Information notice
Processing of personal data in the context of consulting services
1. Purpose of this notice
This information notice is addressed to individuals whose data is processed by SAS Releaf Carbon (hereinafter "Releaf Carbon") in the course of delivering consulting services. It supplements the general privacy policy of the releafcarbon.com website.
2. Services covered
Releaf Carbon processes personal data in the context of the following services:
- Carbon Footprint (Bilan Carbone®) and decarbonation strategy
- Climate strategy and transition plan
- Life Cycle Assessment (LCA), FDES and EPD
- ESG reporting and CSRD compliance
- Decarbon'Action Diagnosis
3. Personal data processed
Identification and contact data
First name, last name, job title, professional email address, professional phone number.
Professional data
Company name and industry sector, headcount, revenue (where relevant to the scope of the engagement).
Environmental and operational data
Energy consumption, procurement, transport and production data - collected as part of the carbon accounting or analysis. This data relates to the company's operations and may, in some cases, contain personal information.
4. Purposes and legal bases
| Purpose | Data processed | Legal basis | Retention period |
|---|---|---|---|
| Delivering consulting services | Identification, contact, professional and environmental data | Performance of contract | Duration of engagement + 5 years (legal archiving) |
| Billing management | Identification, financial data | Legal obligation | 10 years (accounting obligations) |
| Service improvement and sector studies | Aggregated and anonymized data | Legitimate interest | No limit (anonymized data) |
| Post-engagement prospecting | First name, last name, professional email and phone | Legitimate interest | 3 years from the end of the engagement |
5. Recipients
Your data is processed by the Releaf Carbon consultants assigned to your project. It is not shared with third parties without your agreement, except as required by law or regulation. Any sub-processors (hosting providers, internal SaaS management tools) are bound by data processing agreements compliant with the GDPR.
6. Retention periods
Personal data collected during an engagement is retained for the duration of the engagement, then archived for 5 years under legal obligations, and 10 years for accounting data. After these periods, data is deleted or anonymized.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data.
To exercise these rights, contact us at: [email protected]. You also have the right to lodge a complaint with the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).
8. Contact
- Company
- SAS Releaf Carbon
- Address
- 2 rue de la Carnoy, 59130 Lambersart
- [email protected]
- Website
- releafcarbon.com
Last updated: April 2026