Privacy policy

1. Preamble

The purpose of this privacy policy is to inform users of the website bmf-conseil.fr (hereinafter “the site”) about how their personal data are collected, processed and protected, in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

By browsing this site, you accept the terms of this policy.

2. Data controller

The data controller for the personal data collected on this site, within the meaning of Article 4 §7 of the GDPR, is:

Company name: BMF Conseil
Postal address: 250 Route de Charavines, 38140 Le Rivier d’Apprieu
Phone: +33 (0) 4 76 65 19 34
E-mail: bureau@bmf-conseil.fr

3. Data Protection Officer (DPO)

For any question relating to the processing of your personal data, you may contact our Data Protection Officer:

DPO: Vincent Doucot — IT Manager
E-mail: bureau@bmf-conseil.fr

4. Data collected

The site only collects personal data in the following cases:

  • Contact form: surname, first name, e-mail address, phone number (optional), message.
  • Audience measurement cookies: anonymised technical information (truncated IP address, browser, pages visited, visit duration).
  • Functional cookies: user preferences (cookie consent, browsing choices).

No sensitive data are collected (racial origin, political opinions, religious beliefs, trade union membership, health data, etc.).

5. Purposes of processing

The personal data collected are processed for the following purposes:

  • responding to requests sent via the contact form;
  • producing usage statistics for the site (audience measurement);
  • improving the functioning and usability of the site;
  • complying with applicable legal and regulatory obligations.

6. Legal basis for processing

The processing of your data relies on the following legal bases (Article 6 of the GDPR):

  • Consent: for the placing of cookies that are not strictly necessary (non-anonymised audience measurement, marketing trackers).
  • Legitimate interest: for anonymised audience measurement and the proper functioning of the site.
  • Performance of a contract or pre-contractual steps: for handling requests sent via the contact form.

7. Data recipients

The data collected are intended exclusively for BMF Conseil. They are not sold, rented or exchanged with any third party, unless required by law or judicial order.

Some data may, however, be transmitted to technical sub-processors (hosting provider, audience measurement tools) acting strictly in accordance with our instructions and within a contract compliant with Article 28 of the GDPR.

8. Retention periods

Data category Retention period
Messages received via the contact form 3 years from the last contact
Audience measurement cookies 13 months maximum
Functional cookies (consent) 6 months
Server logs (security) 12 months

Beyond these periods, data are deleted or anonymised.

9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:

  • Right of access: obtain confirmation that data concerning you are being processed and receive a copy.
  • Right of rectification: have inaccurate data corrected or complete incomplete data.
  • Right to erasure (right to be forgotten): request the deletion of your data, subject to legal retention obligations.
  • Right to object: object to the processing of your data on legitimate grounds.
  • Right to restriction of processing: request the temporary suspension of processing.
  • Right to portability: receive your data in a structured, machine-readable format.
  • Right to give directives relating to the retention, deletion and communication of your data after your death.

To exercise these rights, send your request to the DPO (contact details above), providing proof of your identity. A response will be provided within one month, which may be extended by two months given the complexity or number of requests (Article 12 §3 of the GDPR).

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

10. Cookies

The site uses different types of cookies:

  • Strictly necessary cookies: essential for the functioning of the site (consent storage, load balancing). No consent is required.
  • Audience measurement cookies: allow us to analyse site traffic anonymously. Subject to your prior consent.
  • Functional cookies: improve your experience (browsing preferences). Subject to your consent.

You may manage your preferences at any time via the consent banner displayed on your first visit, or via your browser settings. Refusing non-strictly-necessary cookies does not affect access to the site but may limit certain features.

11. Data security

BMF Conseil implements appropriate technical and organisational measures to ensure the security, confidentiality and integrity of your personal data: HTTPS protocol (encryption of exchanges), access controls, regular backups, staff awareness of data protection best practice.

12. Transfer outside the European Union

The data collected are stored on servers located within the European Union. No transfer outside the EU is carried out without the appropriate safeguards under the GDPR (standard contractual clauses adopted by the European Commission, adequacy decision, binding corporate rules).

13. Changes to the policy

BMF Conseil reserves the right to amend this privacy policy at any time in order to adapt to legislative, judicial or technical developments. The date of last update is shown at the bottom of the page.

We invite you to consult this page regularly to take note of any changes.

14. Contact

For any question relating to this privacy policy or the processing of your personal data, you may contact us:

For full legal information (publisher, hosting provider, intellectual property, etc.), please refer to our Legal notice.

Last updated: 6 July 2026