Effective date: 11 July 2026 — version 2026-07-11.1
This policy describes how FSTD-Consulting (SASU) processes personal data collected through this website, in accordance with the EU General Data Protection Regulation (GDPR). It applies in particular to the demo-request / contact form on this site.
1. Who we are (data controller)
- Controller: FSTD-Consulting, SASU — publisher of FSTD-OPS
- Registered office: Rue des Iles Kerguelen, Parc Edonia, Bâtiment M, 35760 Saint-Grégoire, France
- Registration: RCS Rennes — SIREN 844 243 659 00019 — VAT FR73844243659
- Privacy contact: dpo@fstd.aero
2. What we collect, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Details you enter in the demo-request form: name, company and work email (required); title, job position, phone numbers, country and message (optional) | Responding to your request and managing the resulting commercial relationship | Art. 6(1)(b) — steps taken at your request prior to entering a contract |
| Your email address, used once to send a 6-digit verification code | Verifying that the request really comes from the address given (anti-spam, data accuracy) | Art. 6(1)(b) — necessary to process your request |
| Marketing preference (an optional, never pre-ticked checkbox) | Sending occasional product news and updates by email — only if you opt in | Art. 6(1)(a) — your consent, withdrawable at any time |
| A hashed and truncated form of your IP address | Rate limiting and abuse prevention on the form | Art. 6(1)(f) — our legitimate interest in protecting the service |
You are never obliged to provide the optional fields; the required fields are the minimum we need to answer you.
3. Where your data is stored
Form submissions are held on this website only for the few minutes the email verification takes (at most 10 minutes), then transferred to our customer-relationship system and deleted from the website. Your file in the CRM — including a record of the privacy notice you acknowledged and any marketing consent you gave — is the single place your data lives.
Our processors are the companies hosting our website and CRM (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France) and our email delivery provider. We do not sell or share your data with anyone else, and we do not transfer it outside the European Economic Area.
4. How long we keep it
| Data | Retention |
|---|---|
| Prospect records (no customer relationship established) | 36 months after our last contact with you, then deleted or anonymised |
| Customer records | Duration of the relationship + 60 months; invoices and accounting documents 10 years (legal obligation) |
| Consent records | Kept with your file, removed with it |
| Pending form data on this website (before verification) | At most 10 minutes |
| Rate-limiting counters (hashed IP) | At most 1 hour |
| Backups | Rotated within 90 days |
5. Marketing emails
We only send marketing email if you ticked the opt-in box, and every message includes a way to unsubscribe. Declining or withdrawing consent never affects the handling of your enquiry. To withdraw consent, use the unsubscribe link, reply to any of our emails, or write to dpo@fstd.aero.
6. Your rights
You may at any time request access to, rectification, erasure or a copy (portability) of your personal data, ask us to restrict its processing, object to processing based on our legitimate interest, and withdraw any consent you have given. Write to dpo@fstd.aero — we respond within one month. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
7. Cookies and tracking
This site sets no advertising or analytics cookies and uses no third-party trackers. Only technically necessary cookies (such as security cookies) may be set.
8. Security
The site is served over HTTPS, verification codes are stored hashed and expire automatically, form data is transmitted to the CRM over an encrypted connection, and IP addresses used for rate limiting are hashed and truncated.
9. Changes to this policy
When we change this policy or the consent texts shown on our forms, we update the version number at the top of this page. Consents are always recorded together with the version of the text that was displayed.