Privacy

Privacy Policy

BCUB3 processes as little personal data as possible. Here is exactly what, why, for how long, and how you can retrieve or have it deleted.

General principle

BCUB3 applies the minimization principle laid out in article 5 of the EU General Data Protection Regulation (GDPR). Concretely: we only collect a piece of personal data when strictly necessary for the stated purpose, and we keep it for as little time as possible.

This site uses no advertising cookie, no social-network tracker, no third-party analytics tool such as Google Analytics. The consent banner is therefore not required.

Data controller

The controller for data collected via this site is:

Paul Obara also acts as data protection officer (DPO) for BCUB3. Any request relating to personal data can be sent to this address.

1. Browsing data (web server)

  • Data concerned: truncated IP address, user-agent, page visited, date and time, HTTP response code.
  • Purpose: site security, anomaly detection, aggregated audience statistics.
  • Legal basis: legitimate interest of the publisher (article 6.1.f GDPR) in maintaining service availability and security.
  • Retention: 30 days max in raw form, then aggregated indefinitely (no personal data).

2. Contact data (email)

  • Data concerned: email address, content of your message, any attachments.
  • Purpose: respond to your request, organize a call.
  • Legal basis: pre-contractual measures taken at your request (article 6.1.b GDPR).
  • Retention: duration of the exchange and 3 years thereafter (commercial prospecting).

3. Newsletter

  • Data concerned: email address.
  • Purpose: send the newsletter you subscribed to.
  • Legal basis: your consent (article 6.1.a GDPR).
  • Retention: until you unsubscribe (one-click link in every newsletter).

Recipients

Your data is only handled by BCUB3 and is never sold, rented or transferred to third parties for marketing purposes. Service providers (hosting, mail) we use are bound by GDPR-compliant data-processing agreements.

Transfers outside the EU

The site is hosted by GitHub Pages (United States), with data only being technical browsing data (already addressed above). For email exchanges and the newsletter, we use European providers when possible. If a US provider becomes necessary, the appropriate guarantees (Standard Contractual Clauses) are put in place.

Your rights

Under GDPR, you have the right to:

  • access your data,
  • rectify inaccurate data,
  • erase your data (“right to be forgotten”),
  • restrict processing,
  • portability,
  • object to processing.

You can exercise these rights at any time by writing to info@bcub3.com. We respond within 30 days max.

If you believe your rights are not respected, you can file a complaint with the CNIL (French data protection authority): https://www.cnil.fr/en

Update

This policy can be updated to reflect legal or technical changes. The reference version is the one published on this site.