Privacy Policy

Version 2.1 - in force since 15 October 2026.

This policy describes how Astrotheme processes the personal data of the visitors and customers of its website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the amended French Data Protection Act No. 78-17 of 6 January 1978.

1. Data controller

The data controller is Astrotheme, a French simplified joint-stock company (société par actions simplifiée) whose registered office is located at 36 rue Scheffer, 75016 Paris, France, registered with the Paris Trade and Companies Register under number B 442 600 441.

For any question about your data, you can write to [email protected] or to Astrotheme, Customer Service, 36 rue Scheffer, 75016 Paris, France.

2. Data we process

• Account data: email address, login credentials, date of account creation and date of last login.
• Birth profiles: name or first name, date, time and place of birth. These profiles may concern yourself or third parties, when you enter them to obtain a relationship or compatibility report.
• Favourites: the celebrities you have saved in your account.
• Order data: reports ordered, amounts, currency, dates, transaction reference, delivery email address, IP address at the time of the order, date and time of your request for immediate performance and of your waiver of the right of withdrawal, as well as the birth data and parameters used to produce the report.
• Payment data: collected and processed directly by our payment provider. Astrotheme has no access to your banking details and does not store them.
• Newsletter: your subscription choice and the date on which you expressed it.
• Login log: date, method (password entry or automatic login) and language of each login to your account.
• Technical data: IP address and data from the cookies and trackers described in section 8.

3. Purposes and legal bases

• Providing the services of the site and producing the reports ordered - performance of the contract concluded with you.
• Managing your account, birth profiles and favourites - performance of the contract.
• Processing orders, payments, invoicing and accounting - performance of the contract and compliance with our legal obligations.
• Keeping proof of your waiver of the right of withdrawal - compliance with our legal obligations and our legitimate interest in being able to establish it in the event of a dispute.
• Answering your requests and handling your complaints - performance of the contract and our legitimate interest in providing customer service.
• Sending you the newsletter, if you have subscribed to it - your consent, which you can withdraw at any time using the unsubscribe link in each newsletter or from your account.
• Ensuring the security of the site and preventing fraud and abuse - legitimate interest.
• Producing overall account usage statistics, from the login log and in an aggregated form that does not allow you to be identified - legitimate interest.
• Measuring the site's audience - your consent.
• Displaying advertisements, which may be personalised - your consent.

Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

4. Retention periods

• Account, birth profiles and favourites: kept until your account is deleted, which you can request at any time. They are also deleted after three years without any login or order, but never less than seven years after your last order, so as to preserve the access to your reports provided for in our general terms and conditions; an email is sent to you beforehand so that you can log in again and keep your data.
• Account created but never validated or used: deleted thirty days after its creation.
• Orders and accounting records: kept for ten years, in accordance with article L. 123-22 of the French Commercial Code. At the end of this period, the email address and the link with your account are deleted; only anonymous data remains, for statistical purposes.
• Birth data and parameters used to produce a report: kept for seven years, the period during which you can view and regenerate your report from your personal space, unless you request the deletion of your account before then.
• IP address recorded during an order: replaced after three months by the country deduced from it, which is kept with the order to establish the place of sale.
• Unpaid order: the birth data, email address and IP address relating to it are deleted after thirty days.
• Proof of your waiver of the right of withdrawal: kept with the order.
• Newsletter: your subscription ends as soon as you unsubscribe, and at the latest when your account is deleted.
• Login log: one year; only aggregated statistics, which do not allow you to be identified, are kept beyond that.
• Proof of your cookie choices: thirteen months.

5. Recipients and processors

Astrotheme does not sell or rent customer lists, and does not pass on your email address to any third party for marketing purposes.

Your data is accessible to authorised Astrotheme staff, to the extent necessary for their duties, and to the following providers, who act on our instructions:

• OVH - hosting of the site and databases, in France;
• Cloudflare - delivery of the site's pages and protection of the site against attacks; Cloudflare processes for this purpose the IP address and technical connection data of visitors to www.astrotheme.com;
• Stripe - payment processing, whatever the payment method chosen, including PayPal;
• Mailjet - delivery of emails: order confirmations, reports, account-related messages and the newsletter. For this purpose, Mailjet stores the email address of recipients; it is deleted there when your account is deleted;
• Google - audience measurement, only if you consent to it;
• Publift and its advertising partners, including Google - advertising network, only within the limits of the consents you have given;
• InMobi - platform for collecting and managing your cookie choices.

Stripe, Google and Publift's advertising partners also process certain data on their own behalf, as data controllers: their own privacy policies then apply to that processing.

Your data may also be disclosed to administrative or judicial authorities where required by law.

6. Transfers outside the European Union

Some of our providers, in particular Cloudflare, Stripe and those involved in advertising and audience measurement, may process data outside the European Union, in particular in the United States. These transfers are subject to the safeguards provided for in Chapter V of the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses.

7. Your rights

You have the following rights over the data concerning you: right of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to withdraw your consent where processing is based on it. You may also set out instructions regarding the fate of your data after your death, in accordance with article 85 of the French Data Protection Act of 6 January 1978; failing this, your account is deleted when we are informed of your death.

Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, and at any time and without giving reasons to receiving the newsletter.

To exercise these rights, write to [email protected] or to Astrotheme, Customer Service, 36 rue Scheffer, 75016 Paris, France. We reply within one month of receiving your request; this period may be extended by two months if the request is complex or if we receive a large number of requests, in which case we inform you within the first month, explaining why. To make sure that a request comes from the account holder, we will ask you, if it does not come from the email address of your account, to confirm it from that address.

Deleting your account erases your birth profiles, favourites, login log, the files relating to your orders and your address held by our email delivery provider; it therefore ends access to your reports from your personal space and their regeneration. Your orders are kept for the legal period, without your email address, without IP address and without the birth data used to produce your reports: exercising the right to erasure does not prevent us from keeping the data that the law requires us to keep, in particular accounting records.

If you consider that your rights have not been respected, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France - www.cnil.fr, or with the supervisory authority of the European Union member state in which you habitually reside.

8. Cookies and other trackers

A cookie is a small file placed on your device by the site you are visiting, or by a third party, which records information about your browsing.

The site uses three categories of trackers:

• Strictly necessary trackers: they enable the site to function, in particular the management of your session, your authentication, access to your birth profiles, the protection of the site and the recording of your tracker choices. They are exempt from consent and cannot be disabled.
• Audience measurement trackers: they allow us to understand how the site is used and to improve how it works. They are only placed if you consent to them.
• Advertising trackers: placed by our advertising network and its partners, they allow advertisements to be displayed, which may be personalised, and their performance to be measured. They are only placed if you consent to them.

On your first visit, a banner allows you to accept or refuse the trackers subject to consent, purpose by purpose, and to consult the list of partners concerned and the details of their processing.

You can change your choices or withdraw your consent at any time by clicking on the "Manage Cookies" link at the bottom of every page of the site. Your choices are kept for thirteen months, after which the banner is shown to you again.

You can also configure your browser to refuse cookies. Refusing strictly necessary trackers would, however, prevent access to your account and your birth profiles.

9. Data concerning third parties

When you enter the birth data of another person, in particular for a relationship or compatibility report, you warrant that you are entitled to provide it to us. This data is used only to produce the requested report and is not used in any other way.

Any person whose data has been entered by a third party may request its deletion by writing to [email protected].

10. Security

Astrotheme implements appropriate technical and organisational measures to protect your data against loss, alteration and unauthorised access. Staff access to data is limited to what is necessary to process your request, investigate a complaint or ensure the security of the site.

11. Changes to this policy

This policy may be amended to take account of legal or technical developments or changes to our services. The applicable version is the one published on this page, whose date of entry into force appears at the top of the document. Previous versions can be provided on request.