Data Controller, Purposes, and Legal Bases

Responsable du traitement, finalités et bases légales

In accordance with applicable regulations, particularly the European Regulation 2016/679, known as the General Data Protection Regulation (GDPR), and national provisions related to data processing, files, and freedoms, Bpifrance, as the data controller, collects and processes your personal data:

On the basis of the execution of the General Terms of Use in order to manage and offer its Users an information site for the following purposes:

  • Hosting of the Site;
  • Carrying out maintenance of the Site.

On the basis of Bpifrance's legitimate interest in defending its rights and interests:

Managing claims and disputes related to the execution of the General Terms of Use, if necessary, traceability and proof of operations and diligences carried out by the User within the framework of the Site.

In this context, Bpifrance may collect the following personal data directly: name, first name, company name, SIREN number, phone number, email address.

Mandatory Nature of Data

The mandatory nature of providing the requested personal data is indicated by Bpifrance through an asterisk on the data collection forms.

Without this personal data, Bpifrance will not be able to respond to the User's request

Sources of Data

The data is collected directly from Users based on the information provided by Users during their use of the Site.

Data Recipients

The data is intended for Bpifrance Investissement, internal collaborators of the Bpifrance Group companies involved in the management of the Site, and will also be communicated to technical service providers responsible for hosting, maintenance, and support of the Site.

They may also be communicated to any administrative, judicial, or regulatory authority that has a right of communication based on a legislative provision within the framework of a French or European administrative or judicial procedure, upon request.

Data Retention Periods

Personal data is retained by Bpifrance for a period not exceeding that necessary to achieve the purposes specified above, increased if necessary by the legal and regulatory limitation periods in France and Europe.

Data Protection Officer, Users' Rights, and Exercise Modalities

Bpifrance has appointed a Data Protection Officer who Users can contact using the contact details provided in this Article.

In accordance with the GDPR and national provisions related to data processing, files, and freedoms, and subject to the conditions provided by this regulation for the exercise of these rights, the User has the right to access, rectify, and delete their personal data, as well as the right to data portability.

The User also has the right to request the limitation of processing concerning them and to object, for reasons related to their particular situation, to the processing of their data, including profiling. Finally, the User has the right, in accordance with national provisions related to data processing, files, and freedoms, to organize the fate of their personal data post-mortem.

These rights can be exercised by sending a letter, either by post to Bpifrance, DCCP, Data Protection Officer, at 27-31 avenue du Général Leclerc, 94710 Maisons-Alfort Cedex, or by email to donneespersonnelles@bpifrance.fr.

Finally, the User has the right to file a complaint with the National Commission for Data Protection and Liberties (CNIL) if they believe that the described processing operations infringe on their rights.

Enfin, l’Utilisateur dispose du droit d’introduire une réclamation auprès de la Commission Nationale de l’Informatique et des Libertés (CNIL), s’il estime que les opérations de traitement décrites portent atteinte à ses droits.

For more information on the processing carried out by Bpifrance and its various legal entities, please consult our policies accessible here: https://www.bpifrance.fr/personal-data

We invite you to regularly refer to the policies that concern you.

Additionally, within the framework of certain specific products or services, we may provide you with specific information related to the personal data processing implemented in this context.

Finally, when you provide us with personal data of other individuals, we invite you to share the relevant policy(ies) with them.