Privacy policy
Data controller
StarterLab, contact@starterlab.fr
Data collected
- Name, first name, email address of administrators and operators
- Name and first name of business network members (attendance)
- Name, first name, phone and email of session guests (kept for 24h maximum)
- Touch signature images (kept for 24h maximum)
- Aggregated attendance statistics (without identifiable personal data)
- Anonymized browsing data (Google Analytics, Microsoft Clarity)
Analytics and audience measurement tools
Anonymized audience measurement. Data is transmitted to Google LLC (United States). In accordance with GDPR, IP addresses are anonymized.
User behavior analysis (heat maps, anonymized recordings). Data is processed by Microsoft Corporation.
Retention period
- Guests and signatures : automatic purge 24h after each session
- User accounts : duration of contract, then deletion upon request
- Aggregated statistics : indefinite retention (no personal data)
- Analytics data : 26 months (Google Analytics) / 13 months (Clarity)
Your rights (GDPR)
In accordance with GDPR (Regulation 2016/679), you have the following rights:
- Right to access your personal data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to portability
- Right to object to processing
To exercise these rights: contact@starterlab.fr, Response within 30 days.
Security
Data is hosted on a secure server in France with SSL/TLS encryption (Let's Encrypt). Passwords are hashed using bcrypt. Access is role-controlled. Sensitive guest data is truncated on display.