Privacy policy

Introduction

In the course of its activities, bee2link group may process your personal data in accordance with the applicable regulations. This policy provides you with information on how your personal data is processed. Accessible on our website, this policy is updated regularly to take into account legislative and regulatory developments, and any changes in the processing that bee2link group carries out. This policy was updated on June 04, 2024.

Who we are

bee2link group is responsible for processing the personal data of visitors to the https://bee2linkgroup.com/ website and customers of its platforms.

What are our commitments?

We are committed to complying with all applicable regulations concerning the processing of personal data. Accordingly, we undertake to comply with the following principles:

• We process your personal data lawfully, fairly and transparently.
• We collect your personal data for specific, explicit and legitimate purposes and do not process them in a way that is incompatible with these purposes.
• We ensure that personal data is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
• We make every effort to ensure that personal data is accurate and, where necessary, kept up to date. We take all reasonable steps to ensure that inaccurate personal data, having regard to the purposes for which it is processed, is deleted or rectified without delay.
• We keep your personal data in a form that allows you to be identified only for as long as is necessary for the purposes of processing.
• We guarantee an appropriate level of security for the personal data we process.

These commitments are expressed as follows:

• We respect your privacy.
• We guarantee that the protection and security of your personal data is our top priority.
• We do not use your personal data for purposes that have not been brought to your attention.
• We do not consider that your personal data should be stored indefinitely.
• We do not sell your personal data to third parties.
• We work with trusted partners who provide sufficient guarantees that technical and organizational measures have been implemented to ensure that our processing operations meet the requirements of current regulations.
• We respect your rights as a data subject and make every effort to respond to your requests as soon as they are justified.

What personal data do we process and for how long?

We remind you that personal data is any information relating to an identified or identifiable natural person (the “data subject”), such as your first and last name or your postal or e-mail address. We undertake to process only the personal data that is strictly necessary for the purposes for which it is collected and to keep it only for as long as is necessary for those purposes. The categories of personal data that we process are as follows:

Processing activities	Legal basis	Categories of personal data	Retention period (active basis)
Management of solicitations sent via the contact form	Legitimate interest	Identification data	The time required to respond to the request in question
Sending of commercial prospecting e-mails	Legitimate interest	Identification data	3 years from data collection or last contact, unless you expressly object to such use
Recruitment management	Execution of pre-contractual measures	Identification data and data relating to the applicant’s professional situation	2 years from submission of application (unless opposed)
Video surveillance	Legitimate interest	Identification data and data relating to the lifestyle of persons recorded	1 week from recording
Customer management	Contract execution	Identification data	5 years from the end of the contractual relationship 10 years for invoices from the date of issue
Supplier management	Contract execution	Identification data	5 years from the end of the contractual relationship 10 years for invoices from the date of issue
Campaigns to improve user experience	Legitimate interest	Contact data	Time for the user journey improvement campaign
Campaigns to improve user experience	Consent	Contact data Identification data Answers given in questionnaires Screen recording, if applicable	Time of user path improvement campaign

Who can access your personal data?

Your data will be communicated, if necessary, only to the following recipients:

• Authorized bee2link group personnel;
• bee2link group’s subcontractors and trusted service providers are responsible for :
  • website hosting ;
  • storage of your personal data;
  • equipment/software maintenance ;
  • marketing, commercial, statistical and research operations;
  • deployment, training and transformation support.

We make every effort to ensure that the number of such persons remains as small as possible. We only provide our trusted service providers with the information they strictly need to provide the service and they may not use your personal data for any other purpose. We always make our best efforts to ensure that all our trusted suppliers with whom we work maintain the security of your data. We also ensure that when our relationship with a trusted service provider comes to an end, the service provider deletes your personal data without delay. We select our trusted service providers with great care, ensuring that they offer sufficient guarantees, particularly in terms of expertise, reliability and resources, to implement technical and organizational measures capable of meeting the requirements of applicable legislation, particularly in terms of security. In this respect, we ensure that our trusted service providers process personal data only on our documented instructions. We also ensure that their staff have undertaken to respect confidentiality or are subject to an appropriate legal obligation of confidentiality.

What are your rights as a data subject?

You have the right to access, rectify, delete and port your personal data, as well as the right to limit the processing of such data. For more information about your rights, visit cnil.fr. You can exercise your rights either :

• By e-mail to the following address: bee2linkgroupe_dpo@derriennic.com
• By post to the following address: bee2link group, 278 boulevard Saint-Germain 75007 Paris.