Privacy Policy

This Privacy Policy describes how PLAN B ("we", "us", or "our") collects, uses, protects, and shares your personal information when you use our website https://www.planb-cmo.fr (the "Site"). We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) No. 2016/679 of April 27, 2016 and the amended French Data Protection Act of January 6, 1978.

1. Who is Responsible for Processing Your Personal Data?

The data controller responsible for processing your personal data is:
‍PLAN B
SASU
27 rue du capitaine lheureux 59184 Sainghin-en-weppes
fabien@planb-cmo.fr

2. What Personal Data Do We Collect?

We collect the personal data you provide to us directly, as well as data collected automatically when you browse our Site.

2.1. Data you provide to us directly:

When you use our contact form, you may provide us with the following data:
Your first and last name
Your email address
Your phone number
Your company name
The content of your message

2.2. Data collected automatically:

When you browse our Site, we may automatically collect certain information via cookies and similar technologies (see our Cookie Policy for more details), such as:
Your IP address
The type of browser and operating system you use
The pages you visit on our Site
The date and time of your visit
The source of your visit (referring site, search engine, etc.)

3. Why and on What Legal Bases Do We Collect Your Data?

We collect and process your personal data for the following purposes, based on specific legal grounds:

Processing Purpose

Data Concerned

Legal Basis

Responding to your contact and information requests

First name, last name, email, phone, company name, message content

Performance of pre-contractual measures (if your request relates to a future business relationship) or legitimate interest (to answer a general question).

Improving our Site's user experience

IP address, browsing data (pages visited, time spent), browser type

Legitimate interest (to understand how our site is used and optimize it) or your consent via the cookie banner for analytics cookies.

Measuring Site audience and performance

IP address (anonymized), browsing data (visit statistics)

Your consent via the cookie banner (for audience analytics tools such as Google Analytics if not exempt from consent).

Ensuring the security of our Site

IP address, connection logs

Legitimate interest (to prevent fraud attempts, intrusions, and ensure the integrity of our systems) and legal obligation (if specific regulations require it).

Complying with our legal and regulatory obligations

Any data necessary to comply with a legal obligation (e.g., requests from authorities)

Legal obligation (responding to requests from competent authorities, complying with tax obligations, etc.).

Consent management

Cookie preferences, consent timestamp

Legal obligation (demonstrating that we obtained your consent for placing cookies and processing your data in accordance with the GDPR and the French Data Protection Act).

4. Who Do We Share Your Personal Data With?

We do not sell, trade, or rent your personal data to third parties. We may share your information with the following categories of recipients, only to the extent necessary to fulfill the purposes described above:
‍Our technical service providers: Site host (e.g., Webflow for site hosting, and other technical providers if you use specific services).
‍Audience analytics tools: Such as Google Analytics (data is generally anonymized or pseudonymized).
‍Third-party service providers: If you use integrated services such as an advanced form management tool, a newsletter service, etc. (mentioned here if applicable).
‍Legal authorities: Where required by law or in response to legal proceedings.All our providers commit to respecting the confidentiality and security of your data, and to using it only for the specific purposes of the services they provide us.
All our providers commit to respecting the confidentiality and security of your data, and to using it only for the specific purposes of the services they provide us.

5. Data Transfers Outside the European Union

In some cases, your data may be transferred to countries located outside the European Union (EU) or the European Economic Area (EEA), particularly if some of our technical service providers are based there (e.g., Google for Google Analytics in the United States). In such cases, we ensure that these transfers are governed by appropriate safeguards in accordance with the GDPR, such as:
The European Commission's Standard Contractual Clauses.
Binding Corporate Rules (BCR).
Adequacy decisions.

6. How Long Do We Keep Your Data?

The retention period for your personal data varies depending on the purpose of its collection:
Contact data (form):
Kept for as long as necessary to process your request, then archived for a period of 1 year for follow-up and evidentiary purposes, before being deleted.
‍Browsing data (cookies): Cookie lifespans are specified in our Cookie Policy. Analytics data is generally kept for a period of 24 months on analytics platforms.
‍Data related to legal obligations: Kept for the legally required period (e.g., 10 years for accounting documents).

7. Your Data Protection Rights

In accordance with the GDPR, you have the following rights regarding your personal data:
‍Right of access: Obtain confirmation that your data is being processed and, where applicable, access it.
‍Right to rectification: Request correction of inaccurate or incomplete data.
‍Right to erasure ("right to be forgotten"): Request deletion of your data under certain conditions.
‍Right to restriction of processing: Request suspension of the processing of your data in certain situations.
‍Right to data portability: Receive the data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
‍Right to object: Object to the processing of your data on legitimate grounds, or object to processing for direct marketing purposes.
‍Right to withdraw consent: At any time, for processing based on your consent.
‍Right to set post-mortem directives: Regarding the fate of your data after your death.To exercise these rights, you can contact us at the following email address: contact@planb-cmo.fr or by mail at the address mentioned in section 1. We may ask you for proof of identity for security reasons.

8. Right to Lodge a Complaint with the CNIL

If you believe your rights have not been respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
‍Website: https://www.cnil.fr/
‍
Postal address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

9. Changes to Our Privacy Policy

We may amend this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to check this page regularly for any changes.

10. Contact Us

For any questions regarding this Privacy Policy or the management of your personal data, you can contact us at the following email address: fabien@planb-cmo.fr