Entry into for May 25th, 2018. Last update 10/20/2026.
Privacy and Personal Data Management Policy
1. Purpose of this policy
The purpose of this policy is to inform you of the means we implement to process your personal data in accordance with Law No. 78-17 of January 6, 1978 on information technology, data files and civil liberties, as currently in force, known as the “Informatique et Libertés” law, and Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR” and together the “Applicable Regulations”).
2. Identity of the data controller
The party responsible for the collection of your personal data is the company BEEKAST, an SAS registered with the Créteil Trade and Companies Register (Registre du Commerce et des Sociétés) under No. 809 824 329, with its registered office at 10 rue de Penthièvre 75008 Paris, France (“We”).
3. Data protection officer
We have appointed a data protection officer, whose contact details are as follows:
Alina Weskamp
Intersoft Consulting
Email address: dpo@beekast.com
4. How we collect data
The personal data we collect and process depends on how you interact with us, including as:
- a “User”, meaning that you have an account on the my.beekast.com platform and have access to the associated sites: support.beekast.com, inspiration.beekast.com and community.beekast.com;
- a “Customer”, meaning that you are the holder of a subscription contract for the my.beekast.com platform;
- a “Participant without an account”, meaning when you join a session on the my.beekast.com platform but do not have a User account;
- a “Visitor” when you visit the beekast.com website, take part in our webinars and other digital events, contact us directly (through the forms on the website, by email or at physical events, for example), download a white paper, or interact with us in any other way without being a User, a Customer or a Participant.
5. What we collect
Depending on how you interact with us, the data we may collect is as follows.
When you are a User, the following categories of personal data may be collected:
– Identification data, for example your last name, first name, email address
– User Content, namely the content you import into your sessions and the responses you receive to the activities you use;
– Login data, for example your login ID and password, as well as any data necessary to keep you logged in to the platform
– Device data, for example, the model of the device used, the version of the browser used, the screen resolution;
– your IP address;
– Usage data, for example, application and technical logs and any other data that allow us to keep a history of the visits and actions performed on the platform
– Location data (for support only)
– Support data, including the content of the support ticket or exchanges on the support chat.
When you are a Customer or a contact person of a Customer, the following categories of personal data may be collected in the context of our business relationship:
– Identification data, for example your last name, first name, email address;
– Contract data, including the type of subscription purchased, billing details
When you are a Participant without an account, the following categories of personal data may be collected:
– Identification data, for example your last name, first name and any data required by the User in the access settings of their Session.
– Login data, for example the login ID assigned to you by Beekast to enable you to connect to the Platform, as well as any data necessary to keep you connected to the Platform;
– your IP address;
– Device data, for example, the model of the device used, the version of the browser used, the screen resolution;
– Usage data, for example, application and technical logs and any other data that allow us to keep a history of the visits and actions performed on the platform
When you are a Visitor, the following categories of personal data may be collected:
– Identification data, for example your last name, first name, email address
– Device data, for example, the model of the device used, the version of the browser used, the screen resolution;
– Browsing data, for example, the pages you visit on the beekast.com website;
– your IP address;
– Location data;
– Chat data, if you use the chat available on beekast.com;
– additional third-party information relating to your professional activity;
When collecting your personal data, we inform you whether certain data must be provided or whether it is optional. Mandatory data is necessary for the operation of our services. As regards optional data, you are entirely free to provide it or not. We also inform you of the possible consequences of failing to respond.
In connection with our artificial intelligence features, you may transmit any type of personal data, including your prompts/instructions and imported content (the “Input Data”). Please note that We do not wish to process personal data falling within the special categories of data within the meaning of Article 9 of the GDPR (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, data concerning a natural person’s sex life or sexual orientation), as well as any data relating to criminal convictions and offenses within the meaning of Article 10 of the GDPR.
You shall therefore refrain from sending this type of data and, more generally, you undertake to limit the personal data entered into the artificial intelligence features, as Input Data, to what is strictly necessary for the use of said features.
6. Source of collection
We may collect personal data in two different ways:
– either directly from you:
– voluntarily, when you fill in data collection fields;
– automatically, when you use the Platform or browse the sites.
– or indirectly:
– either from other users of our services (when you are a Participant without an account, for example);
– or from our technical partners providing an integration service, for example when connecting via an iframe (for example Teams);
– or from third parties, for example Google Analytics, Microsoft, Facebook or LinkedIn (in particular if you use the Single Sign On feature to log in to the Platform);
– from our business partners. These may include, for example, the organizers of events you attend;
– from our marketing partners, when you download a white paper from a third-party site (for example from a social network);
In the event that the event organizers mentioned above collect other personal data in connection with such events, said organizers shall be solely responsible for complying with their legal and regulatory obligations with respect to such collection and processing, which they carry out themselves, with their own means and for their own purposes only.
7. For what purposes do we collect your data?
Depending on how you interact with us, our processing pursues the following purposes, associated with the legal basis for the collection.
| Purpose | Associated legal basis |
|---|---|
| Users | |
| Performance of the Services as described in our General Terms and Conditions | The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request |
| Provision of user support
Sending communications relating to new features (the “Product Communications”) and to changes to our General Terms of Use |
|
| Monitoring the use of the Platform | The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party |
| Aggregation and analysis of data for the purpose of improving the Platform and the Services | |
| Detection, prevention and resolution of technical bugs | |
| Processing of User reviews to improve the platform (only for Users who post on the community.beekast site) | |
| Informing users about their use of the Platform, the management of their account and any instructions sent by email (for example to validate the email address) | |
| Building and managing a User database | |
| Management and processing of requests to exercise the rights of natural persons. | The processing is necessary for compliance with a legal obligation to which the controller is subject |
| Processing necessary to ensure our compliance with applicable laws and regulations | |
| Customer | |
| Performance of the Services as described in our General Terms and Conditions | The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request |
| Carrying out operations relating to Customer management concerning Contracts, orders, invoices, loyalty programs, and customer relationship follow-up. | |
| Provision of Customer support | |
| Sending information notices relating to changes to the General Terms of Service | |
| Sending information notices relating to the subscription Contract, including the expiration or renewal of a subscription, or any other instruction necessary for the performance of the Services | |
| Building and managing a Customer database | The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party |
| Detection and prevention of fraud attempts | |
| Management of unpaid invoices and disputes | |
| Organization of commercial campaigns and/or operations (for example a referral program), excluding gambling subject to authorization | |
| Sending communications relating to our offers and services related to those for which you are already a customer, unless you do not wish to receive them | |
| Producing commercial statistics | |
| Sending communications relating to our offers and services as well as our new content, and organizing events | The data subject has given consent to the processing of their personal data for one or more specific purposes |
| Processing for any other purpose requiring your consent | |
| Management and processing of requests to exercise the rights of natural persons. | The processing is necessary for compliance with a legal obligation to which the controller is subject |
| Processing necessary to ensure our compliance with applicable laws and regulations | |
| Participant without an account | |
| Performance of the Services as described in our General Terms and Conditions | The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request |
| Monitoring the use of the Platform | The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party |
| Aggregation and analysis of data for the purpose of improving the Platform and the Services | |
| Detection, prevention and resolution of technical bugs
Management and processing of requests to exercise the rights of natural persons. |
|
| Processing necessary to ensure our compliance with applicable laws and regulations | The processing is necessary for compliance with a legal obligation to which the controller is subject |
| Visitor | |
| Responding to a request submitted via the contact forms, or following an email sent by you, or following contact made at a digital or physical event or via any other channel | The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request |
| Aggregation and analysis of data relating to browsing on the beekast.com website to produce traffic statistics | The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party |
| Adapting the content of the beekast.com website to the characteristics you have provided (for example the language of the site), of which Beekast may be aware, and – where applicable – to your previous browsing | |
| Building and managing a prospect database | |
| Management of marketing communications and conduct of prospecting | |
| Sending communications relating to our offers and services as well as our new content, and organizing events | The data subject has given consent to the processing of their personal data for one or more specific purposes |
| Processing for any other purpose requiring your consent | |
| Management and processing of requests to exercise the rights of natural persons. | The processing is necessary for compliance with a legal obligation to which the controller is subject |
| Processing necessary to ensure our compliance with applicable laws and regulations | |
8. Recipients of the collected data
The following will have access to your personal data: the authorized and qualified personnel of our company, the authorized teams of our group saas.group in connection with the administration of our systems, the departments responsible for audits (in particular the statutory auditor), as well as our processors, who act on our instructions and strictly within the scope of their assignment. These processors mainly fall into the following categories: platform and data hosting providers (for example Amazon Web Services and MongoDB Atlas, within the European Union), email and newsletter delivery providers, audience measurement and analytics providers, customer support and online assistance tools (for example Intercom), customer relationship management tools, email service providers, subscription management, billing and secure payment tool (for example Chargebee), cookie management tool (for example Axeptio) and technical platform monitoring tools.
Personal data may also be disclosed to public bodies, exclusively to meet our legal obligations, to officers of the court and to ministerial officers. Debt collection agencies may receive data relating to the buyer’s payment only.
9. Assignment of personal data
Your personal data will not be sold, rented or exchanged for the benefit of third parties.
10. Retention period of personal data
(i) With regard to data relating to the management of customers and prospects: Your personal data will not be retained beyond the period strictly necessary for the management of our business relationship with you. However, data making it possible to establish proof of a right or a contract, which must be retained in order to comply with a legal obligation, will be retained for the period provided for by applicable law.
With regard to any prospecting operations aimed at customers, their data may be retained for a period of three years from the end of the business relationship.
Personal data relating to a prospect who is not a customer may be retained for a period of 3 (three) years from its collection or from the last contact initiated by the prospect.
At the end of this three-year period, we may contact you again to find out whether you wish to continue receiving commercial solicitations.
(ii) With regard to identity documents: In the event of exercise of the right of access or rectification, data relating to identity documents may be retained for the period provided for in Article 9 of the Code of Criminal Procedure, i.e., one year. In the event of exercise of the right to object, such data may be archived for the limitation period provided for in Article 8 of the Code of Criminal Procedure, i.e., three years.
(iii) With regard to bank card data: Financial transactions relating to the payment of purchases and fees via the Solution are entrusted to a payment service provider which ensures their proper execution and security.
For the purposes of the services, this payment service provider may receive your personal data relating to your bank card numbers, which it collects and retains in our name and on our behalf.
We do not have access to this data.
To enable you to make regular purchases or pay the related fees on the Solution, your bank card data is retained for the duration of your registration on the Solution and, at the very least, until you make your last transaction.
By checking the box expressly provided for this purpose on the Solution, you give us your express consent to this retention.
Data relating to the card verification value or CVV2, printed on your bank card, is not stored.
If you refuse to have your personal data relating to your bank card numbers retained under the conditions specified above, we will not retain this data beyond the time necessary to complete the transaction.
In any event, data relating thereto may be retained, for evidentiary purposes in the event of a possible dispute of the transaction, in intermediate archives, for the period provided for by Article L 133-24 of the Monetary and Financial Code, namely 13 months following the debit date. This period may be extended to 15 months in order to take into account the possibility of using deferred debit payment cards.
(iv) With regard to the management of lists of objections to receiving prospecting: The information enabling us to take into account your right to object is retained for at least three years from the exercise of the right to object.
(v) With regard to cookies: The retention period of the cookies referred to in article 13 is 13 months.
(vi) With regard to Zoom: if you decide to connect Beekast with Zoom, they may receive personal data which they will collect and retain in order to provide you with the service. You can consult their policy on this subject here: https://zoom.us/fr-fr/privacy.html
We do not have access to this data.
By choosing to connect Beekast and Zoom, you give us your express consent to this retention.
11. Security
We inform you that we take all useful precautions and appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorized third parties. We also use secure payment systems that comply with the state of the art and applicable regulations.
The security measures implemented by Beekast are detailed on the dedicated page.
12. Hosting
We inform you that your data is retained and stored, throughout its retention period, on the servers of the company Amazon Web Service. These servers are located in Ireland.
13. Cookies
Cookies are text files, often encrypted, stored in your browser. They are created when a user’s browser loads a given website: the site sends information to the browser, which then creates a text file. Each time the user returns to the same site, the browser retrieves this file and sends it to the website’s server.
The Solution uses different types of cookies, which have different purposes:
- Technical cookies are used throughout your browsing in order to facilitate it and to perform certain functions. A technical cookie may, for example, be used to remember the answers entered in a form or the user’s preferences regarding the language or layout of a website, where such options are available.
These cookies are essential to the performance of the service.
Among these technical cookies, several third-party cookies are used to offer features based on services external to the Solution: for the login buttons on the home page: Google, Facebook, LinkedIn; for access to customer support: Intercom; for the captcha on the sign-up page: FriendlyCAPTCHA.
- Audience analytics cookies allow us to measure the number of visits to the Solution, the number of pages viewed and the use of the site’s features for statistical purposes. This information base subsequently allows us to improve the product and your user experience on our site, by better understanding our users’ expectations. Your IP address is also collected to determine the city from which you are connecting.
Among these audience analytics cookies, Beekast uses Google Analytics third-party cookies.
- Cookies used for marketing purposes allow us to better understand how our customers use the Solution, in order to provide them with personalized support based on their experience of the Solution and the use they make of it. These cookies also allow us to adapt our communication policy to each customer.
Among these cookies used for marketing purposes, several third-party cookies are used: Zoho, LinkedIn, Facebook, Google Ads, Outbrain.
For all intents and purposes, we remind you that you can object to the placement of cookies by configuring your browser. Such refusal may, however, prevent the Solution from functioning properly.
14. What are your rights over your data
You have the following rights with regard to your personal data:
- Right to information: this is precisely why we have drafted this Privacy Policy. This right is provided for by Articles 13 and 14 of the GDPR.
- Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
- Right to rectification: you have the right to rectify your inaccurate, incomplete or outdated personal data at any time in accordance with Article 16 of the GDPR.
- Right to restriction: you have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
- Right to erasure: you have the right to require that your personal data be erased, and to prohibit any future collection thereof, on the grounds set out in Article 17 of the GDPR.
- Right to set guidelines regarding the retention, erasure and communication of your personal data after your death.
- Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR states that you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
- Right to data portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to require its transfer to the recipient of your choice.
- Right to object: pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process it despite such objection, for legitimate grounds or for the defense of legal claims.
You can exercise these rights by writing to us at the following address: dpo@beekast.com
On this occasion, we may ask you to provide us with additional information in the event of reasonable doubt, or even any document likely to prove your identity if the doubt persists.
For any question or request that has remained unsuccessful, you are entitled to lodge a complaint with the competent supervisory authority, in France, the Commission Nationale de l’Informatique et des Libertés (“CNIL”), located at 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
15. Changes
We reserve the right, at our sole discretion, to modify this policy at any time, in whole or in part. Such modifications will take effect upon publication of the new policy. You are therefore invited to regularly consult the latest version of this policy. Nevertheless, we will keep you informed of any significant change to this privacy policy.