Legal
Privacy policy
What personal data BEAROPS collects on the bearops.fr website, for what purposes, on what legal basis, for how long, who it is shared with and how to exercise your rights.
This English translation is provided for information. The French version is the authoritative text.
Data controller
The controller of the personal data processing described in this policy is BEAROPS, a SASU (French simplified joint-stock company with a single shareholder) with a share capital of €15,000, registered with the Vannes Trade and Companies Register (RCS) under number 979 959 806.
BEAROPS SASULe Prisme, Place Albert Einstein, CP94, 56000 Vannes, France
SIREN 979 959 806 · VAT FR35979959806
+33 6 01 71 83 24 · contact@bearops.fr
- Contact for your data
- contact@bearops.fr, stating “Données personnelles” (personal data) in the subject line
- By post
- BEAROPS, Données personnelles, Le Prisme, Place Albert Einstein, CP94, 56000 Vannes
- Data protection officer
- BEAROPS has not appointed a data protection officer (DPO) to date. All questions and requests relating to your data are handled at the address above.
Data collected
BEAROPS collects only the data needed for each use. It is requested directly from you, unless otherwise stated below.
- Contact form. The reason for your request, the product or service concerned, your name, organisation, business email address, job title, sector and degree of urgency (optional), the content of your message, as well as the date it was sent and your acceptance of this policy.
- Subscription to our publications. Email address, subscription date and your consent.
- Exchanges with our teams. When you write to us or call us, your business contact details and the content of our exchanges. Where your business contact details were not obtained from you, BEAROPS tells you their source in its first message.
- Appointment booking. If you book a time slot in the Calendly calendar embedded in our booking pages, or through a Calendly link: name, email address, chosen time slot and, where applicable, any details you provide (see “Recipients and processors”).
- Browsing. Technical server logs: IP address, date and time of the request, page requested, response code, referring page and browser type. The website uses no audience measurement tool and sets no cookies.
- Job applications. The website does not offer a way to submit an application. If you send us an unsolicited application by email, the information it contains (contact details, CV, cover letter) is used solely for recruitment.
Fields marked with an asterisk are mandatory: without them, we cannot process your request. BEAROPS does not ask you for any sensitive data within the meaning of the GDPR. For your security, do not send passwords or details of unpatched vulnerabilities through the form: if your request requires it, we will agree on a suitable channel with you.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your contact requests (demo, quote, assessment, press, partnership) | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) for a request concerning a product or a service; BEAROPS’s legitimate interest in responding to the requests it receives (Art. 6(1)(f)) for other reasons. |
| Organising the appointments you book | Pre-contractual measures taken at your request (Art. 6(1)(b)). |
| Sending you our new publications (guides, articles, comparisons) | Your consent (Art. 6(1)(a)), which you may withdraw at any time. |
| B2B email prospecting related to your job role | BEAROPS’s legitimate interest in promoting its products and services (Art. 6(1)(f)), with a simple, free right to object, recalled in every message. |
| Managing our relationship with our customers (contracts, invoicing, follow-up) | Performance of the contract (Art. 6(1)(b)) and compliance with legal obligations, in particular accounting obligations (Art. 6(1)(c)). |
| Reviewing unsolicited job applications | Pre-contractual measures taken at your request (Art. 6(1)(b)). |
| Ensuring the security and proper operation of the website (technical logs) | Compliance with legal obligations to retain connection data (Art. 6(1)(c)) and BEAROPS’s legitimate interest in securing its website and detecting abuse (Art. 6(1)(f)). |
Your data is not subject to any automated decision-making or profiling. It is never sold, rented out or passed on to third parties.
Retention periods
The periods below follow the reference frameworks of the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority), in particular the one on the management of commercial activities (deliberation no. 2021-131 of 23 September 2021). At the end of these periods, the data is deleted or anonymised.
| Processing | Retention period |
|---|---|
| Contact requests and appointments (prospects who are not customers) | Three years from your last contact with BEAROPS. |
| B2B prospecting | Prospect data is deleted no later than three years after the last contact initiated by the prospect. |
| Customers | Duration of the contractual relationship, then archiving for the statutory periods: five years as proof of the contract (civil limitation period), ten years for accounting records. |
| Sending of publications | Until you unsubscribe. If you have had no interaction with BEAROPS for three years, your address is deleted. |
| Objection to prospecting and unsubscription | Your address is kept on an objection list for three years, for the sole purpose of no longer writing to you. |
| Unsolicited job applications | Duration of the recruitment process. If the application is not taken further, no more than two years after the last contact, unless you request earlier deletion. |
| Technical server logs | One year at most. |
Recipients and processors
Your data is accessible only to authorised BEAROPS staff who need it to handle your request (management and the relevant sales and technical teams), within the limits of their duties.
- Hosting. The website, as well as the script that receives the contact and subscription forms, is hosted by OVH SAS (OVHcloud), 2 rue Kellermann, 59100 Roubaix, France. Hosted in France on OVHcloud infrastructure certified ISO/IEC 27001.
- Forwarding of requests. This script forwards each request by email to the BEAROPS team through Brevo (Sendinblue SAS, Paris, France), our email delivery provider, which acts as a processor and hosts the data in the European Union. No third-party form or customer relationship management (CRM) service is involved.
Finally, your data may be disclosed to administrative or judicial authorities where required by law.
Location and transfers
The data processed by BEAROPS is hosted in France and is not transferred outside the European Union. The only exception concerns the information you choose to enter yourself on Calendly (see below).
Appointment booking with Calendly
To book a call, our booking pages (“Request a quote”, “Get my Cyberscore”) display the calendar of Calendly, a service published by Calendly LLC (United States), in an embedded frame; other pages offer a simple link to this service. The bearops.fr website loads no Calendly script: the frame is served directly by Calendly, which receives technical connection data (IP address, browser type) when it is displayed and may set its own cookies there (see the cookie settings page). The information you enter in the calendar is collected by Calendly, under its own privacy policy. It may be transferred to the United States; these transfers are governed by the EU–US Data Privacy Framework and by the European Commission’s standard contractual clauses. BEAROPS receives the details of your appointment in order to organise it.
If you prefer not to use Calendly, email us at contact@bearops.fr or use the contact form : we will arrange a time slot directly with you.
Links to other websites
Links to third-party websites (social networks, media, videos) transmit no data unless you follow them. Once you are on those websites, their own privacy policies apply.
Security
BEAROPS implements appropriate technical and organisational measures to protect your data: encryption of exchanges with the website (HTTPS), access restricted to authorised persons, and controlled retention periods.
Your rights
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
- Access: obtain confirmation that your data is being processed and receive a copy of it.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted, in the cases provided for by law.
- Objection, including to prospecting: object to processing based on legitimate interest and, at any time and without giving reasons, to commercial prospecting.
- Restriction: temporarily freeze the use of your data.
- Portability: receive the data you have provided to us in a structured, commonly used format.
- Withdrawal of consent: at any time, for processing based on your consent, without affecting processing already carried out.
- Post-mortem instructions: set out what should happen to your data after your death.
How to exercise your rights
Write to contact@bearops.fr or by post to the address given in the “Data controller” section. Exercising your rights is free of charge. If we have reasonable doubts about your identity, we may ask you for proof of identity. We will reply within one month of receiving your request; this period may be extended by two months if the request is complex, in which case we will inform you within the first month.
To stop receiving our publications or prospecting messages, simply use the unsubscribe link included in every email or write to us: your objection is taken into account simply and free of charge.
Complaints
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.