Personal data
Privacy policy
How the bestlog.tech website processes your personal data, with regard to the GDPR and the recommendations of the CNPD.
Draft for approval
This policy is a draft. Items marked [À COMPLÉTER] must be filled in and the whole policy approved before going live.
This English version is provided for convenience. In the event of any discrepancy, the French version prevails.
Data controller
BESTLOG S.A.R.L.-S, [À COMPLÉTER — registered office address], Luxembourg. Full contact details are given in the legal notice.
Processing carried out
1. Requests sent through the forms (contact and partner)
- Data: name, organisation or software vendor, job title, business email, subject, description of the solution, customer type, deployment need, message.
- Purpose: responding to your request, discussing a project or partnership, preparing a proposal.
- Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR) or Bestlog's legitimate interest in responding to the requests it receives (Article 6(1)(f)).
- Retention period: [À COMPLÉTER — proposal: 3 years from the last exchange, unless there is a contractual relationship].
2. Protecting the forms against abuse
- Data: a non-reversible fingerprint of the IP address (hashed with a secret key) and the time of submissions.
- Purpose: limiting how often submissions can be made and blocking automated submissions.
- Legal basis: legitimate interest (site security).
- Retention period: 24 hours at most.
3. Server logs
- Data: IP address, date and time, page requested, response code, browser, referring page.
- Purpose: site security and visitor statistics.
- Legal basis: legitimate interest.
- Retention period: 18 months.
Recipients
- Authorised staff of BESTLOG S.A.R.L.-S responsible for handling requests.
- OVH SAS, the site's hosting provider, acting as processor.
- The email provider that receives the requests: [À COMPLÉTER].
Your data is neither sold nor passed on for commercial purposes.
Hosting and transfers
The site is hosted by OVH on servers located in Europe ([À COMPLÉTER — data centre location]). No transfer of data outside the European Economic Area is planned by this site: [À COMPLÉTER — to be confirmed, in particular for email].
Cookies
The site uses no tracking cookies, no audience measurement tool and no third-party service. No consent banner is therefore shown.
A single technical cookie is set, and only when a form is used: a session cookie, strictly necessary to protect the form against automated submissions. It is deleted when the browser is closed.
Your rights
You have the right of access, rectification, erasure, restriction, objection and, where applicable, data portability. To exercise them, use the contact form (subject “Other”) or write to the address given in the legal notice. Proof of identity may be requested in case of reasonable doubt.
Complaints
If you believe your rights have not been respected, you can lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg — cnpd.public.lu.
Updates
Last updated: [À COMPLÉTER].
