Legal
Privacy Policy
GDPR compliant (EU 2016/679) · Effective January 1, 2025
Summary: Lektaris only collects your email address, solely to send you the thematic dossiers you requested or to secure your Decision Circle access. We never sell any data. You may request deletion of your data at any time.
Article 1 — Data Controller
The controller responsible for processing personal data collected via the Lektaris website is:
- Entity: ATLAS
- Address: [full address to be completed]
- Email : contact@lektaris.com
Article 2 — Data Collected
Lektaris only collects data strictly necessary for the operation of the service.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Email address | Sending monthly thematic dossiers (newsletter) | Consent (Art. 6.1.a GDPR) | Until unsubscription |
| Email address | Decision Circle authentication (magic link) | Contract performance (Art. 6.1.b GDPR) | Subscription duration + 12 months |
| Subscription date | Member access management | Contract performance (Art. 6.1.b GDPR) | Subscription duration + 36 months |
| Technical logs | Security, fraud detection | Legitimate interest (Art. 6.1.f GDPR) | 30 days |
No browsing data (third-party analytics cookies, behavioral profiling) is collected at this time.
Article 3 — Data Recipients
Your data is never sold, rented, or transferred to third parties.
They may be shared with the following technical subprocessors, strictly for the purpose of providing the service:
- Vercel Inc. (hosting) — Data hosted on European servers (EU region) under Vercel's GDPR-compliant Data Processing Addendum.
- Email delivery service — [provider name to be specified: Resend, Brevo, etc.], for sending newsletters and authentication links, bound by a GDPR-compliant DPA.
Article 4 — Transfers Outside the European Union
Data is processed within the European Union. In the event of a transfer to third countries (notably the United States for Vercel), such transfer is governed by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914).
Article 5 — Your Rights
In accordance with the GDPR (Articles 15 to 22) and the amended French Data Protection Act, you have the following rights:
- Right of access: obtain a copy of your personal data;
- Right to rectification: correct inaccurate data;
- Right to erasure ("right to be forgotten"): request deletion of your data;
- Right to restriction: temporarily suspend processing;
- Right to portability: receive your data in a structured format;
- Right to object: object to processing based on legitimate interest;
- Right to withdraw consent: for the newsletter, via the unsubscribe link included in every email.
To exercise these rights, contact us at contact@lektaris.com. We respond within a maximum of 30 days.
Article 6 — Right to Lodge a Complaint
If you believe that the processing of your personal data is not compliant with applicable regulations, you have the right to lodge a complaint with the French CNIL (Commission Nationale de l’Informatique et des Libertés): cnil.fr.
Users residing in the Republic of Benin may also contact the APDP (Autorité de Protection des Données Personnelles du Bénin).
Article 7 — Cookies
Lektaris only uses a technical session cookie (lektaris_premium) to remember your Decision Circle member status during your browsing session. This cookie is necessary for the service to function and does not require your consent under Article 82 of the French Data Protection Act.
No advertising cookie, third-party analytics cookie, or behavioral tracker is placed on your device.
Article 8 — Security
Lektaris implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including:
- Encrypted transmission via HTTPS (TLS 1.3);
- Single-use, time-limited authentication links;
- Data access restricted to strictly authorized personnel;
- Hosting on ISO 27001-certified infrastructure.
Article 9 — Changes
This policy may be updated to reflect changes in the service or legal obligations. In the event of a substantial change, members will be notified by email at least 15 days before it takes effect.
Personal data contact: