Privacy Policy
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you’d like to ask for a copy of your information, or to have it corrected or deleted, please contact us.
This privacy policy (“Policy”) describes how Blue Fountain processes your personal data. It applies to website visitors, job applicants and clients.
1. Data Controller
The data controller responsible for collecting and processing your personal data is:
Blue Fountain
Contact us here.
2. Processing Activities: Purpose, types of data collected, legal basis and storage.
We collect different categories of information based on the type of person and nature and purpose of the data processing. The below table describes how, why and for how long we process your personal data, depending on whether you are a website visitor, job applicant, or client.
| Person: | Purpose: | Data collected: | Legal basis: | Duration of Storage: |
|---|---|---|---|---|
| Website Visitors | Using our website: We automatically collect personal data from you through your web browser or device and through cookies. This collection is done: – to deliver the website, – optimize your experience, – obtain statistics. | IP-address, device type, browser type, referring site, pages accessed during your visit, cookies, the date, and time of each visit. | GDPR, Article 6(1)(a) (consent). GDPR, Article 6(1)(f) (our legitimate interest in providing the website, to improve user experience, and develop and improve our website). | Data relating to statistics and audience measurement are kept for up to 12 months from the date of your visit. (Specific storage periods depend on the individual cookie.) |
| Website Communications: We collect personal data directly from you to communicate with you and to respond to your queries (i.e., through our “Contact us” page). | Name and email address. | GDPR, Article 6(1)(f) (our legitimate interest in being able to respond to your enquiry and communicate with you). | Up to two years from the date on which you contacted us. | |
3. Recipients of personal data
Depending on the circumstances, we may share your data with:
- Service Providers, as part of our business operations and to perform certain services and functions, such as payment processing, marketing, web analytics, hosting, email communication and customer support services. Pursuant to our instructions, and to provide services to us, these service providers may access, process, or store your personal data.
- Public Authorities, if required to (i) comply with a legal obligation or lawful request by public authorities, (ii) protect and defend our legal rights or property, or (iii) protect against legal liability.
4. Transfer of personal data to third countries
In certain situations, we will transfer personal data outside EU/EEA. Transfers to third countries are made on the following legal basis:
- the country has been deemed by the European Commission as having an adequate level of protection with respect to personal data; or
- where the country does not have an adequacy decision from the European Commission, the Commission’s standard contractual clauses (“SCCs”) for the transfer of personal data to third countries will be put in place. To obtain a copy of our SCCs contact us.
5. Your rights
When we process your data, you have the following rights:
- to access, rectify, or erase your personal data.
- to object to or restrict the processing of your personal data.
- if the processing of your personal data is based on your consent, to withdraw your consent at any time.
- to receive a copy of your personal data in a structured, commonly used, and machine-readable format (data portability).
- to determine the retention, deletion, and communication of your personal data after your death.
- to file a complaint with a supervisory authority (in France, the Commission nationale de l’informatique et des libertés (CNIL)).
You can exercise your rights by contacting us; see Section 6.
6. Contact Blue Fountain regarding your privacy
If you have questions about our processing of your personal data, or if you wish to exercise your rights, please contact us. We will respond to your request within one month. If your request is not sufficiently precise or does not contain all the elements required to answer your request, we may ask you to provide additional details.
You may also file a complaint with your local data protection authority. In France, this authority is:
Commission nationale de l’informatique et des libertés (CNIL)
3 place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
Telephone: +33 (0)1 53 73 22 22
If you wish to file a complaint with the CNIL, you can complete the online form available at: www.cnil.fr/fr/plaintes
Website: https://www.cnil.fr
7. Amendments to our privacy policy
We will take all reasonable steps to communicate any changes to this Policy and will post any updated Policy on our website.
Updated: 11 March 2024.