Privacy & Cookie Policy

1. Controller

Nastral is the controller for its website, business development and customer relationship processing. When processing personal data on a customer’s behalf through deployed solutions, Nastral may act as processor under a separate DPA. Contact: privacy@checkpaint.com; 9 rue des Colonnes, 75002 Paris, France.

2. Data collected

We may collect names, professional contact details, company and job title, inquiry content, account details, contracts and invoices, IP addresses, browser/device data, security logs and cookie identifiers. We do not intentionally request sensitive data through public contact forms.

3. Purposes and legal bases

We process data to respond to inquiries and prepare contracts (pre-contractual steps or legitimate interests); manage business relationships and deliver services (legitimate interests or contract where applicable); meet accounting and legal obligations; protect systems (legitimate interests); and conduct lawful B2B marketing (legitimate interests or consent where required). Non-essential cookies are based on consent where required.

4. Customer AI data

Personal data processed for customers is governed by the relevant DPA and documented instructions. Customer data is not used for unrelated AI training or other customers without separate authorization and a lawful basis.

5. Recipients and transfers

Authorized personnel and service providers may process data for hosting, communications, analytics, billing, security and operations. We do not sell personal data. Transfers outside the EEA, where applicable, use adequacy decisions, Standard Contractual Clauses or other lawful safeguards.

6. Retention

Data is retained only as necessary for the relevant purpose and legal obligations. Business inquiries, client records, accounting documents, security logs and cookie preferences have different retention periods, to be specified in an internal retention schedule and disclosed as applicable.

7. Security and rights

Appropriate organizational and technical safeguards are applied. Depending on law, individuals may request access, correction, deletion, restriction, portability, object to processing and withdraw consent. Contact privacy@checkpaint.com. EU individuals may complain to their supervisory authority, including CNIL.

8. Cookies

Strictly necessary cookies support site functionality and security. Optional analytics and advertising cookies, if deployed, require prior consent where applicable. Visitors must be able to accept, reject equally easily and later withdraw consent through Cookie Settings. The live cookie inventory must identify actual providers, purposes and lifetimes.

9. Changes

We may update this policy and publish its current version on our website.