Legal Notices

Site editor

This website is published by La Bulle.

SARL with capital of 2500 euros.
Registered in the Bobigny Trade and Companies Register under number 493 683 056 00029
Address: 23bis rue Paul Bert, 93400 Saint-Ouen-sur-Seine
Phone: 0683004929

Host

This website is hosted by:

Cloudflare, Inc.
Headquarters: TOWNSEND STREET 101 SAN FRANCISCO UNITED STATES

Privacy Policy

This privacy policy aims to explain why we collect your data and how we are committed to protecting it.

La Bulle is committed to protecting your personal data and your privacy.

In this regard, and in application of the General Data Protection Regulation (hereinafter referred to as “GDPR”), we inform you below of the conditions under which your personal data is required to be processed by us.

What personal data do we process?

Purposes:

We may collect and store your personal data, in particular for:

Process and respond to your messages, Create and manage access to your accounts, Receive and process your order, Receive and process your participation in a survey or competition, Manage your subscriptions to our newsletters, Establish and monitor the commercial relationship that may result from your messages, Write a review/comment published on the site, Process your job application, Receive your payment, Ensure accounting and management, Improve our monitoring and customer service, Manage the proper functioning and personalization of services, Send you commercial and advertising information based on your preferences, Detection of attacks and legal recourse against fraud, Memorize your choices regarding the use of cookies, Process and respond to your requests to exercise your rights, To meet regulatory requirements in force or in the process of being adopted

Data categories:

Contact details (e.g., first name, last name, telephone number, email); Technical and location information generated in the context of using our services

Legal basis for processing

The processing of personal data implemented is based on:

Either on the consent of the data subject (Article 6.1.a of the GDPR) for all processing that requires the prior collection of consent. In online forms, mandatory fields are marked with an asterisk. If the mandatory questions are not answered, we will not be able to provide you with the requested services.

Either for the performance of a contract or the performance of pre-contractual measures,

Either for the pursuit of a legitimate interest (Article 6.1.e of the GDPR).

Either for compliance with a legal or regulatory obligation;

Your data is kept for the duration necessary to fulfill the purposes mentioned above.

The retention period for Customers' personal data depends on the purpose concerned. In this context, Customers' personal data is retained for the time necessary to fulfill the
of their request. In the absence of any implementation, personal data is deleted within the time limits recommended by the National Commission for Information Technology and Civil Liberties (CNIL), after a period of three years from their collection, subject to: – the legal possibilities and obligations regarding archiving,
– obligations to retain certain data, for evidentiary purposes, and/or anonymization of
these.
The Client's personal data collected and processed for the purposes of executing offers are kept
for the duration necessary to manage the contractual relationship.
By way of exception, personal data required to establish proof of a right or a contract are archived in accordance with legal provisions (5 or 10 years after the end of the commercial relationship as the case may be).

Who are the recipients of your data?

Your personal data is intended for La Bulle.

Our internal services: They are processed by the staff of our various departments such as the sales department or the IT security department., Trusted companies or individuals: they process your information for us for the purposes set out above, in accordance with our instructions as described in our Privacy Policy and any other appropriate use cases in terms of confidentiality and security., Technical subcontractors: Personal data concerning you may be transferred to our technical subcontractors (within the meaning of Article 4.8 of the GDPR) in a strictly regulated manner. In the event of a transfer, we ensure that the subcontractors comply with the GDPR and take technical and organizational measures to guarantee data protection (Art. 28 of the GDPR).

Traffic analysis (like Google Analytics ), Customer service / chat (like Intercom), CRM provider (like Hubspot), Payment provider (like Stripe), Email provider (like Mailjet or Sendgrid), CDN service (like Cloudflare), Advertising provider (like Google Ads)

We sometimes need to allow our partners to process, on our behalf, the personal information we hold about you for the purposes set out in this policy or for any other reason required by law.

The personal data of Customers collected is hosted in France.

In the event of using a service provider located outside the European Union, we undertake to verify that appropriate measures have been put in place so that personal data benefits from an adequate level of protection.

How does La Bulle keep your data secure?

We implement all organizational and technical measures to ensure an appropriate level of security for your personal data, and in particular to avoid any loss of confidentiality, integrity or accessibility.

We frequently back up data, We encrypt your data to protect it during transfer, Where possible, we limit access to personal information to only those who need to process it, Ensure that these third parties guarantee the same level of protection to said personal data, Implement technical and organizational measures to ensure that the storage of Customers' personal data is secure and for the duration necessary to achieve the purposes pursued.

What are your rights over your personal data?

In accordance with Applicable Regulations, you have the following rights:
A right of rectification : you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you by providing a supplementary declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your data,
A right to erasure : In certain cases, you have the right to obtain the erasure of your data. However, this is not an absolute right and we may retain this data for legal or legitimate reasons.
A right to restriction of processing : in certain cases, you have the right to obtain restriction of processing of your data,
A right to data portability : you have the right to receive your data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing of your data is based on your consent, on a contract or when this processing is carried out by automated means,
A right to object to processing : you have the right to object at any time to the processing of your data for processing based on our legitimate interest, a mission in the public interest, and those for commercial prospecting purposes. This is not an absolute right, and we may refuse your request to object for legal or legitimate reasons.
The right to withdraw your consent at any time : you can withdraw your consent to the processing of your data when the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent made before its withdrawal,
The right to lodge a complaint with a supervisory authority : You have the right to contact your data protection authority to complain about our personal data protection practices,

Pursuant to the GDPR , the conditions for exercising these rights may vary depending on the basis of lawfulness of the processing mentioned in the first paragraph.
We will respond to any exercise of rights as soon as possible and in any event within 30 days of receipt of the request.

We reserve the right:

To request proof of the applicant's identity in the event of reasonable doubt about the latter and in order to respect its obligation of confidentiality,

To extend the response deadline by two months, informing the applicant of this extension and the reasons for the postponement within one month of receipt of the request,

To refuse to respond to an exercise of rights if it was considered abusive (given their number, their repetitive or systematic nature).

Who to contact for all GDPR-related inquiries?

To exercise your rights, you can contact us:

The Bubble

SARL with capital of 2500 euros.
Registered in the Bobigny Trade and Companies Register under number 493 683 056 00029
Address: 23bis rue Paul Bert, 93400 Saint-Ouen-sur-Seine
Phone: 0683004929

If, despite our efforts and commitments, you feel that your rights regarding your personal data have not been respected, you can submit a complaint to the National Commission for Information Technology and Civil Liberties: CNIL 3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07

Reservation of modification of the Data Protection Policy

This Personal Data Protection Policy may be subject to change. It has been developed from a free template that can be downloaded from the website https://donnees.net . As we are constantly developing our services, we reserve the right to modify this Privacy Policy, in accordance with the legal provisions in force. Any changes are published on this document in a timely manner. We advise you to consult this page regularly to be aware of any changes or updates made to our privacy policy.

Cookies Policy

What is a “cookie”?

Cookies are small text files that a website saves on your computer or mobile device when you visit the site.

They make your online experience easier by saving browsing information. With cookies, websites can keep you logged in, remember your site preferences, and offer you personalized content. Cookies can also be used to compile statistics on the browsing experience and to display targeted advertising.

In general, cookies can be classified by:

Domain :

– First-party cookies are issued by a website that a user visits directly.

– Third-party cookies are not created by the website being visited, but by a third party such as Google Analytics, DoubleClick, Facebook, Twitter, LinkedIn, Youtube, Vimeo, etc.

Objective :

– Strictly necessary cookies are required for the website to function properly.

– Preference cookies allow a website to remember choices you have made in the past.

– Statistics cookies help the website owner to collect statistical data and understand how visitors interact with the website.

– Marketing cookies track the user's online activity to help advertisers deliver more relevant ads.

Duration :

– Session cookies which are deleted when the user closes the browser.

– Persistent cookies that remain on the user’s device for a certain period of time.

What cookies and trackers do we use?

Strictly Necessary Cookies

Cookie key Domain Path Cookie type Expiration Description

PHPSESSID
First-party Session Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages.

Performance cookies

_gid
First-party 1 day This cookie is set by Google Analytics. It stores and updates a unique value for each page visited and is used to count and track pageviews.

_gat
first-party 1 minute This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate – limiting the collection of data on high traffic sites.
_ga
First-party 2 years This cookie name is associated with Google Universal Analytics – which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

Targeting cookies

Cookie key Domain Path Cookie type Expiration Description
YSC
More info .youtube.com / Third-party Session This cookie is set by YouTube to track views of embedded videos.

VISITOR_INFO1_LIVE
More info .youtube.com / Third-party 6 months This cookie is set by Youtube to keep track of user preferences for Youtube videos embedded in sites; it can also determine whether the website visitor is using the new or old version of the Youtube interface.

Your preferences regarding cookies

When you first visit the site, a cookie banner will prompt you to accept or reject cookies that are not essential to the site's operation. You can reject/disable cookies at any time, with the exception of cookies required for the stable operation of the site. You can change your cookie management preferences at any time.