privacy policy
Biggie's Personal Data Protection Charter
1. When and why does the Protection Charter apply?
The Protection Charter applies when you have completed the "Work Together" or "Press" contact form. Its purpose is to describe how Biggie uses your collected personal data as the data controller. The Protection Charter is intended solely for internet users who have filled out one of these forms. Separate protection charters apply to Biggie's clients, employees, etc.
2. Who are we?
Biggie is a communication agency operating as a simplified joint-stock company with a capital of 37,000 euros, registered with the Paris Trade and Companies Register under number 492 831 003. Its headquarters are located at 125 rue de Saussure, 75017 Paris, France. Phone number: +33 (0)1 85 09 13 50. The contact point for any questions related to the Protection Charter is privacy@biggie.co.
3. What personal data processing does Biggie perform, for what purpose, and on what legal basis?
Biggie uses your personal data to receive, process, and respond to requests you send us via an online form. This processing of your personal data is based on Biggie's legitimate interest in providing an appropriate response to your requests.
4. What data about you do we process?
In this context, Biggie may process the following categories of data: the data you provided on the contact form or, if applicable, in the email you sent us, including identification data, your contact details, the date, time, and subject of the request, follow-up information, and responses provided. Regarding the free text field of the form and, if applicable, the content of your emails, we ask you to limit yourself to information strictly necessary for processing your request.
5. Who are the recipients of your personal data?
Only authorized Biggie personnel and technical service providers involved in processing your request are recipients of your personal data. We strictly determine these individuals based on the purpose of your request.
6. Do we transfer your personal data outside the European Union?
As part of using the website, it is not intended to transfer personal data to countries without an adequate level of protection under applicable regulations.
7. How long do we retain your personal data?
Your personal data is retained for three (3) years after your last contact with us.
8. What security measures does Biggie put in place to protect your personal data?
To provide the highest level of security for your personal data, Biggie implements the following security measures:
- Appropriate physical, technical, and organizational measures to prevent any alteration or loss of your personal data or unauthorized access to it;
- Access to personal data strictly limited to personnel and service providers who need to know;
- Regular audits on the collection, storage, and processing of data;
- Communication of security instructions to personnel and service providers with access to personal data;
- Hosting of personal data within secure hosting centers;
- Encryption of access to our services using SSL technology.
However, Biggie draws your attention to the fact that we do not control all the risks related to the functioning of the internet, and inherent risks cannot be completely eliminated.
9. What are your rights and how to exercise them?
You have the following rights concerning the processing of your personal data by Biggie:
- Access and be informed: You have the right to be informed in a concise, transparent, understandable, and easily accessible manner about how we process your personal data. You also have the right to obtain (i) confirmation whether personal data concerning you is being processed by Biggie and, if so, (ii) access to all such personal data and obtain a copy.
- Rectify: At any time, you can request Biggie to rectify and/or complete any personal data concerning you that is incomplete or incorrect, which Biggie will do as soon as possible.
- Erase: In certain cases, you can request Biggie to erase your personal data ("right to be forgotten"); however, this is not an absolute right, and Biggie may have legal or legitimate grounds to retain your personal data in some cases.
- Restrict: In certain cases listed in Article 18 of the GDPR, you can request Biggie to restrict the processing of your personal data.
- Object: When the processing of your personal data is based on Biggie's legitimate interest, you can object to this processing. Biggie will then cease processing your personal data unless there are legitimate grounds justifying the processing.
- Set guidelines for after your death: These guidelines, which can be revoked at any time, may concern the retention, erasure, and communication of your personal data by designating a person responsible for their execution:
- For general guidelines, you can transmit them to a certified digital trusted third party by the CNIL.
- For specific guidelines, you can transmit them directly to Biggie.
- Exercising your rights: If you wish to exercise any of the aforementioned rights or seek additional information, you can send a request to Biggie's Data Protection Officer (DPO), accompanied by a copy of a signed proof of your identity and any other necessary information to confirm your identity and allow us to process your request (such as your postal address):
- By mail to: Biggie France, DPO, 125 rue de Saussure, 75017 PARIS
- By email to: dpo@biggie.co
Unless it is a complex request, a response will be sent to you within one (1) month of receiving your request.
- Filing a complaint: If, after contacting us, you believe that your rights regarding your personal data are not being respected, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).
10. Modification of the Protection Charter:
Biggie reserves the right to modify this Protection Charter at any time, particularly in light of the legal and regulatory context and the recommendations, opinions, and decisions of the CNIL, the European Data Protection Board, and French and European courts.
Last updated on June 27, 2024.