Legal notice & privacy policy

Last updated: 9 September 2026

1. Legal notice

Publisher

medtechdiag.com is published by Constellation Avocats, a French law firm (AARPI — association d'avocats à responsabilité professionnelle individuelle) registered with the Paris Bar, French company registration (SIREN) 845 142 876, with offices at 8, rue Saint Fiacre — 75002 Paris, France.

Contact: medtech@constellation.law · +33 (0)1 40 20 08 47 · www.constellation.law

Publication director

François Césure, associated lawyer (avocat partenaire).

Hosting

The site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA — www.netlify.com.

Regulated profession

The firm's lawyers are members of the Paris Bar (Ordre des avocats de Paris, Maison du Barreau, 2, rue de Harlay — 75001 Paris). The legal profession in France is governed in particular by Law No. 71-1130 of 31 December 1971, Decree No. 91-1197 of 27 November 1991 and the national rules of conduct of the profession (RIN). The firm's lawyers are covered by professional indemnity insurance under the collective policy of the Paris Bar. Geographic coverage: France and the European Union.

Consumer mediation

Consumers may refer disputes, free of charge, to the consumer mediator of the French legal profession: Médiateur de la consommation de la profession d'avocat, 180, boulevard Haussmann — 75008 Paris · mediateur-consommation-avocat.fr.

Intellectual property

All contents of this site (texts, structure of the assessment, graphic elements, the medtechdiag name) are protected by copyright and related rights. Any reproduction or representation, in whole or in part, without the publisher's prior written consent is prohibited.

Nature of the contents — no legal advice

The contents of this site, including the online assessment and its report, are provided for information only. They do not constitute legal advice and create no relationship between you and the firm. Some information relies on the proposed Regulation COM(2025)1023, not yet adopted: it reflects anticipation rather than the law as it stands. Any engagement is subject to an engagement letter and a prior conflict-of-interest check. No outcome is guaranteed: the firm's commitment covers means, method and deadlines.

The assessment report is generated automatically from the answers you have entered, without verification and without review of any document. It reflects the position at the date it was generated.

Scope of advice

The firm advises on French law and on European Union law as applicable in France. It does not give opinions on the national laws of other Member States, nor on non-European laws. Where a question falls under foreign law, it is handled, where appropriate, with local counsel, under a separate quote.

Use of artificial intelligence

The firm uses artificial intelligence tools for legal research and to prepare its deliverables. These tools are used under the systematic supervision of a lawyer, who remains solely responsible for the advice given. No document covered by legal professional privilege is processed without appropriate safeguards.

Governing law and jurisdiction

Relations between the firm and its clients are governed by French law. Any dispute falls within the jurisdiction of the Paris courts, subject to applicable mandatory rules and to the professional procedure for the settlement of fee disputes.

2. Privacy policy

Data controller

Constellation Avocats (AARPI), 8, rue Saint Fiacre — 75002 Paris, France · medtech@constellation.law.

What we collect, and what we do not

The questionnaire runs in your browser: your answers are not sent to a server of the firm. To receive your report, you are asked for your email address. No account is created. We use that address to send you the report, to get back to you about it and, unless you object, to send you information about our services and about regulatory developments concerning medical devices. It is never sold, transferred or shared with third parties.

Your answers to the questionnaire are neither transmitted nor stored: they stay in your browser and are gone when the page is closed. Only your email address and the summary of your report described below (profile, three levels of assessment, headings of the points of attention and offers) are sent to us.

Cookies and trackers

This site sets no advertising cookies and uses no tracking tools. The email address you provide in order to receive your report is stored in our contact management tool. No consent banner is displayed, as no cookie subject to consent is used.

The site's fonts are hosted on the same server as the site: loading them transmits your IP address to no third party.

Data processed, purposes and retention

Host's technical logs. Like any host, Netlify processes technical connection data (IP address, timestamps, pages served) to provide and secure the service. Legal basis: legitimate interest. These logs are retained by the host for a limited period under its own policy.
Request to receive the assessment report. When you request your report, we process your e-mail address, your profile, your three levels of assessment (stored as internal values), the headings of the points of attention and suggested offers shown in your report (not your answers to the questions), the site language, the date and time of the request and the version of the information notice shown to you (the host automatically attaches the IP address and browser used when submitting). Purposes: delivering your report and following it up (including, where relevant, the firm contacting you in connection with your assessment), running our conflict-of-interest check if you ask for a lawyer, and keeping a file of professional contacts. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and the firm's legitimate interest in following up a service you requested (Art. 6(1)(f)) — you may object at any time. Retention periods: your email address is kept for three years after the last contact where no engagement follows; the summary of your report is deleted after twelve months.
Information about our services and about regulatory developments concerning medical devices. Unless you object, your professional e-mail address is also used to send you information about our services and about regulatory developments concerning medical devices, in connection with your professional activity. Legal basis: the firm's legitimate interest in a business-to-business context (Art. 6(1)(f) GDPR; Art. L. 34-5 of the French Postal and Electronic Communications Code). You may object at any time, without giving reasons and free of charge: when requesting your report, by ticking the box provided (never pre-ticked), then via the unsubscribe link in each e-mail or by writing to medtech@constellation.law. Access to the report is not conditional on receiving this information. We keep a record of your choice (timestamp, version of the notice) for the duration of the processing. In accordance with the rules of the French legal profession, any personalised solicitation states how the cost of the service is determined, which is set out in an engagement letter.
E-mails you send us. If you choose to write to medtech@constellation.law (including via the report buttons, which merely open your own e-mail client), we process the data you transmit (identity, contact details, content) to answer your request, run our conflict-of-interest check and, where applicable, prepare an engagement letter. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest. Retention: three years after the last contact where no engagement follows; where a matter is opened, the duration of the relationship followed by the archiving periods applicable to the profession.

Once a client relationship is established, exchanges are additionally covered by the French lawyer's professional secrecy (Art. 66-5 of the Law of 31 December 1971).

Recipients and transfers

Data you send us is accessible only to the firm's lawyers and authorised staff, all bound by secrecy. It is never sold, transferred, rented or shared with third parties; it is used to send you information only under the conditions, and subject to the right to object, described above.

The firm uses the following processors, acting on its instructions: Netlify, Inc. (USA) for hosting the site and receiving forms (report requests are recorded on Netlify's infrastructure, from which the firm retrieves them); Brevo (Sendinblue SAS, 7 rue de Madrid — 75008 Paris, France) for sending the report by e-mail, keeping the contact list and, unless you object, sending information about our services and regulatory developments. Transfers to the USA are governed by the mechanisms of Chapter V of the GDPR (standard contractual clauses, Data Privacy Framework certification).

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them: medtech@constellation.law or by post to the firm's address. You may lodge a complaint with the French supervisory authority, the CNIL (3, place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 · www.cnil.fr).

Changes to this policy

If the site evolves (for example: online appointment booking, cookie-free audience measurement), this policy will be updated before such features go live, with the required prior information. History: 21 August 2026 (launch); 25 August 2026 (report delivered against an e-mail address, optional publications); 9 September 2026 (automated report delivery through Brevo, information about our services on the basis of legitimate interest with a right to object, locally hosted fonts, scope of advice, governing law and use of AI).