Privacy Policy

1. Data controller

The controller of the data related to the Astraema website can be contacted at the following address: contact@astraema.com.

2. Data collected

2.1 Account data

If you create an account, Astraema may collect:

• your email address, used as your login;
• your password, stored in hashed, unreadable form;
• a display name, if you choose to provide one.

2.2 Astrological data

To calculate or save a chart, you can enter a name associated with the chart, a date of birth, a time of birth and a place of birth.

This information is used to perform the calculations and generate the astrological content requested. Depending on the information entered, it may constitute personal data.

It is never sold, rented or used for advertising or commercial purposes.

2.3 Use without an account

In guest mode, the information entered for a calculation is used to generate the requested result and is not saved as charts in a user account.

Some data may nevertheless be processed temporarily when technically necessary for the service to work.

2.4 Technical data

Astraema may temporarily keep certain technical data needed for the security and operation of the site, such as the IP address, the date and time of a login or request, and information about technical errors.

3. Purposes

Data is used to:

• allow an account to be created and managed;
• allow logging in to the site;
• calculate the astrological charts requested;
• save charts when the user chooses to;
• generate the interpretations and analyses requested;
• ensure the security, maintenance and proper operation of the site.

Astraema does not use personal data for targeted advertising, commercial profiling or the resale of data.

4. Legal basis

Depending on the nature of the processing, data is processed:

• to provide the features or services requested by the user;
• on the basis of consent where required;
• on the basis of Astraema's legitimate interest in ensuring the security, maintenance and proper technical operation of the site;
• where processing is necessary to comply with a legal obligation.

5. Retention period

• Account data is kept as long as the account remains active, then deleted when it is no longer needed, subject to any legal obligations.
• Saved charts are kept until the user deletes them or until the account is deleted.
• Data processed only to generate a result without saving is not kept as saved charts.
• Logs and technical data are kept for as long as necessary for the security, diagnosis and operation of the site, then deleted or anonymized.
• Detailed audience measurement data is kept for 90 days, then deleted. Only a numerical summary, containing no personal data, is kept beyond that.

Deletion of an account and its associated data can be requested at contact@astraema.com.

6. Recipients and technical service providers

Data is accessible only to the extent necessary for the operation and administration of Astraema.

Some processing may involve technical service providers acting on behalf of Astraema, in particular for hosting, security or certain site features.

Some interpretation features may use an artificial intelligence service. In that case, the analysis is carried out from the astrological data of the chart previously calculated by Astraema, sent in a structured form. The artificial intelligence service does not need to receive the raw birth data used to calculate the chart.

These providers are required to process data within the scope of the service provided and in accordance with applicable data protection requirements.

Data may also be disclosed to the competent authorities when required by a legal obligation.

Personal data is never sold, rented or disclosed to third parties for advertising or commercial purposes.

7. Data transfers

When the use of a technical service provider involves processing data outside the European Economic Area, Astraema ensures that this processing relies on a mechanism recognized by applicable regulations and on appropriate data protection safeguards.

8. Cookies and technical storage

Astraema only uses cookies or storage mechanisms that are strictly necessary for the site to work, in particular to keep a login session active.

When the site is offered in several languages, a cookie ("astraema_langue") stores the language in which you viewed the site, so that it is shown to you in that language on your next visits. It contains no personal data and is used for nothing else.

No advertising or commercial profiling cookies are used.

9. Audience measurement

Astraema measures its traffic with its own tool, hosted on the site, without cookies and without any external service. For each page displayed, the following are recorded: the page address, the date and time, the time spent on it, the country when the host provides it, the site that sent you here, the type of device (phone or computer), whether the page displayed correctly, and your account number if you are logged in.

On the pages presenting the Ishtar Key, a few actions are also counted: opening its section, expanding "Learn more", following the link to the article. Only a daily total per page is kept, with no link to the person who clicked.

No IP address is kept. To avoid counting the same visit several times in one day, a technical fingerprint is calculated from the connection data and a secret key, then stored in a form that cannot be traced back to a person. This fingerprint changes every day and is never reused from one day to the next.

These measurements remain internal to the site: they are not passed on to anyone, are not used for advertising or profiling, and do not make it possible to identify visitors.

10. Your rights

In accordance with the GDPR, and under the conditions set by the regulations, you can request:

• access to your personal data;
• its correction;
• its deletion;
• the restriction of certain processing;
• the portability of your data;
• to object to certain processing;
• to withdraw your consent when processing is based on it.

To exercise these rights: contact@astraema.com.

You also have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where an alleged infringement took place.

11. Security

Astraema implements technical and organizational measures designed to protect personal data, including password hashing, the use of an HTTPS connection and restricted access to data.

Since no computer system can guarantee absolute security, in the event of an incident affecting personal data, the people concerned will be informed where required by regulations.

12. Minors

Astraema is not intended for people under 16. Minors must obtain permission from their parents or legal guardian before creating an account.

13. Changes to this policy

This policy may be changed to reflect developments in the site, its features, its service providers or applicable regulations.

The date of the last update appears at the top of this page.