Astran Raises $5 Million to Drive Adoption of the Next Standard for Secure Cloud Storage

Astran Logo

Privacy Policy


Last modified: January 02, 2023

At Astran we respect the privacy rights of the users of our website "https://www.astran.com/" (hereinafter the "Site") and of our customers. We invite you to read this privacy policy (hereinafter the "Policy") in order to understand how and why your personal information (hereinafter the "Data") is used and to know your rights regarding your Data.

1. How do we collect your Data?

Data provided by you

We collect Data about you when you browse our Site, fill out a data collection form (e.g., contact form, newsletter subscription form), when you send us an email or when you subscribe to our products or services.
Types of Data collected: identity data (last name, first name, job title, country), contact data (telephone number, e-mail address, postal address) as well as transaction data (payment information, information on the services or products purchased).

Data provided by third parties

Third parties may also provide us with your Data when you express your interest in our services. In this regard, we have verified that these third parties have obtained your consent where required or are otherwise legally authorized or required to disclose your Data to us.

Data collected automatically

Your navigation on the Site may result in the use of cookies. Cookies consist of a small text file installed by your browser on your hard drive when you visit the Site. Their purpose is, in particular, to collect information relating to your browser or your navigation on the Site.
Types of Data collected: Connection and usage data such as IP address, browser type and settings, and information about your activity, pages and files viewed, searches and other actions taken.
For more information about our use of cookies, see the cookies section of the Policy.

2. Why do we collect your Data?

To communicate with you and manage your requests: This is the case, for example, when you submit a question via the dedicated form. We use your Data to contact you, according to your choice, by phone or email. In this case, the legal basis that legitimizes the processing of your Data is the legitimate interest of Astran.
To manage your contract: We use your Data to enable us to perform our contractual obligations to you such as providing our products and services and managing your support requests. In this case, the legal basis for processing your Data is the performance of the contract by Astran.
To send you our newsletter: In this case, the legal basis that legitimizes the processing of your Data is your free, specific, informed and unequivocal consent.
To conduct promotional activities: Such as sending e-mail messages of a commercial nature regarding Astran products, services and offers. In this case, the legal basis that legitimizes the processing of your Data is your free, specific, informed and unequivocal consent.
To carry out promotional activities specific to Astran's customers: Such as sending e-mail messages of a commercial nature regarding products and services similar to those already provided by Astran. In this case, the legal basis that legitimizes the processing of your Data is the legitimate interest of Astran.
To improve your experience on our Site: We use your browsing data to determine the number of visits and sources of traffic to our Site in order to measure and improve its performance. In this case, the legal basis for processing your Data is your free, specific, informed and unequivocal consent.
To manage events: We use your Data to organize the events you register for or attend, including sending related communications. In this case, the legal basis that legitimizes the processing of your Data is the legitimate interest of Astran.

3. Who has access to your Data?

We may disclose your Data to the following categories of recipients:

Only authorized personnel of Astran

Your Data will only be processed by persons in the context of their functions and missions. These persons are bound by a duty of confidentiality and have been trained to prevent loss, destruction, improper access or unauthorized use of your Data.

Our third party service providers

We use third party service providers to help us fulfill some of the purposes described in this Policy, such as measuring the audience on our Site or sending our newsletter. These service providers only have access to the Data necessary to perform the tasks they are asked to perform and are contractually bound to respect the confidentiality and security of your Data.

Any law enforcement agency, regulator, government agency, court or other appropriate third party, professional advisors

Your Data will be disclosed when we believe it is necessary to (a) respond to the request of a public or administrative authority, (b) comply with the requirements of the law or legal process, or (c) protect or defend our legal interests or our property, our Site or our customers.

An actual or potential buyer (and its agents and advisors)

Your Data will be disclosed in the event of a reorganization, merger, sale, assignment or transfer of all or part of our business, assets or securities (including in connection with any bankruptcy or similar proceeding).

Any other person if you have consented to the disclosure.

Your Data will be disclosed in the event of a reorganization, merger, sale, assignment or transfer of all or part of our business, assets or securities (including in connection with any bankruptcy or similar proceeding).

Any other person if you have consented to the disclosure

4. How long do we keep your Data?

We keep your Data for the time strictly necessary for the purposes for which it was collected. The nature of the Data and the purpose for which it was collected will determine the appropriate retention period.


PurposeDataRetention periode
External communication managementIdentity and contact data3 years from the end of the relationship with the data subject if he or she is a customer and 3 years from the last contact if the data subject is a prospect or until the exercise of the right of opposition or withdrawal of consent.
Billing managementIdentity and contact data10 years from the date of collection of the information.
Cookie managementNavigation data13 months from the date of collection of the information.
Management of the relationship and follow-up with the clientIdentity and contact dataDuration of the contractual contractual relationship.
Contract managementData necessary for the execution of the contractDuration of the contractual contractual relationship.
Duration of the contractual contractual relationship.Data necessary for the management of the requestUntil Astran responds to the request.

Data may be kept as an intermediate archive separate from the active database, with restricted access, insofar as there are specific legislative or regulatory provisions, for example, to meet accounting, social or tax obligations, or if the Data is of interest in the event of litigation, justifying its retention for the duration of the applicable statute of limitations/forclosure rules.


After the expiration of the applicable retention periods, we may anonymize your Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use such information without any particular retention period.

5. Is your Data transferred outside the EEA?

We may share your Data with service providers who may be located outside the EEA, which involves the transfer of your Data outside the EEA.


In these circumstances, Astran assures you that your Data is transferred to countries whose level of personal data protection has been deemed adequate by the European Commission or, if not, Astran will take contractual safeguards (such as contractual clauses approved by the European Commission) signed with the party receiving the Data.

6. What are your rights?

In connection with the processing of your Data, you have the following rights:

Right of access: you have the right to access your Data and to obtain a copy.
Right of rectification: you may request the modification or updating of your Data, if it is inaccurate or obsolete.
Right of deletion: you may invoke the right to have your Data deleted if it is no longer necessary for the purposes of our processing, if your consent or your opposition to one or more processes is revoked, if the processing is deemed unlawful, or if a legal obligation would require the deletion of your Data.
Right to limitation: You may request that your Data be limited solely to storage purposes, excluding any other processing, for the time necessary to rectify your Data, or in the event of unlawful processing for which you do not wish to be deleted outright, or in the event that the Data we process could be useful to you in your administrative or legal proceedings, or finally, in the event that you have objected to the processing of your Data and a weighing of the interests involved is under way to determine the legitimacy of your request.
Right to object: You may exercise your right to object to the processing of your Data (i) under certain conditions, where we process your Data on the basis of our legitimate interest or (ii) at any time where we process your Data for direct marketing purposes. We may object to your request if we believe that Astran's legitimate interest overrides the grounds for your request, for example in the case of defending our interests in court.
Right to withdraw your consent at any time: where processing is based on your consent, you may withdraw your consent at any time. However, this will not affect the lawfulness of previous processing.
Right to portability: you may request to receive the Data you have provided to us or ask us to transmit it to a third party that you have indicated to us, in a structured format that can be used by an automated service.
Right to Set Post-Mortem Instructions: You may provide us with instructions on how Astran should handle your Data after your death.
If you feel, after contacting us, that your rights have not been respected, you may file a complaint with the CNIL.
If we are unsure of your identity, we may need to ask you for additional information to help us confirm your identity and ensure the exercise of your rights. We may also contact you to ask for more information about your request in order to expedite our response.
We try to respond to all legitimate requests within one month. Sometimes our response may take longer than one month if your request is particularly complex or if you have submitted multiple requests. In this case, we will let you know and keep you informed.

7. What types of cookies are used on the Site?

7.1 Essential technical cookies

Technical cookies enable navigation on the Site and the use of all its features. Without these cookies, navigation on the Site would be less fluid than expected and you might not be able to access the Site or certain services or features requested.

Cookie servicesCookie namePurposeRetention periode
Astrananalytics-infoThis cookie is used to know if the user has seen the toast message about cookies.14 days

7.2 Audience measurement cookies

Audience measurement cookies collect information about the way you browse the Site (such as the most frequently visited pages, recurring Site usage patterns, etc.). These cookies allow us to improve the overall functioning of the Site and help us to understand any difficulties encountered during its use. If you refuse this category of cookies, we will not be able to establish statistical analysis or monitor the performance of our Site.

The data collected is immediately anonymized, is used only for audience measurement by our services, and the raw data is deleted after 13 months, as stipulated by the General Data Protection Regulation (GDPR), and as recommended by the CNIL.

Cookie servicesCookie namePurposeRetention periode
MatomoAnalytics_pk_idCe cookie est utilisé pour conserver la valeur de l'identifiant visiteur permettant de reconnaître les visiteurs qui reviennent sur le site.13 month
MatomoAnalytics_pk_sesThis cookie is used to keep the session active for 30 minutes after the visitor's last action.30 minutes
MatomoAnalytics _pk_refThis cookie is used to store information about the visitor's referrer (the link from which the visitor arrived at the site).6 month
MatomoAnalytics_pk_testcookieThis cookie is used to verify that the visitor's browser accepts cookies.Session, until the end of the browsing session
MatomoAnalyticsmatomo_sessidThis cookie is used to prevent fraud.Session, until the end of the browsing session

Opt-Out

The Matomo software has been specifically set up to be opt-out of user consent in accordance with current regulations. You can uncheck the box at the bottom of the privacy policy if you do not wish to appear in the analytics of this software.

Setting Cookies

You can set your browser to refuse the use of cookies. Please be aware that refusing to use "essential" cookies may impact the functionality of our Site.

These settings are specific to each browser, and can be accessed via your browser's help menu:

For Internet Explorer™: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

For Safari™: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

For Chrome™: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647

For Firefox™: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies

We also provide:

8. Contacting Us

If you have any questions about this Policy, have a request or complaint about your Data, or wish to exercise your rights, you may contact us as follows :

  • By email at the following address: support@astran.io
    Specifying in the subject line: "Astran Privacy Policy".
  • By mail at the following address: 19 Boulevard Poissonnière, 75002 Paris, France.

Astran Logo
  • 19 Boulevard Poissonnière, 75002 Paris, France
  • hello@astran.io
  • +33 1 89 16 93 12

© 2023 Astran. All rights reserved.