Information notice

Processing of personal data in the context of consulting services

1. Purpose of this notice

This information notice is addressed to individuals whose data is processed by SAS Releaf Carbon (hereinafter "Releaf Carbon") in the course of delivering consulting services. It supplements the general privacy policy of the releafcarbon.com website.

2. Services covered

Releaf Carbon processes personal data in the context of the following services:

  • Carbon Footprint (Bilan Carbone®) and decarbonation strategy
  • Climate strategy and transition plan
  • Life Cycle Assessment (LCA), FDES and EPD
  • ESG reporting and CSRD compliance
  • Decarbon'Action Diagnosis

3. Personal data processed

Identification and contact data

First name, last name, job title, professional email address, professional phone number.

Professional data

Company name and industry sector, headcount, revenue (where relevant to the scope of the engagement).

Environmental and operational data

Energy consumption, procurement, transport and production data - collected as part of the carbon accounting or analysis. This data relates to the company's operations and may, in some cases, contain personal information.

4. Purposes and legal bases

PurposeDelivering consulting services
Data processedIdentification, contact, professional and environmental data
Legal basisPerformance of contract
Retention periodDuration of engagement + 5 years (legal archiving)
PurposeBilling management
Data processedIdentification, financial data
Legal basisLegal obligation
Retention period10 years (accounting obligations)
PurposeService improvement and sector studies
Data processedAggregated and anonymized data
Legal basisLegitimate interest
Retention periodNo limit (anonymized data)
PurposePost-engagement prospecting
Data processedFirst name, last name, professional email and phone
Legal basisLegitimate interest
Retention period3 years from the end of the engagement

5. Recipients

Your data is processed by the Releaf Carbon consultants assigned to your project. It is not shared with third parties without your agreement, except as required by law or regulation. Any sub-processors (hosting providers, internal SaaS management tools) are bound by data processing agreements compliant with the GDPR.

6. Retention periods

Personal data collected during an engagement is retained for the duration of the engagement, then archived for 5 years under legal obligations, and 10 years for accounting data. After these periods, data is deleted or anonymized.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data.

To exercise these rights, contact us at: [email protected]. You also have the right to lodge a complaint with the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

8. Contact

Company
SAS Releaf Carbon
Address
2 rue de la Carnoy, 59130 Lambersart
Website
releafcarbon.com

Last updated: April 2026