Privacy Policy

This privacy policy is intended to help you understand how BALC collects, processes and stores your personal data via the Site.

BALC understands that data protection and privacy are important to all users visiting the Site. In accordance with GDPR regulations, BALC is committed to respecting your privacy and protecting your personal data — i.e. data that may directly or indirectly identify you as a person.

DEFINITION

"Personal data" means any data that allows an individual to be identified, including name, first name, username, photograph, postal address, email address, job title, phone numbers, date of birth, transaction data on the Site, purchase details, bank card numbers, SIRET, VAT number, IP address, and any other information you choose to share with us.

PURPOSE

This policy informs you of the means we use to collect your personal data, in strict compliance with your rights, in accordance with French Law No. 78-17 of January 6, 1978 ("Informatique et Libertés") and EU Regulation 2016/679 of April 27, 2016 (GDPR).

DATA CONTROLLER

The data controller is BALC, registered with the Versailles Commercial Court under number 904 591 096, with registered office at 62 Boulevard Carnot, 78110 Le Vésinet, France.

DATA COLLECTED

The legal basis for collecting your personal data is:

  • Necessity for the performance of the contract when you use our services on our Site;
  • Legitimate interest when you voluntarily provide personal data during your visit to our Site.

Your personal data is collected for one or more of the following purposes:

  • Managing your access to and use of certain services on the Site;
  • Managing customer relations regarding contracts, invoices, and customer follow-up;
  • Building a database of users, customers and prospects;
  • Sending newsletters, solicitations and promotional messages (you may opt out at the time of data collection);
  • Compiling commercial and audience statistics;
  • Managing product, service or content reviews;
  • Managing unpaid balances and disputes;
  • Personalizing responses to your inquiries;
  • Complying with our legal and regulatory obligations.

DATA RECIPIENTS

The following may have access to your personal data:

  • Our company staff;
  • Control services (lawyers, accountants);
  • Our processors (communication, productivity software, hosting, payment, invoicing, audience analytics, customer relationship management providers);
  • Public bodies, exclusively to fulfill our legal obligations, and legal auxiliaries or debt recovery organizations.

DATA RETENTION

Your personal data is not retained beyond the period strictly necessary for managing our commercial relationship. Data used to establish proof of rights or contracts is retained for the duration required by applicable law.

For prospecting purposes, customer data may be retained for three (3) years following the end of the commercial relationship. Prospect data may be retained for three (3) years from collection or last contact.

Bank card data is retained for the duration of your registration on the Site. CVV/CVV2 codes are never stored. Card data may be archived for 13 months (or 15 months for deferred debit cards) for dispute purposes.

Audience statistics data is not retained beyond 13 months.

SECURITY

We take all necessary precautions and appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data, in particular to prevent it from being distorted, damaged, or accessed by unauthorized third parties. We use payment systems that comply with current standards and applicable regulations.

HOSTING

Your data is stored on BALC servers located within the European Union.

INTERNATIONAL DATA TRANSFERS

Your data may be transferred outside the European Union in connection with tools we use and our relationships with processors. Such transfers are secured through adequacy decisions by the European Commission, or through specific contracts based on standard contractual clauses approved by the Commission.

YOUR RIGHTS

Under European data protection regulations, you have the following rights:

  • Right of access: to know whether your personal data is being processed and to receive a copy;
  • Right of rectification: to request correction of inaccurate data;
  • Right to erasure: to request deletion of your personal data;
  • Right to restriction: to request suspension of processing;
  • Right to data portability: to receive your data in a structured, machine-readable format;
  • Right to object: to object to processing for reasons relating to your particular situation;
  • Right to withdraw consent: at any time for processing based on consent;
  • Right to define post-death directives regarding your data.

You may unsubscribe from our promotional emails via the link in each email. Even after opting out of promotional messages, you will continue to receive administrative communications.

LODGING A COMPLAINT

You have the right to lodge a complaint with a competent supervisory authority (the CNIL for France) if you believe that the processing of your personal data violates applicable regulations. This right may be exercised without prejudice to any other administrative or judicial remedy.

CHANGES

We reserve the right to modify this Policy at any time. Changes will take effect upon publication of the updated policy.