Privacy Notice
Privacy Notice on the Protection of Personal
The protection of your personal data is a core concern of the SOPRA STERIA Group and of CS GROUP – France (hereinafter “CS GROUP”).
CS GROUP is an engineering company specialising in the design, development and operation of critical systems in the fields of space, defence and digital infrastructures.
This website, developed by CS GROUP as part of a partnership with the European Space Agency (“ESA”), aims to present a project involving a federation of Earth observation constellations, integrating innovative technologies, in particular artificial intelligence (AI) and inter satellite links (ISL).
The website also aims to inform potential users and contributors about the activities, solutions and associated research work related to this project (hereinafter referred to as the “Project”).
The purpose of this privacy notice is to ensure transparency regarding the processing of personal data of website users and to inform them of their rights.
This privacy notice is established in accordance with Regulation (EU) 2016/679 of 27 April 2016, known as the General Data Protection Regulation (“GDPR”), which governs the processing of personal data within the European Union.
All terms and definitions used in this privacy notice shall be understood within the meaning of the GDPR. The data controller undertakes to ensure the security, confidentiality and protection of personal data, as well as to enable the exercise of the rights granted to data subjects under the GDPR.
CS GROUP acts as the data controller within the framework of this Project, in partnership with the European Space Agency (ESA).
1. Are you concerned by this notice?
As soon as you complete the contact form : Contact – EO Virtual Constellation you consent to CS GROUP processing your personal data within the framework of the Project and you are therefore subject to this notice.
2. How can you control the processing we carry out on your personal data?
You have rights that enable you to exercise meaningful control over your personal data and the way we process it.
If you wish to exercise the rights described below, or if you have any questions regarding the use of your personal data under this notice, you are invited to contact us:
- By email : cs.dpo@cs-soprasteria.com
- By post to the following address : CS GROUP – France, 22, avenue Galilée – 92350 LE PLESSIS ROBINSON.
2.1. How can you control the processing we carry out on your personal data?
If you wish to access your personal data, we will provide you with a copy of the personal data covered by your request, as well as information relating to their processing.
Your right of access may be limited where provided for by applicable regulations.
In such cases, you must exercise your right of access through the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL), which will then contact us on your behalf.
2.2. You can request the rectification of your personal data.
If you consider that your personal data are inaccurate or incomplete, you may request that they be corrected or completed. In some cases, supporting documentation may be requested.
2.3. You can request the erasure of your personal data.
If you so wish, you may request the deletion of your personal data, within the limits permitted by law.
2.4. You may object to the processing of your personal data based on legitimate interest
If you do not agree with processing based on legitimate interest, you may object to such processing on grounds relating to your particular situation, by clearly specifying the processing concerned and the reasons for your objection.
We will no longer process your personal data unless there are compelling legitimate grounds for doing so, or where such processing is necessary for the establishment, exercise or defence of legal claims.
2.5. You may object to the processing of your personal data for commercial prospecting purposes.
You have the right to object at any time to the processing of your personal data for commercial prospecting purposes, including profiling to the extent that it is related to such prospecting.
2.6. You may request the restriction of the processing of your personal data.
If you contest the accuracy of the data we process, or if you object to the processing of your data, we will carry out a verification or review of your request. During the time required to examine your request, you may ask us to suspend the use of your personal data.
2.7. You have rights in relation to automated decision-making.
As a general rule, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, such automated decision-making may be carried out where it is necessary for the conclusion or performance of a contract entered into with us, authorised by applicable regulations, or based on your consent.
In all cases, you have the right to contest the decision, to express your point of view, and to request human intervention to review the decision.
2.7. You may withdraw your consent.
If you have given your consent to the processing of your personal data, you may withdraw this consent at any time.
If you wish to withdraw your consent to the processing of your personal data as part of the Project, please send a message to the following email address : cs.dpo@cs-soprasteria.com
| Subject | « Withdrawal of consent to the processing of personal data – EOVC Project » |
| Body text | « I hereby wish to withdraw my consent to the processing of my personal data relating to me, which are processed as part of the EOVC Project. » |
2.9. You may request the portability of part of your personal data.
You may request to receive a copy of the personal data you have provided to us, in a structured, commonly used and machine-readable format. Where technically feasible, you may also request that we transmit this copy to a third party.
2.10. How to lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – “CNIL”) ?
In addition to the rights mentioned above, you may lodge a complaint with the competent supervisory authority, which is generally the authority of your place of residence, namely the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL) in France.
3. Why and on what legal basis do we use your personal data?
Purpose of the processing:
- The personal data collected via the website are intended to gather feedback, opinions, and expressions of interest or contact requests relating to the Project.
This information helps to promote exchanges with stakeholders, identify potential partnerships, and contribute to the continuation, development, and improvement of the Project, which focuses on a federation of Earth observation constellations integrating innovative technologies, in particular artificial intelligence (AI) and inter‑satellite links (ISL).
The data are processed exclusively for these purposes and are not subject to any use that is incompatible with the objectives of the Project.
Legal basis:
- The processing of personal data is based on the data subject’s consent. By providing their personal data via the website, the data subject expressly agrees to the collection and processing of such data for the purposes described above.
The data subject may withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to such withdrawal, in accordance with applicable data protection regulations.
4. What types of personal data do we collect?
We collect and use your personal data, meaning any information that identifies you or makes it possible to identify you, whether directly or indirectly.
The personal data processed as part of the Project include the following:
| Last name |
| First name |
| Personal email address |
| Professional email address |
| Any other personal data that you may provide in the comments section of the contact form |
5. From whom do we collect personal data?
We collect personal data directly from you when you complete the contact form : Contact – EO Virtual Constellation
6. With whom do we share your personal data and why?
We share your personal data with:
- The European Space Agency (ESA) (relevant entity: PhiLab), as a partner of the Project, in order to enable exchanges related to Project monitoring, the analysis of feedback, and useful contacts supporting its development, mainly via email.
- The SOPRA STERIA Group (SSG), to which CS GROUP belongs, exclusively for internal management and collaboration purposes, notably through shared professional email mailboxes necessary for the processing and follow‑up of requests related to the Project.
These data sharing activities are strictly limited to the purposes of the Project and are carried out in compliance with the requirements of the GDPR.
7. International transfers of personal data
Personal data transfers may be carried out, in particular to Italy, in the context of exchanges with the European Space Agency (ESA – PhiLab).
More generally, such transfers may involve other ESA sites, which are exclusively located within the European Union.
Consequently, these transfers are carried out within a regulatory framework that ensures a level of data protection consistent with the requirements of the GDPR.
8. How long do we retain your personal data?
Your personal data are retained in accordance with the following conditions:
- They are retained in the active database for the entire duration of the Project, i.e. one (1) year from the initial date of collection.
- At the end of this period, your personal data are subject to intermediate archiving for a period of two (2) years, for administrative and traceability purposes.
- The data are then deleted no later than three (3) years after their date of collection.
9. Cookies
The website does not use any cookies or trackers.
No tracking, audience measurement, advertising, or third‑party cookie placement mechanisms are implemented during browsing of the website.
Consequently, no personal data are collected through cookies or other tracking technologies.
10. Security
Personal data processed as part of the Project are handled within digital environments based on Microsoft suites used by CS GROUP. Their protection is ensured in accordance with Microsoft’s security and compliance policies, which are designed to meet high standards of confidentiality, integrity, and availability.
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, alteration, or disclosure, in compliance with applicable data protection regulations, including the GDPR.
11. How can you stay informed about updates to this personal data protection notice?
In a constantly evolving technological environment, we regularly review this Notice and update it where necessary.
We invite you to consult the latest version of this document online, and we will inform you of any significant changes through our website.