Privacy policy

Updated 04/06/2024

1. Purpose of this policy

Respect for privacy is a fundamental right and one of BEAVR's core values. For this reason, BEAVR attaches the utmost importance to the security and protection of the personal data of its customers, partners and employees, and is uncompromising in its compliance with the relevant legal provisions.

During their use of the www.beavr.tech Site and the certif.beavr.tech Application or the Services offered by BEAVR, we may collect personal data about Users.

European Directive 95/46/EC on the protection of personal data stipulates that personal data must be processed lawfully, fairly and transparently.

The purpose of this data privacy policy (hereinafter "Policy") is to inform BEAVR's customers, partners and employees in a transparent manner about how personal data concerning them is processed.

2. Definitions

All terms relating to the protection of personal data used in this document and identified by capital letters, used in the singular or plural, must be interpreted in accordance with the General Data Protection Regulation 2016/679 of April 27, 2016 repealing Directive 95/46/EC (hereinafter "the European Regulation").

  • "Data", used in the singular or plural, refers to Personal Data processed by BEAVR in its capacity as Data Controller and Subcontractor;
  • "Site" refers to the present website accessible at www.beavr.tech;
  • "Application" refers to the software platform accessible from certif.beavr.tech - unlike the Site, access to the Application requires the creation of an account;
  • "User", who is the Data Subject within the meaning of the European Regulation, means the natural person who browses or consults the Website or uses the certif.beavr.tech application in order to access the Services provided by BEAVR ;
  • "Service": refers to all the services provided by BEAVR to Users via the Application, in particular the collection of ESG data and preparation for EcoVadis certification;
  • "Identifiers": identifiers and passwords used by the User to access the certif.beavr.tech application;
  • "User Data" means data collected, disseminated, uploaded to the Application or shared with BEAVR on any medium whatsoever by the User and processed by BEAVR for the purpose of providing the Service - such data may relate to the User or the Company for which the User works and may include Personal Data.

3. Data controller

Whether browsing the www.beavr.tech website or using the certif.beavr.tech application, the BEAVR service is provided by BEAVR, a société par actions simplifiée (simplified joint stock company) with capital of 24,868.6 Euros, registered in the PARIS Trade and Companies Register under number 909 074 593, whose registered office is located at 16 rue de Lancry, 75010 Paris.

BEAVR assumes the role of controller for some of the processing operations and subcontractor for others.

  • BEAVR is the data controller for the processing of data relating to consultation, browsing on the Site or the User path.
  • For processing in connection with the creation, configuration, updating and use of an account on the certif.beavr.tech Application in order to benefit from the Services offered by BEAVR, BEAVR acts as a subcontractor of the User's employer (the "Customer"), i.e. we process your data in its name, on its behalf and according to its instructions. In the event of any contradiction between this policy and the data protection document provided by the Customer, the provisions of the Customer's information document shall take precedence over this privacy policy.

4. Service description

BEAVR provides its customers with a software platform and expertise to ensure their compliance in terms of extra-financial performance management.

Through this platform, we offer several services, including

  • ESG data collection and consolidation
  • ESG reporting and CSR report writing
  • Preparation for certification (EcoVadis, B Corp, etc.)

5. Description of processing and nature of data collected

When BEAVR acts as a subcontractor, we collect the following data in order to provide the Customer with the contractually agreed Services.

Where BEAVR is the data controller, we collect the following data

  • Identification data: Last name, First name, Professional e-mail address, Company
  • Connection data: Username, password, IP address, logs

6. Why and for how long do we collect your data?

We collect your personal data for specific purposes based on different legal grounds.

7. Recipients of data

For certain processing purposes, we may share our Users' data with

  • Our employees
  • The service providers and subcontractors we use to carry out a range of operations and tasks, and in particular: our hosting service providers (Webflow, AWS), our CRM service provider (Hubspot)
  • The CSR and sustainable development consultants in our community who support and advise you
  • Statutory auditors, public bodies, exclusively to meet our legal obligations, court officers, legal agents and debt collection agencies

Only strictly necessary information is shared with third parties outside BEAVR. In particular, we ensure that our service providers and subcontractors refrain from using the data for purposes other than those initially intended, and we make every effort to ensure that they preserve the confidentiality and security of your data.

Similarly, we only provide the data required by legal or regulatory authorities, in order to comply with our legal obligations. We do everything in our power to maintain confidentiality and security.

We do not sell your data.

8. Transfer of data to third countries

Your data is stored on Webflow and AWS servers in Europe.

It may be transferred outside the European Union as part of the tools we use and our relations with our subcontractors (see article "Who receives the data?").

In the event of such a transfer, we guarantee that the transfer is carried out :

  • Or to a country offering an adequate level of protection, i.e. a level of protection equivalent to that required by European regulations;
  • Or that it is governed by standard contractual clauses.

9. Data retention

We retain your personal data only for as long as is necessary to fulfil the purpose for which we hold the data, to meet your needs or to comply with our legal obligations.

Shelf lives vary depending on a number of factors, such as :

  • Requirements for BEAVR operations
  • Contractual requirements
  • Legal obligations
  • Recommendations from the supervisory authorities

→ Refer to the table in Article 6 for details of retention periods by type of data.

10. Rights to your data

You have the following rights with regard to your personal data:

  • Right to information: The purpose of this policy is to provide you with transparent information on the management of your personal data.
  • Right of access: You have the right to access all your personal data at any time.
  • Right of rectification: You have the right to rectify inaccurate, incomplete or obsolete personal data at any time.
  • Right to limitation: You have the right to obtain the limitation of the processing of your personal data in certain cases defined in art.18 of the RGPD.
  • Right to be forgotten: You have the right to demand that your personal data be deleted, and to prohibit any future collection.
  • The right to lodge a complaint with a competent supervisory authority (inFrance, the CNIL), if you consider that the processing of your personal data constitutes a violation of the applicable laws.
  • The right to set up instructions for the storage, deletion and communication of your personal data after your death.
  • Right to object: You have the right to object to the processing of your personal data. Please note, however, that we may continue to process your data despite your objection, for legitimate reasons or to defend legal claims.

You can exercise these rights by writing to us using the contact details below. We may ask you to provide additional information or documents to prove your identity.

11. Contact point for all inquiries relating to the processing of personal data at BEAVR

If you have any queries relating to the processing of personal data in general or to the processing of your personal data, you can contact us in the following ways

  • Email : contact@beavr.tech
  • Mail: Beavr SAS, 16 rue de Lancry, 75010 Paris

12. Modifications

We may modify this policy at any time, in particular in order to comply with any regulatory, jurisprudential, editorial or technical developments.These modifications will apply as of the effective date of the modified version.You are therefore invited to consult the latest version of this policy on a regular basis.Nevertheless, we will keep you informed of any significant modifications to this privacy policy.

Appendix - Cookie management

A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the site again, the cookie enables the site to recognize your browser. In this way, the information you have previously provided can be retrieved, so that you can easily use personalized functions. Cookies can store user preferences and other information to enhance your experience on the website.

Some cookies are required for technical reasons in order for the site to function, and we refer to these as "strictly necessary". Other cookies enable us to track and target visitors' interests in order to improve their experience on the site.

The cookies we issue allow us to :

  • to ensure the operation of the services available on our website ("strictly necessary" cookies)
  • to compile anonymized statistics and volumes of visits to and use of the various elements making up our Site (sections and content visited, path taken), enabling us to improve the interest and ergonomics of our services;
  • to adapt the presentation of our Site to your terminal's display preferences (language used, display resolution, operating system used, etc.) during your visits to our Site, depending on the hardware and viewing or reading software that your terminal is equipped with;
  • to memorize information relating to a form that you have filled in on our Site (registration or access to your account) or to products, services or information that you have chosen on our Site;
  • to allow you to access reserved and personal areas of our Site, such as your account on the cloud.beavr.fr Application, using identifiers or data that you may have previously entrusted to us, and to implement security measures, for example when you are asked to connect again to a content or service after a certain period of time.

You can set and block these cookies directly via your Internet browser. To find out more about how to configure your browser, visit the dedicated page on the CNIL website(https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser).

‍

Please note that blocking "strictly necessary" cookies may considerably restrict or even prevent you from browsing the site and accessing the Service.

‍