Dorothée Casanova

Legal

Privacy policy

Last updated:

This English version is provided for convenience. Only the French version is legally binding.

Data controller

Personal data collected on the website https://dorotheecasanova.com (the "Site") and in connection with the services is processed by Dorothée Benady, sole proprietor trading as "Dorothée Casanova", 17 rue Lepic, 75018 Paris, France, SIRET 833 717 267 00011, reachable at contact@dorotheecasanova.com.

This policy describes what data is processed, why, for how long, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

Data processed

Depending on how you use the Site and the services, the following data may be processed:

  • Identity and contact details: surname, first name, email address and, where applicable, phone number, provided when ordering or getting in touch.
  • Birth information: date, time and place of birth of the people concerned by the study ordered. This information is essential to draw up a birth chart.
  • Orders and invoicing: services ordered, amounts, history. Payment is processed by Stripe; full bank card details are never accessible to the data controller.
  • Correspondence: the content of emails and of the information provided for the study, as well as the reports and deliverables produced.
  • Audience measurement: browsing data collected without cookies and without any persistent identifier (see the cookie policy).

Data concerning third parties and children

Some services concern a person other than the client: a partner (Couple compatibility) or a child (Parent-child analysis, child's natal chart).

By providing a third party's birth information, you guarantee that you are entitled to do so: the agreement of the person concerned for a partner; the status of holder of parental authority for a child. This data is used exclusively to carry out the study ordered; it is never used to contact the person concerned, nor for any other purpose. The person concerned may at any time exercise the rights described below over the data relating to them.

Purposes and legal bases

  • Performing the services ordered (preparing the chart, consultation, writing and sending the studies): performance of the contract (art. 6.1.b GDPR).
  • Managing the client relationship (confirmation, booking, correspondence, complaints): performance of the contract.
  • Invoicing and accounting and tax obligations: legal obligation (art. 6.1.c).
  • Responding to a contact request: pre-contractual measures or legitimate interest in responding to enquiries.
  • Anonymous audience measurement of the Site: legitimate interest in understanding how the Site is used in order to improve it, through a system without cookies and without cross-referencing with other processing.

No data is sold or rented. No decision producing legal effects is taken on the basis of fully automated processing.

Recipients and processors

The data is intended for the data controller only. Technical service providers have access to it strictly to the extent necessary for their tasks:

  • Vercel Inc. (United States): Site hosting.
  • Stripe (Stripe Payments Europe Ltd, Ireland): secure payment processing.
  • Google (Google Ireland Ltd): video calls (Google Meet) for consultations and professional email (Google Workspace) for correspondence and delivery of the studies.
  • Cal.com, Inc. (United States): online booking for consultations.
  • PostHog (hosted in the European Union): cookieless audience measurement.

Transfers outside the European Union

Some providers (notably Vercel, Stripe, Google, Cal.com) may process data in the United States. These transfers are governed by the mechanisms provided for in articles 44 et seq. of the GDPR: an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

Retention periods

  • Birth information and completed studies: kept for the duration of the client relationship and then for 3 years after the last service, in order to respond to any follow-up request; deleted afterwards, or earlier upon request.
  • Order data and invoices: 10 years (accounting obligation).
  • Emails and contact requests with no commercial follow-up: 3 years after the last exchange.
  • Cookie consent choice: 13 months (see the cookie policy).

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to set directives on what happens to it after your death. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing already carried out.

To exercise these rights, write to contact@dorotheecasanova.com stating your request; you will receive a reply within one month. Proof of identity may be requested in the event of reasonable doubt as to the identity of the requester.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr.

Security

Appropriate technical and organisational measures protect your data: the Site is served over HTTPS, payment is delegated to Stripe (PCI DSS certified), access to the data is limited to the data controller, and providers are chosen for their security guarantees. Birth information and the content of the studies are treated with strict confidentiality, in the same way as the content of consultations.

Updates

This policy may be updated, in particular if the services or the tools used change. The date of the last update appears at the top of the page; the version published on the Site prevails. In the event of translation, only the French version is authoritative.