Clarity before Commitment
GDPR Compliance
How Maison Stratégique meets the General Data Protection Regulation for individuals in the EU, EEA, and UK.
Translations of this page are provided for convenience. In case of any discrepancy, the English version prevails.
On this page
1. Our Commitment
Maison Stratégique is headquartered in Paris, France, and built its data practices around the General Data Protection Regulation (EU) 2016/679 (“GDPR”) from day one. This page explains the legal grounds we rely on, the rights available to you, and how to exercise them.
2. Legal Basis for Processing
We process personal data under one or more of the following legal bases:
- Contract — to create your account and deliver the Strategic Due Diligence Platform, the Go-To-Market Intelligence Platform, or the combined GTM Intelligence Bundle tier you subscribe to;
- Legitimate interest — to secure the Service, prevent fraud, and improve our predictive engines;
- Consent — for optional marketing communications and non-essential cookies;
- Legal obligation — to meet accounting, tax, and regulatory requirements.
3. Data Subject Rights
If you are located in the EU, EEA, or UK, you have the following rights under the GDPR:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to legal exceptions.
Right to Restrict Processing
Limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest or direct marketing.
Right to Withdraw Consent
Withdraw previously given consent at any time.
Right to Lodge a Complaint
Contact your local supervisory authority (e.g. the CNIL in France).
4. Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and compliance. You can reach the DPO through our Feedback page by selecting “Data Protection Enquiry” as the topic.
5. International Transfers
Where personal data is transferred outside the EEA — for example to a sub-processor providing infrastructure or support — we ensure an adequate level of protection through the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
6. Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and will inform affected individuals without undue delay where required by law.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in our Privacy Policy, or as required by applicable law, after which it is securely deleted or anonymized.
8. How to Exercise Your Rights
To exercise any of the rights above, submit a request via our Feedback page. We will respond within one month, as required by the GDPR. We may need to verify your identity before actioning certain requests.
If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection supervisory authority.