Privacy Policy

The data controller for your personal data is Brightpivotcofr SAS, registered with the Paris Trade and Companies Register under number B 923 456 781, with its registered office at 47 Rue de Rivoli, 75001 Paris, France. For any questions regarding your personal data, you can contact us at: dpo@brightpivotcofr.com.

As part of our services, we collect the following categories of data: • Identification data: surname, first name, email address • Communication data: content of messages sent via our contact form • Browsing data: IP address, browser type, pages viewed, visit duration (via analytical cookies, subject to your consent) • Data relating to your cookie preferences We do not collect any sensitive data (ethnic origin, political opinions, health data, etc.) unless you voluntarily communicate them to us in your messages.

Your data is processed for the following purposes: • Responding to your contact and consultation requests (legal basis: pre-contractual measures) • Informing you about aid and programs you may be eligible for (legal basis: legitimate interest) • Improving our site and services through anonymized statistical analysis (legal basis: consent) • Sending you commercial communications if you have consented (legal basis: consent) • Complying with our legal and regulatory obligations (legal basis: legal obligation)

Your personal data is retained for the following periods: • Contact data and messages: 3 years from the last exchange • Browsing data: 13 months maximum • Cookie-related data: duration of consent validity (6 months) then deletion • Contractual documents: 5 years after the end of the business relationship Beyond these periods, your data is deleted or irreversibly anonymized.

Your personal data may be disclosed to the following categories of recipients: • Our internal advisors and experts • Our technical subcontractors (hosting, maintenance) • Competent authorities in case of legal obligation We never sell your personal data to third parties. Any data transfer outside the European Union is governed by appropriate safeguards (European Commission standard contractual clauses).

In accordance with the GDPR and the French Data Protection Act, you have the following rights: • Right of access: obtain confirmation that your data is being processed and receive a copy • Right to rectification: have your inaccurate or incomplete data corrected • Right to erasure: request the deletion of your data under the conditions provided by law • Right to restriction of processing: request the temporary suspension of processing • Right to data portability: receive your data in a structured, machine-readable format • Right to object: object to the processing of your data on legitimate grounds • Right to withdraw consent: withdraw your consent at any time To exercise your rights, contact us at dpo@brightpivotcofr.com. We will respond within a maximum of 30 days. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption of communications, access controls, staff training, and regular security audits.

We reserve the right to modify this privacy policy at any time. Any substantial changes will be notified to you by email or by a visible notice on our site. The last update date appears at the top of this document.