GDPR & Data protection

Privacy policy

This English translation is provided for convenience only. In case of discrepancy, the French version prevails.

Last updated: August 2026

1. Data controller

2. Data collected and purposes

2.1 Contact requests and forms

When you book an appointment via Cal.com or contact us by email or phone, we collect:

• First and last name,to personalize our exchanges
• Email address,to send you the appointment confirmation and communications related to your project
• Phone number (optional), to contact you directly
• Information about your business,to prepare the audit and recommendations

Legal basis: your consent (article 6.1.a of the GDPR (General Data Protection Regulation)) for audience measurement. No measurement cookie is placed until you have accepted it; declining has no impact on access to the site. The server's technical logs, necessary for security and proper operation, are based on legitimate interest.

We use Google Analytics 4 (Google Ireland Limited) to measure site traffic. The tool is configured in consent mode: until you have accepted, no cookie is written and no identifying data is transmitted. IP addresses are anonymized and data retention is limited to 14 months.

2.2 Browsing data

This site may automatically collect certain technical data during your visit:

• IP address (anonymized as far as possible)
• Browser type and operating system
• Pages visited and time spent
• Referral source

Legal basis: legitimate interest (improving the site), no advertising tracking cookie without explicit consent.

2.3 Client data (services)

As part of our automation and AI assignments, we may process data from your systems (CRM, emails, etc.). This processing is governed by a DPA (Data Processing Agreement) signed with each client.

3. Retention period

4. Data recipients

Your data is never sold. It may be shared with:

• Cal.com,appointment scheduling (privacy policy available at cal.com)
• Technical service providers,hosting, messaging tools (subject to DPAs)
• Legal authorities,only upon judicial request

Every subcontractor is selected for its data protection guarantees, in accordance with article 28 of the GDPR.

Google Ireland Limited (Google Analytics 4): audience measurement, only after your consent. Vercel Inc.: site hosting and technical logs. These providers act as data processors within the meaning of article 28 of the GDPR.

5. Transfers outside the EU

Some tools used (Cal.com, Google Analytics, Vercel) may transfer data to the United States. These transfers rely on the EU-US Data Privacy Framework and, failing that, on the European Commission's standard contractual clauses. For Google Analytics, no transfer takes place until you have consented.

6. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access,obtain a copy of your personal data
• Right to rectification,correct inaccurate data
• Right to erasure,request the deletion of your data ("right to be forgotten")
• Right to restriction,temporarily restrict processing
• Right to portability,receive your data in a structured format
• Right to object,object to processing based on legitimate interest

To exercise these rights, contact us at contact@benit.fr specifying your request. Response within 30 days.

You also have the right to lodge a complaint with the CNIL (French data protection authority).

7. Security

BenIT implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, alteration or destruction, in accordance with article 32 of the GDPR.

8. Cookies

This site places two categories of trackers:

• Necessary: remembers your consent choice, stored in your browser (localStorage) and not shared with third parties. Exempt from consent.
• Audience measurement: Google Analytics 4 cookies (_ga, _ga_*), 13-month lifespan. Placed only after your agreement.

No advertising or cross-site tracking cookies are used. You can change or withdraw your choice at any time: your browser settings. Withdrawal is as simple as acceptance and takes effect immediately.

9. Changes

This policy may be updated at any time. The version in effect is the one displayed on this page, with the date of the last update.