Privacy Policy

of the Beeshake web application

PERSONAL INFORMATION

Beeshake guarantees to comply with Law No. 78-17 of January 6, 1978, amended, known as “Informatique et Libertés” and, from May 25, 2018, with the provisions of the General Data Protection Regulation (2016/679) (GDPR).

In this regard, The data protection officer can be contacted via email: donneespersonelles@cospirit.com

The processing of personal data is subject to the applicable regulations on personal data. 

Processing of personal data carried out by Beeshake 

Beeshake commits to: 

  • only process the customer's personal data upon prior written instructions from the customer, including with regard to the transfer of the customer's personal data outside the European Economic Area (EEA) and/or outside the country in which the customer is established or in which the personal data is collected;
  • not to take any copies of documents and information media containing personal data unless this is necessary for the performance of its service, and only after having obtained the prior written consent of the client;
  • not to use for personal purposes, including for commercial or statistical purposes and/or for analysis, research and study purposes, the customer's personal data or data resulting from the processing of said personal data, including when said processing results in depersonalization or anonymization of said data;
  • only keep the customer's personal data, in a form allowing the persons concerned to be identified, for the duration necessary for the performance of the services;
  • transmit, at the latest within ten (10) working days from the customer's request, all information enabling the customer to satisfy any request for the right of access and transmission of personal data processed on its behalf by Beeshake and communicated by a data subject;
  • promptly notify the customer of any access request that may be submitted directly to it by a data subject and assist the customer in responding to the request by transmitting the necessary information indicated above;
  • inform the customer without delay of any request for access or communication from a third party claiming authorization arising from the application of legal or regulatory provisions;

Security and confidentiality of processing

Beeshake implements the following security measures:

  • complete anonymization of the customer's personal data upon request within a maximum of 5 working days;
  • the purging of the customer's personal data beyond the personal data retention period provided for in the context of the collaboration with the customer;

Privacy by Design, Privacy by Default and Data Portability 

Beeshake takes appropriate technical and organizational measures:

  • intended to effectively implement the principles of minimization and limited retention of personal data,
  • ensuring that, by default, only the customer's personal data necessary for each specific processing purpose are processed, including the implementation of manual anonymization solutions.

 

Beeshake uses interoperable formats (csv as standard) allowing the portability of the customer's personal data required by the applicable regulations on personal data, and implements technical and organizational measures allowing the customer to respect the rights of the persons concerned, in particular the right to access their personal data, the right to obtain the rectification or deletion of their personal data. 

International Transfers of Personal Data

Beeshake undertakes to process the customer's personal data exclusively in the territory of a Member State of the EEA.

Beeshake undertakes not to disclose, make accessible or transfer any personal data of the customer, even for routing purposes, to any processing entity or subcontractor established in a third country located outside the EEA, except with the prior written consent of the customer. 

Beeshake guarantees that no personal data of the customer will be transferred outside the EEA by its own subcontractors or partners, unless with the specific prior written consent of the customer.

For this purpose, the list of countries in which the servers used to provide the hosted services are provided in the technical documentation. If Beeshake has the servers hosted in other countries, it will inform the customer in advance and obtain its prior written consent. In the event of a change of country, Beeshake will provide the customer with an updated list of destination countries.

 

Retention of Personal Data

Beeshake may provide the customer with a report of effective destruction of personal data within fifteen (15) working days upon simple request from the customer.