAS is the controller for personal data collected through this website. The company trades as ASC Digital. It is a French société par actions simplifiée, SIREN 917 821 340, with its registered office at 122 rue Amelot, 75011 Paris. Andrei Stanciulescu is its president.
There is no separate data-protection officer. For any request about your data, use the contact form. That message reaches the person responsible.
What we collect, and why
We collect only what the page in front of you asks for. We do not buy contact lists, and we do not ask for special-category data such as health, religion, or biometrics. Please do not put that kind of information in a form.
The audit answers are used to draw your map and to write the short summary on the results page. They are sent to our server for that summary. They are not attached to an advertising profile. Your name and email from the audit form are stored with the form provider, separately from that summary.
| Data | Why | Legal basis |
|---|---|---|
| Contact form — name, work email, company, phone, message | Reply to your enquiry | Steps prior to a contract |
| CRM audit — the same contact fields, plus your eight answers | Show the maturity map and follow up on it | Steps prior to a contract |
| Booking — name, email, and the time you choose in Google Calendar | Hold the call | Steps prior to a contract |
| Connection logs — IP address, browser, pages requested | Keep the site secure and reliable | Legitimate interest |
| Language cookie — English or French | Remember the language you chose | Legitimate interest |
Who else sees it
We do not sell personal data. These providers process it for us:
- Ostrata (ostrata.io) receives contact-form and audit-form submissions, so we can reply.
- Google receives the details you enter in the booking calendar. Google also receives the audit answers — not your name or email — when the results page writes the summary.
- Vercel hosts the website and may process connection logs.
- Supabase stores the site’s pages and images. Form submissions are not stored there.
Transfers outside Europe
Vercel and Google may process data in the United States. Where a provider transfers personal data outside the European Economic Area, the transfer relies on the safeguards that provider publishes for the GDPR, including standard contractual clauses where those apply.
Ostrata processes the form fields you submit, on our behalf. Use the contact form if you want the detail a provider has given us about where a given submission is stored.
How long we keep it
Enquiry, audit, and booking details are kept while the conversation is active, then for up to three years after our last exchange if you do not become a client. That is the period the French data-protection authority recommends for prospect data.
If we sign a contract, we keep the records the engagement requires, and the records French law requires afterwards. Invoices are kept for ten years.
Connection logs are kept for no longer than twelve months. The language cookie lasts about a year, or until you clear it.
Your rights
You can ask us to:
- Access the personal data we hold about you.
- Correct it.
- Delete it.
- Limit how we use it.
- Receive a copy of the data you provided, in a portable format.
- Object to use based on legitimate interest, including any follow-up that is really prospecting.
How to complain
Use the contact form. We reply within one month. If you are not satisfied, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
Changes to this page
We update this page when the way the site handles personal data changes. The date under the hero is the version in force.