Last updated: 2025-02-06
This privacy policy describes how MetaStrat collects, uses and protects your personal data when you use the site and the services connecting Clients and Freelancers (hereinafter the “Site”). The Site's services are reserved for professionals.
1. Data controller
The data controller is the company METASTRAT, a simplified joint-stock company (société par actions simplifiée) with a share capital of 1,000 euros, whose registered office is at 11 rue de la Pie Grèche, Gigean (34770), France.
Contact: contact@metastrat.com, tel.: 06 82 25 10 98.
2. Data collected
Depending on how you use the Site, we may process in particular:
a) Identification and account data
Last name, first name, business e-mail, telephone number, encrypted password, profile information, company information (company name, SIRET number, etc.), preferences and settings.
b) Data relating to requests and connections
Information provided when making a mission request, submitting a need, replying to a mission, operational exchanges, history of connections.
c) Contractual and invoicing data
Quotes, contracts, invoices, information necessary for managing the commercial relationship and for accounting.
d) Compliance documents (Freelancers)
Documents required under due-diligence / transparency obligations and rules relating to the fight against undeclared work and fraud, and making them available to Clients where necessary.
e) Technical and browsing data
Connection data and technical logs (IP address, technical identifiers, date/time, pages viewed), and data from cookies/trackers (see the “Cookies” section). The company also states that it records non-personal statistical information relating to the use of the service.
3. Purposes and legal bases
We process your data for the following purposes:
- Providing the service and performing the contract (account creation, connecting parties, mission management, support). Legal basis: performance of a contract / pre-contractual measures.
- Managing invoicing, accounting and administrative follow-up. Legal basis: legal obligation and/or performance of the contract.
- Complying with our compliance obligations (vigilance, verifications, fraud prevention, etc.). Legal basis: legal obligation.
- Improving the Site, security, prevention of abuse and incidents (e.g. logging, detection of abnormal activity). Legal basis: legitimate interest.
- Marketing and communication (information about the service, content). Legal basis: consent (where required) and/or legitimate interest (B2B marketing within the applicable legal framework).
4. Recipients of the data
Your data may be accessible:
- To authorised persons at MetaStrat (support, operations, administration).
- To Clients and Freelancers, where necessary for the connection and the performance of a mission (for example, information sent to the Client at their request as part of the connection).
- To our technical processors (hosting, transactional e-mail, analytics tools, support, payment where applicable), acting on our instructions and with contractual safeguards.
- To the competent authorities, if the law so requires.
5. Transfers outside the European Union
If some of our providers are located outside the EU, we put in place appropriate safeguards (e.g. standard contractual clauses) and, where required, additional measures.
6. Retention periods
We keep your data only for as long as necessary for the purposes described:
- Account and service-related data: for as long as the account is used, then archiving/deletion according to legal and evidentiary needs.
- Prospects / requests with no follow-up: in principle 3 years from the prospect's last contact / the end of the commercial relationship, unless the law provides otherwise.
- Accounting documents (invoices, supporting documents, etc.): 10 years from the close of the financial year (usual retention period for accounting documents).
- Audience measurement data (if used): periods aligned with the applicable recommendations (see Cookies).
7. Your rights
In accordance with the GDPR, you may request: access, rectification, erasure, restriction, objection and portability (subject to conditions). You may also withdraw your consent at any time where the processing is based on it.
To exercise your rights, write to contact@metastrat.com stating the purpose of your request. Proof of identity may be requested in case of reasonable doubt.
You may also lodge a complaint with the competent supervisory authority, in particular the CNIL.
8. Cookies and trackers
The Site may use cookies/trackers:
- Necessary for operation (authentication, security, language preference, etc.).
- Audience measurement (if enabled): to understand how the Site is used and improve the service.
- Functional (if enabled): e.g. embedded content, third-party tools.
Where required, your consent is requested via a banner. You can manage your preferences through the Site's consent management module.
For audience measurement, the applicable recommendations provide in particular for a tracker lifetime of up to 13 months and retention of the information collected for up to 25 months (depending on configuration and framework).
9. Security
MetaStrat implements appropriate technical and organisational measures (access control, logging, backups, encryption in transit, etc.) to protect your data against loss, unauthorised access, alteration or disclosure.
10. Updates to the policy
We may amend this policy to reflect legal, technical or functional changes. The update date appears in the header.