Last updated: [DATE].
1. Who processes your data?
The data controller is [LEGAL NAME], [FORM] with share capital of [CAPITAL] EUR, registered [REGISTER] no. [NUMBER], registered office [FULL ADDRESS]. Contact: contact@buznizpub.com.
2. What data do we collect?
“Free digital diagnosis” form — the required fields ask for: first and last name, phone number, email, the answers to the questions of the journey (activity, context, goals…), possibly the website URL to analyze, the date and time of submission, your timestamped consent (GDPR checkbox) and a hashed fingerprint of your IP address (SHA-256 with salt — your IP is never stored in clear).
Chat assistant — the message you type is sent to our AI provider to generate a reply. The content of the questions is not stored by the website (only an anonymous counter limits usage).
Browsing — servers temporarily record technical data (raw IP address in the host’s logs, browser). No measurement or advertising cookie originates from the website.
3. Why do we collect this data?
Producing and sending your free diagnosis, managing the commercial relationship, creating your record in the CRM (Brevo), generating the AI analysis of your answers and then re-contacting you — based on pre-contractual measures taken at your request (GDPR art. 6.1.b), your consent (6.1.a) and the publisher’s legitimate interest (6.1.f).
4. Retention periods
- Form answers: 365 days by default (configurable), then automatic deletion.
- CRM data (Brevo): until you unsubscribe, then 3 years of intermediate archiving for B2B prospecting.
- Security files (sending limits, quotas): temporary, expiring automatically.
- Timestamped consents: kept with the data they relate to.
- Chat questions: never stored (only an anonymous counter remains).
5. Recipients & sub-processors
LWS (hosting, EU), Brevo (emails + CRM, EU), Groq (AI, USA), Google (Manrope font via Google Fonts, no cookie set by the website), Calendly and WhatsApp (only if you click the links, in a new tab). These partners act as sub-processors or independent controllers depending on the case.
6. Transfers outside the European Union
Groq (AI), Google (fonts) and Calendly are established in the United States. Transfers rely on the EU-US Data Privacy Framework (European Commission adequacy decision) or on standard contractual clauses. No transfer is made for resale or advertising purposes.
7. Security
Encrypted connection (HTTPS). Your IP is hashed (never in clear), the form is protected against spam (nonce, honeypot, sending limits), and no API key is ever transmitted to the browser (AI/email calls only go through the server).
8. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, portability, objection, and withdrawing your consent at any time, as well as setting instructions for the fate of your data after your death. To exercise them: contact@buznizpub.com (reply within 1 month) or contact the French data protection authority (CNIL, cnil.fr).
9. Automated decision?
The AI analysis of your journey is a decision-support tool subject to human validation: it does not constitute a fully automated decision (art. 22 GDPR).
10. Minors
The website is aimed at professionals. It is not intended for minors and does not knowingly collect their data.
11. Changes
This policy may change. The online version prevails; the update date appears at the top of the page.