Privacy policy

Data controller

BECI SAS
SIRET: 07615001000056
20 CD 916, 59380 Bergues, France
Email: dpo@groupebeci.com

Data collected

Through the request form, we process only: your name, your company (where provided), your email address, your telephone number (where provided), the type of request (meeting-room booking or site viewing), the details of that request — preferred date, time slot, rental duration, number of people, space required — the free-text message, and confirmation that you have read this policy.

No account is created, no profile is built and no automated decision is taken about you.

Purposes

Your data is processed in order to: receive and handle your request; reply to you; arrange a meeting-room booking or a site viewing at your request; direct your request to the relevant contact; follow up the relationship with you as a prospect; protect the form against abuse; and ensure the security and maintenance of the site.

The information you send is not used for general direct marketing unrelated to your CREANOR enquiry.

Legal bases

Processing is based on: the pre-contractual steps taken at your request to answer an enquiry about the site; the legitimate interest of BECI SAS in security, abuse prevention and the defence of its rights; and, only if general direct marketing were added, your separate and specific consent for that purpose. The box acknowledging this policy does not, on its own, constitute the legal basis for the processing.

Recipients

Your data may be accessible to the authorised teams of BECI SAS, to the EUROCAP teams in charge of the CREANOR site, to the sales team responsible for replying to you, and to authorised technical service providers, including the hosting provider and the email delivery provider.

Data is neither sold nor rented. It is disclosed only to authorised recipients and to the providers necessary to process the request.

Hosting and processors

Technical hosting of the site is provided by:

OVH SAS
2 rue Kellermann
59100 Roubaix, France

OVH SAS acts as a hosting provider, under the services taken out by BECI SAS. The site and its data are hosted in France by OVH SAS. Site backups are also kept in France.

Retention period

Prospect data is kept for the time needed to handle the request, then for a maximum of three years from collection or from the last contact initiated by the prospect, unless a legal obligation or the establishment, exercise or defence of legal claims requires otherwise.

At the end of that period, data is deleted from operational tools, in particular mailboxes and any customer relationship management tool. Copies held in backups disappear progressively in accordance with the documented backup rotation and overwriting cycle.

Security logs are kept for a short, defined and documented period. Emails follow the same retention policy as requests. Requests to exercise rights are kept for the time needed to process them and to evidence the reply given.

Your rights

You have a right of access, rectification, erasure, restriction, objection and, where applicable, portability of your data. Where processing is based on your consent, you may withdraw it at any time. You also have the right to lodge a complaint with the CNIL.

To exercise your rights, contact:

Email: dpo@groupebeci.com
Postal address: For the attention of the DPO, BECI SAS, 20 CD 916, 59380 Bergues, France.

BECI SAS acknowledges receipt of your request and replies within the time limits set by the applicable regulations. Proof of identity will be requested only in the event of reasonable doubt as to your identity, and in a proportionate manner.

CNIL

Commission nationale de l’informatique et des libertés
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr

Cookies

This site places no cookies on your device. The chosen language is carried by the page address, not by a cookie. Fonts are served from our own server, and no audience-measurement or advertising tag is used.

As no non-essential tracker is in use, no consent banner is required. Should a measurement tool be added in the future, this policy will be updated and consent will be collected beforehand.

Maps and external links

No mapping service is loaded automatically on this site. The “Directions” button is an ordinary link that opens a mapping service in a new window, and only if you click it. From that point on, the third-party site applies its own policy.

Security measures

The site is served over HTTPS with a strict content security policy. The form is protected against automated abuse by an anti-replay token, a decoy field, a timing check, an arithmetic check and a limit on the number of submissions per connection. Requests are sent by email and are not stored in the site database.

International transfers

Data is hosted in France. No transfer outside the European Union is carried out as part of the operation of this site. Should a third-party service activated at the user’s request involve an international transfer, it would be governed by the safeguards provided for by the applicable regulations.