Personal data
Privacy policy.
This website collects as little data as possible. This page explains which data, why, for how long, and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and French law no. 78-17 of 6 January 1978. This English version is a translation provided for information only; in the event of any discrepancy, the French version prevails.
01Data controller
BYC21 & Co, SASU with a share capital of €1,000, RCS Pontoise 100 335 363, 34 rue Victor Hugo, 95870 Bezons, France, represented by Mr Mohammed Amine Jabri, president.
Contact for any question about your data: [email protected]. BYC21 & Co has not appointed a data protection officer, as this is not mandatory for its activity (article 37 GDPR).
02What this website does, and does not do
The website has no social media buttons and no embedded videos or maps. Fonts are hosted with the website. Audience measurement tools and, where applicable, marketing tools are only enabled with your consent, collected through the cookie banner (see section 05).
The offer builder runs entirely in your browser: your choices are only sent to us if you add them to your request and send it with the contact form.
The contact form sends us the information you enter when you click “Send my request”. It reaches us by email and is not stored in a database on the website.
03Data processed
Website hosting and security
- Data
- IP address, date and time of connection, pages requested, browser type (technical logs).
- Purpose
- Displaying the website, keeping it secure and protecting it against attacks.
- Legal basis
- Legitimate interest of BYC21 & Co in providing a safe and available website (article 6.1.f GDPR).
- Recipient
- Cloudflare, Inc., hosting provider, acting as processor.
- Retention
- [[MISSING: log retention period, depending on the Cloudflare configuration and plan used]]
Contact requests (form, email, phone)
- Data
- Name, company, email address, phone (optional), the content of your message and, if you attached it, the offer built in the offer builder. Fields marked with an asterisk are required for us to reply.
- Purpose
- Answering your requests, arranging a meeting, preparing and following up a commercial proposal.
- Legal basis
- Pre-contractual measures taken at your request (article 6.1.b GDPR); otherwise, legitimate interest in answering a business contact (article 6.1.f).
- Recipients
- The relevant members of the BYC21 & Co team. Technical processors: Cloudflare, Inc. (form processing on the website), Brevo — Sendinblue SAS, France (delivering the email to our inbox), and our email provider [[MISSING: name of the email provider for [email protected] and hosting country]].
- Retention
- 3 years from the last contact, then deletion; the duration of the contractual relationship if an engagement is signed, plus the statutory limitation periods.
We do not sell or rent your data, and we do not use it for fully automated decision-making.
04Transfers outside the European Union
Cloudflare, Inc. is based in the United States. Data it processes on our behalf may be transferred there. This transfer relies on the European Commission adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, to which Cloudflare, Inc. has self-certified (article 45 GDPR), and alternatively on standard contractual clauses (article 46 GDPR).
05Cookies and trackers
The website’s tags are managed by Google Tag Manager, a tool that does not set cookies by itself. By default, all trackers that require consent are disabled: they are only enabled if you accept them in the banner shown on your first visit (article 82 of law no. 78-17, CNIL recommendations). Refusing is as easy as accepting, and does not prevent you from using the website.
Audience measurement and marketing (with your consent)
- Tools
- [[MISSING: exact list of tags in the GTM container (e.g. Google Analytics 4, LinkedIn Insight Tag…) and name of the consent management platform]]
- Purpose
- Understanding website traffic and page usage; where applicable, measuring the effectiveness of our campaigns.
- Legal basis
- Your consent (article 6.1.a GDPR and article 82 of law no. 78-17), which you may withdraw at any time.
- Recipients
- Google Ireland Limited and Google LLC (United States) for Google Tag Manager and Google Analytics, and the providers of the other tags listed above. The transfer to the United States relies on the Data Privacy Framework (article 45 GDPR).
- Retention
- Measurement cookies: 13 months maximum; associated data: 25 months maximum; your choice is kept for [[MISSING: retention period of the choice set in the CMP (6 months recommended)]].
You can change your choices at any time using the “Cookie settings” link at the bottom of every page. The hosting provider may also set a cookie strictly necessary for security, which is exempt from consent. [[MISSING: check in the Cloudflare configuration whether a security cookie is actually set, and which one]]
06Your rights
You have the right to access, rectify, erase, restrict and port your data, and the right to object to processing based on our legitimate interest (articles 15 to 21 GDPR).
You may also set instructions regarding the retention, erasure and disclosure of your data after your death (article 85 of law no. 78-17).
To exercise these rights, write to [email protected] or by post to 34 rue Victor Hugo, 95870 Bezons, France. We reply within one month. If you believe your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
07Minors
This website is intended for businesses. It is not aimed at minors and does not knowingly collect data about them.
08Changes
This policy may change, in particular if the website adds new services. The date of the last update is shown below.
Last updated: 10 November 2026. · Legal notice