PRIVACY & DATA PROTECTION

Privacy and personal data.

Last updated: October 2026

Data controller

Consilium & Potentia SASU is responsible for the processing described in this notice.
16 avenue de l’Europe, 67300 Schiltigheim, France.

For privacy questions or to exercise your rights, use our Contact page at https://www.consiliumetpotentia.com/contact and select “Privacy & data protection”. You may instead write to “Privacy & Data Protection — Consilium & Potentia” at the postal address above. Please describe your request and provide a way for us to reply; do not send identity documents unless they are reasonably needed and we ask for them.

Information we process

When you contact C&P, we process the information you provide, such as your name, email address, organisation if supplied, enquiry category and message. Please provide only information relevant to your request. If you do not provide the information needed to answer, we may be unable to deal with the enquiry.

Our website providers also process technical information needed to deliver pages, operate the contact form, prevent abuse and maintain security.

If you accept optional Google Analytics, usage information can include cookie-based identifiers, pages and page titles viewed, referral and campaign information, browser/device characteristics and approximate location. These data may be personal data even though we do not use them to identify you by name.

Purposes and legal bases

We use contact information to respond to professional enquiries, consider mandates and partnerships, handle career or internship enquiries and manage the resulting professional relationship. Depending on the request, processing is based on taking steps at your request before a contract, our legitimate interests in handling professional communications, or a legal obligation. Website delivery, security and abuse prevention serve our legitimate interests in operating a secure website.

Optional Google Analytics processing is based on your consent. Refusing it does not prevent access to the website or contact form. We use the consent preference solely to remember and respect your choice.

For the separate, limited Framer Analytics statistics described below, we rely on our legitimate interests in understanding the use and performance of our website and improving it. You may contact us to object to processing of personal data on that basis. The Google Analytics choice does not switch Framer Analytics off.

Recipients and service providers

Within C&P, information is available only to people who need it for the relevant purpose.

Framer B.V. provides website hosting and native form infrastructure. Form submissions are delivered by email, so providers supporting that delivery also process information as needed to provide their services.

Google provides Google Analytics 4 and Google Tag Manager and receives analytics information when you consent. Relevant affiliates and service providers may participate in delivering those services. Information about provider processing and transfers is linked below.

C&P does not sell your personal information. We do not use the analytics integration to collect Contact message contents, names, email addresses or organisation names. Please do not put personal information in URLs or campaign links. Analytics identifiers and associated technical data should not be confused with anonymous data.

Contact information retention

We retain contact information only for the period needed for its purpose:

  • Enquiries about potential mandates, partnerships and general professional contacts may be retained for up to three years after the last relevant contact, unless a contractual relationship or legal requirement justifies a different period.

  • Career and internship information is kept while the application is considered. If it is kept for future opportunities, we inform the applicant of the purpose, retention period and applicable basis.

  • Contractual, legal and regulatory records may be retained for the applicable statutory or contractual period.

You may request earlier deletion where the applicable law permits it.

International processing and safeguards

Framer, Google and their service providers may process information outside the European Economic Area, including in the United States. This does not mean that all processing takes place outside Europe or that all information remains in Europe.

The providers’ published terms describe transfer mechanisms including adequacy decisions, the EU–US Data Privacy Framework for eligible certified recipients, and standard contractual clauses where applicable. The relevant mechanism depends on the recipient and transfer. You may request information about the safeguards applicable to C&P’s processing, including how to obtain a copy where applicable, through the Contact page or by post using the details above.

Provider information:

Your rights

Subject to the conditions in applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Updates

We may update this notice to reflect changes to the website, processing or legal requirements. The revision date will be shown above.