Privacy policy

1. Data controller

The controller is BIOPULZ, a French SAS registered under 892 459 256 R.C.S. Nîmes, with its registered office at 299 Impasse des Huppes, 30000 Nîmes, France.

No Data Protection Officer has been appointed; given the limited scope of the processing, appointment is not mandatory. For any question about your data, write to contact@biopulz.com with the subject line "GDPR".

2. Data we collect

We collect no special-category data within the meaning of Article 9 GDPR, and the website is not intended for minors.

• Contact form: last and first name, email address, company (optional), subject and content of your message.
• Business correspondence: the exchanges that follow your request, by email or telephone.
• Technical logs: IP address, date and time, pages requested, browser and operating system, generated automatically by the hosting infrastructure for security and availability purposes.
• Local storage: your language choice, stored in your browser only. No advertising or analytics cookie is used.

3. Purposes and legal bases

Providing the data marked as required in the form is necessary for us to answer you; without it, your request cannot be processed. No automated decision-making or profiling is carried out.

Answering your requests and quotations

Legal basis: pre-contractual steps taken at your request and legitimate interest (Art. 6(1)(b) and (f) GDPR).

Business relationship management and follow-up

Legal basis: legitimate interest in developing our industrial activity (Art. 6(1)(f) GDPR).

Security, logging and site availability

Legal basis: legitimate interest in protecting our systems (Art. 6(1)(f) GDPR).

Storing your language preference

Legal basis: strictly necessary storage, exempt from consent (Art. 82 of the French Data Protection Act).

4. Recipients and processors

Your data is never sold, rented or transferred for advertising purposes. Transfers outside the European Union are covered by the European Commission's standard contractual clauses and by additional technical measures (encryption in transit and at rest).

• BIOPULZ internal staff in charge of commercial and technical relations, on a need-to-know basis.
• Lovable Labs Incorporated (United States): website hosting and transactional email delivery.
• Cloudflare, Inc. (United States): content delivery network and protection against attacks.

5. Retention periods

• Contact requests without a business relationship: 3 years from the last contact.
• Customers and prospects with an active relationship: for the duration of the relationship, then in archive for the applicable legal limitation periods.
• Technical logs: 12 months maximum.
• Language preference: until you clear your browser storage.

6. Security

The website is served exclusively over HTTPS. Form submissions are transmitted encrypted, access to messages is restricted to authorized staff, and our providers are contractually bound by Article 28 GDPR data-processing terms. In the event of a personal data breach likely to result in a risk to your rights, we notify the CNIL within 72 hours and inform you where required.

7. Your rights

Under Articles 15 to 22 GDPR, you have the right of access, rectification, erasure, restriction of processing, portability, and the right to object to processing based on our legitimate interest, as well as the right to give instructions concerning your data after your death.

To exercise these rights, write to contact@biopulz.com or to BIOPULZ, 299 Impasse des Huppes, 30000 Nîmes, France. We reply within one month of receipt; proof of identity may be requested if there is reasonable doubt.

If you consider that your rights are not respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

8. Changes to this policy

This policy may be updated to reflect legal or technical developments. The applicable version is the one published on this page, with the date of last update shown above.