Privacy policy
How BULDING PROTECT SÉCURITÉ collects, uses and protects your personal data, in compliance with the General Data Protection Regulation (GDPR) and the recommendations of the CNIL.
1. Data controller
The data controller is BULDING PROTECT SÉCURITÉ, SIREN 102547551, whose registered office is located at: . Publication director and legal representative: BASSANO Rayan, President.
Personal data / DPO contact: contact@buldingprotect.com.
2. Data collected
- Contact / audit request form — name, job title, organisation, email, phone, site description.
- Browsing data — technical connection data (IP address, browser type) for security and the proper functioning of the site.
- Contractual data — information necessary to conclude and perform a contract (quotation, invoicing, billing details).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing requests and making contact | Performance of pre-contractual measures / consent |
| Performance of contracts and services | Performance of the contract |
| Invoicing and accounting obligations | Legal obligation |
| Site security and abuse prevention | Legitimate interest |
4. Specific provisions for video surveillance
As an installer and operator of video surveillance systems on behalf of our clients, we apply — and help our clients apply — the GDPR requirements and CNIL recommendations:
- Signage — information visible to the people filmed (information panels).
- Limited retention periods — automatic deletion at the end of a period proportionate to the purpose.
- Access logs — logging of the people authorised to consult the images.
- Minimisation — framing limited to the necessary areas, no capture of irrelevant private areas.
- Data subjects' rights — rights of access, objection (legitimate grounds) and erasure.
Each deployment is subject to compliance documentation (impact assessment where applicable, purposes, retention periods, access rights).
5. Recipients of the data
Your data is neither sold nor rented. It is only communicated to the strictly necessary recipients: authorised BULDING PROTECT SÉCURITÉ staff, technical providers (hosting, maintenance), and competent authorities in the event of a legal obligation.
6. Retention periods
| Type of data | Retention period |
|---|---|
| Contact / audit requests | Duration of processing the request, then deletion |
| Contractual and accounting data | Legal accounting retention period (10 years) |
| Video surveillance images (on behalf of clients) | Proportionate period defined contractually, then automatic deletion |
7. Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, portability and objection regarding your personal data, as well as the right to define directives concerning the fate of your data after your death.
To exercise these rights: contact@buldingprotect.com. You may also refer the matter to the CNIL (www.cnil.fr).
8. Security
We implement appropriate technical and organisational measures: encryption of communications (HTTPS), access control, logging, backups and staff awareness. In the event of a data breach, we notify the CNIL where the regulations require it.