Data protection policy
Bicycode is committed to ensuring the protection, confidentiality and security of the personal data of its users, customers, prospects, suppliers and candidates, and to respecting their privacy.
Objectives of the personal data protection policy
The objectives of this personal data protection policy are to :
- Define how your data is processed when you use the Bicycode website: https: //www.bicycode.eu/
- Explain the measures implemented to comply with applicable regulations on the protection of personal data via the General (EU) Regulation on Data Protection (RGPD) and the Data Protection Act of January 6, 1978 as amended ;
- To inform you of your rights and how to exercise them with regard to your personal data.
N.B.: The account management platform accessible via https://moncompte.bicycode.eu/se-connecter has its own data protection policy.
The data controller
The data controller is BICYCODE, a simplified joint stock company with a single shareholder and capital of €39147.00 located at 12 rue Finkmatt - 67000 Strasbourg and registered in the Strasbourg Trade and Companies Register under number: 891 655 581.
The data controller is the legal entity that determines why and how personal data is processed.
You can contact its Data Protection Officer (DPO) for any questions relating to data protection or for any request to exercise your rights, by e-mail: dpo@bicycode.eu or by post to the attention of the Data Protection Officer at the address given above.
How we collect your personal data
| Goals | Resources | Legal basis | Collected data |
| General information request from you as an individual | Direct collection via an online form | Bicycode's legitimate interest in responding to requests made to it | Name; First name; Phone; Email; UNFCI code |
| General information request from you as a professional | Direct collection via an online form | Bicycode's legitimate interest in responding to requests made to it | Last name; First name; Email; Organization; Telephone |
| Request to the DPO to exercise your rights | Direct collection via an online form | Legal obligation under the RGPD in the context of exercising people's rights. | Last name; First name; Email, NIC for identity verification, purchase invoice and any other document required to exercise rights |
| Send a newsletter | Direct collection via an online form | Legitimate interest of Bicycode for professionals. Consent of the person concerned for the general public | Last name; First name; Email |
| Cookie management | Deposit on computer | Bicycode's legitimate interest in the proper operation of the site | IP address and PC characteristics |
Recipients of collected data
Your personal data will be sent to employees of the relevant department of the data controller in order to respond to your request, or to the data controller's subcontractors when these are necessary to respond to your request.
Using hCaptcha
We use the hCaptcha security service (hereinafter "hCaptcha") on our website. This service is provided by Intuition Machines, Inc. a Delaware, USA company ("IMI"). hCaptcha is used to verify that user actions on our online service (such as submitting a login or contact form) meet our security requirements.
To do this, hCaptcha analyzes the behavior of visitors to the website or mobile application according to various characteristics. This analysis begins automatically as soon as the visitor to the site or application enters a part of the site or application where hCaptcha is activated. For the analysis, hCaptcha evaluates various pieces of information (for example, the IP address, the length of time the visitor has been on the site or application, or the mouse movements made by the user). The data collected during the analysis will be transmitted to IMI.
Analysis by hCaptcha in "invisible mode" may take place completely in the background. Visitors to the site or application are not informed that such analysis is taking place if no challenge is presented to the user.
Data processing based on the RGPD
Data processing is based onArticle 6(1)(b) of the GDPR: the processing of personal data is necessary for the performance of a contract to which the website visitor is a party (for example, the website terms and conditions) or to take action at the visitor's request before entering into a contract.
Our online service (including our website, mobile applications, and any other application or form of access offered by us) must ensure that it interacts with a human and not a bot, and that the activities performed by the user are not related to fraud or abuse.
In addition, processing may also be based onArticle 6(1)(f) of the GDPR: our online service has a legitimate interest in protecting the service against abusive automated crawling, spam, and other forms of abuse that may harm our service or other users of our service.
IMI's role
IMI acts as a "data processor" acting on behalf of its customers as defined by the RGPD, and a "service provider" for the purposes of the California Consumer Privacy Act (CCPA).
For more information about hCaptcha's privacy policy and terms of use, please visit the following links:
- Privacy policy: https: //www.hcaptcha.com/privacy
- Conditions of use: https: //www.hcaptcha.com/terms
Transfer of data to countries outside the European Union
No personal data is transferred to a country outside the European Union or to a third country that does not benefit from an adequacy decision, or to an international organization.
Retention period of collected data
| Treatment | Shelf life |
| For general information | 1 year from response. |
| To subscribe to our newsletter | Until you object via the unsubscribe link in each mailing. |
| To exercise a right | 5 years from the date of response, with the exception of your identity document, which will be deleted if necessary after verification of your identity. |
Your rights
In accordance with the legal and regulatory provisions in force, you have the following systematic rights with regard to your personal data:
- Right of access and rectification : you have the right to request access to your personal data held by Bicycode and to ask for it to be rectified or updated if it is no longer accurate.
- Right to restrict processing: you have the right to ask Bicycode to restrict the processing of data concerning you, for the time needed to amend inaccurate data or, if you have objected to the processing of such data, for the time needed to carry out the necessary checks by the data controller.
In accordance with the regulations in force, you have the following rights depending on the legal basis on which the processing is established and which will be analyzed on a case-by-case basis by the Data Protection Officer whose contact details are specified above.
- Right to deletion: you have the right to obtain from Bicycode the deletion, as soon as possible, of your data when they are no longer required for processing, unless they are required for the exercise of a legal right or to comply with a legal obligation.
- Right to portability: you have the right to ask Bicycode for the data you have provided in the context of processing based on your consent or the performance of a contract.
- Right to object to processing : you have the right to object, for reasons relating to your particular situation, to the processing of data where the processing is based on legitimate interest, except where such data is necessary for the exercise of a legal right, to comply with a legal obligation, or for the performance of a task carried out in the public interest.
- The right to determine the fate of your personal data after your death: you can choose to whom Bicycode should communicate, or not, your personal data to a designated third party. As soon as Bicycode becomes aware of your death and in the absence of any instructions from you, Bicycode undertakes to destroy your personal data, unless it is required to be kept for evidential purposes or to comply with a legal obligation.
To exercise your rights, you may contact the Data Protection Officer, whose contact details are given above. As part of this process, you can consult the CNIL website, which provides model letters to help you in your dealings with us: https: //www.cnil.fr/fr/modeles/courrier
Bicycode then has one month from receipt of your request to reply, and a further two months to process it if it is complex. In some cases, you may be asked to prove your identity by providing a copy of a valid identity document.
If you do not receive a reply within one month, or after Bicycode has replied to your request to exercise your rights, you may send a complaint directly to the Commission Nationale de l'Informatique et des Libertés (CNIL) at the following address: https: //www.cnil.fr/fr/adresser-une-plainte or by post to CNIL - Service des plaintes - 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.
Cookie management information
A "cookie" is a small file stored on your computer that allows you to move from one web page to another while retaining your browsing settings.
Concerning the details on the management of cookies by our site, Bicycode uses cookies that do not allow you to be identified and that are necessary for the proper functioning of the site, so no action on your part is necessary.
Links to third-party sites
The https://www.bicycode.eu/ website may contain links to social media platforms managed by persons or organizations over which the company has no control.
As such, the company cannot in any way be held responsible for the way in which your data is stored or used on these third-party servers. We advise you to read the applicable privacy policy of each third-party website you access via our website, in order to understand how your personal data will be used.
Concerning Meta - owner of the FACEBOOK and INSTAGRAM brands: information on data protection is available at: https: //fr-fr.facebook.com/privacy/policy/
Possible changes to the personal data protection policy
This Privacy Policy may change at any time, in particular to adapt to current legislation or to new data processing carried out by Bicycode. Any changes or updates will be posted on this page to keep users informed. We recommend that you regularly check the current version available.