Privacy policy
What is the purpose of our privacy policy?
Biggie Group, which operates the website www.be.biggie.co, attaches great importance to the protection and confidentiality of your personal data, which we see as a mark of seriousness and trust.
Our privacy policy therefore reflects our commitment to upholding, across Biggie Group, the rules that apply to the protection of personal data and, in particular, those of the General Data Protection Regulation ("GDPR").
More specifically, our privacy policy explains how and why we process your personal data in the context of the services we provide to you.
who is our privacy policy for?
Our privacy policy applies to you, wherever you live, provided you are at least 15 years old, whether you are one of our clients or simply a visitor to www.be.biggie.co.
If you are under the legal age stated above, you may not use our services without the prior and explicit consent of one of your parents or the holder of parental authority, which must be sent to us by email at privacy-biggiegroup@biggie.co.
If you believe we hold personal data about your children without your consent, please contact us at the address above.
Does our privacy policy apply to job applicants?
If you are an applicant for a position at Biggie Group, please refer to our applicant privacy policy, available at any time on the dedicated page of www.biggie.co, which details the processing carried out as part of our recruitment process.
Why do we process your personal data, and on what legal basis?
We process your personal data mainly for the following purposes:
- Browsing our website, using our services and enabling us to respond to your requests (e.g. requests for information, complaints), on the basis of our general terms of use and our legitimate interest in providing you with the best possible service.
- Managing invoicing and any unpaid amounts, on the basis of our legitimate interest in receiving payment for the service we provide and on the basis of our general terms and conditions.
- Receiving our newsletter, which keeps you informed about news relating to our services, on the basis of our legitimate interest in building client loyalty.
- Running the videos on our website, on the basis of our legitimate interest in offering you video content.
- Enabling document downloads, on the basis of our general terms of use.
- Ensuring your safety on our premises through CCTV cameras, on the basis of our legitimate interest in protecting you, our employees and our premises.
How did we obtain your personal data?
Your data is collected directly from you when you use our services or simply visit our website www.biggie.co, and we undertake to process your data only for the purposes described above.
Your personal data may also be processed indirectly in connection with trade fairs or social networks (e.g. LinkedIn).
Which personal data do we process, and for how long?
Below is a summary of the categories of personal data we process and their respective retention periods:
- Professional identification data (e.g. last name, first name, job title, company) and contact details (e.g. professional email address and phone number), kept for as long as the service is provided, plus the applicable statutory limitation periods, which are generally 5 years.
- Where your business name and your personal name are the same (e.g. sole traders, micro-enterprises), economic and financial data (e.g. bank account number, verification code) kept for as long as needed to complete the transaction and manage invoicing and payments, plus the applicable statutory limitation periods, which are generally 5 to 10 years.
- Email address used to receive our newsletter, kept until you unsubscribe from the newsletter.
- CCTV footage recorded by our CCTV cameras and kept for a maximum of one month.
- Statistical data on views of our videos, which is anonymised and kept indefinitely. Connection data (e.g. logs, IP address), kept for 1 year.
- Cookies, which are generally kept for a maximum of 13 months. For more details on how we use cookies, please see our cookie policy, available at any time on our website.
Once the applicable retention periods have expired, the deletion of your personal data is irreversible and we will no longer be able to provide it to you. At most, we may keep anonymised data for statistical purposes.
Please also note that in the event of a dispute, we are required to keep all of the personal data concerning you for as long as the case is being handled, even after the retention periods described above have expired.
What rights do you have to control how your personal data is used?
Data protection law gives you specific rights that you can exercise at any time and free of charge to control how we use your data.
- Right of access to and a copy of your personal data, provided the request does not conflict with business secrecy, confidentiality or the secrecy of correspondence. Right to rectification of personal data that is inaccurate, out of date or incomplete.
- Right to object to the processing of your personal data where it is based on our legitimate interest, unless compelling legitimate grounds justify the processing and override your interests, rights and freedoms.
- Right to request erasure ("right to be forgotten") of personal data that is not essential to the proper functioning of our services.
- Right to restriction of processing, which allows the use of your data to be frozen while the lawfulness of the processing is being contested.
- Right to data portability, which allows you to retrieve part of your personal data so you can store it or easily transfer it from one information system to another.
- Right to give instructions on what happens to your data after your death, either yourself or through a trusted third party or heir.
For a request to be processed, it must be made directly by you or your representative at privacy-biggiegroup@biggie.co.
Requests may only come from you or your representative. We may therefore ask you for proof of identity if there is any doubt about who is making the request, as well as proof of representation.
We will respond to your request as quickly as possible, within a maximum period of one month from receipt, unless the request is technically complex or we receive a large number of requests at the same time. In that case, the response time may be extended to a maximum of three months.
Please note that we may always refuse to respond to any request that is excessive or unfounded, in particular because of its repetitive nature.
Who can access your personal data?
Your personal data is processed by our teams and by our technical service providers, for the sole purpose of operating our service.
We vet all our technical service providers before engaging them to make sure they strictly comply with the rules that apply to the protection of personal data.
We also guarantee that we never transfer or sell your data to third parties or commercial partners.
Can your personal data be transferred outside the European Union?
Personal data processed through our website is hosted exclusively on servers located within the European Union.
We also do our utmost to use only technical tools whose servers are located within the European Union. Where this is not the case, we make sure they implement the appropriate safeguards required to ensure the confidentiality and protection of your personal data.
How do we protect your personal data?
We implement all the technical and organisational measures required to guarantee the security of your personal data on a daily basis and, in particular, to protect it against any risk of destruction, loss, alteration or disclosure.
Do we use cookies when you browse our website?
We guarantee that we do not use any advertising cookies to operate this website. However, we do use statistical cookies when you browse our website. For more information, please see our cookie policy.
Who can you contact for more information about how your personal data is used?
To best guarantee the protection and integrity of your data, we have officially appointed an independent Data Protection Officer ("DPO") registered with our supervisory authority.
You can contact our DPO at any time and free of charge at privacy-biggiegroup@biggie.co for more information or details on how we process your data.
How can you contact the CNIL?
You can contact the French data protection authority, the “Commission nationale de l'informatique et des libertés” or “CNIL” at any time at the following address: Service des plaintes de la CNIL, 3 place de Fontenoy, TSA 80751, 75334 Paris Cedex 07, France, or by phone on +33 1 53 73 22 22.
Can this privacy policy change?
We may update our privacy policy at any time to reflect new legal requirements and any new processing activities we may carry out in the future.
