Privacy Policy

Bulldozer SAS takes the protection of the personal data of visitors and users of bulldozer-collective.com seriously. This policy explains what data we collect, why, who we share it with, how long we keep it, and how to exercise your rights.

This policy is established in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended, on information technology, data files, and civil liberties.

1. Data controller

The controller for data collected on the site is BULLDOZER SAS, 2 ruelle du four, 38580 Le Moutaret, France — RCS Grenoble 978 285 831 — email: jordan@bulldozer-collective.com.

Bulldozer has not formally appointed a Data Protection Officer (DPO) — this is not a legal requirement given the nature and size of its activity. Any question regarding your personal data can be addressed directly to Jordan Chenevier-Truchet at the address above.

2. Data collected and purposes

Data collected When Purpose Legal basis
Name, email, company, message Contact / demo form Responding to your request, sales qualification Pre-contractual measures (Art. 6.1.b GDPR)
Name, email, company, chosen time slot Appointment booking (Calendly) Organizing the requested sales meeting Pre-contractual measures (Art. 6.1.b GDPR)
Email Bullish newsletter sign-up Sending the newsletter Consent (Art. 6.1.a GDPR)
Browsing data, IP address, pages viewed Site navigation Audience measurement (Google Analytics 4) Consent via cookie banner (Art. 6.1.a GDPR)
Advertising identifiers, third-party cookies Site navigation Retargeting and ad performance measurement (Meta, LinkedIn, Google Ads) Consent via cookie banner (Art. 6.1.a GDPR)
Publicly available professional data (job title, company) B2B commercial prospecting Prospecting professional clients Legitimate interest (Art. 6.1.f GDPR), in line with CNIL guidance on B2B prospecting

We do not collect any sensitive data within the meaning of Article 9 of the GDPR, and the site is not intended for minors.

3. Recipients and processors

Your data may be shared with the following providers, acting as processors within the meaning of Article 28 of the GDPR, to the extent necessary for their services:

– HubSpot (HubSpot Ireland Ltd / HubSpot Inc.) — customer relationship management (CRM), forms, email and newsletter delivery

– Calendly (Calendly LLC) — online appointment scheduling

– Google (Google LLC) — audience measurement (Google Analytics 4) and advertising (Google Ads)

– Meta (Meta Platforms Ireland Ltd) — advertising delivery and measurement (Meta Ads)

– LinkedIn (LinkedIn Ireland Unlimited Company) — advertising delivery and measurement (LinkedIn Ads)

– Cookiebot (Usercentrics A/S) — management and proof of your cookie consent

– OVHcloud (OVH SAS) — site hosting, in France

We do not sell or rent your personal data to third parties.

4. Transfers of data outside the European Union

Some of our processors (HubSpot, Google, Meta, LinkedIn, Calendly) may process data outside the European Union, notably in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and/or these providers' adherence to the EU-U.S. Data Privacy Framework, ensuring an adequate level of protection for your data.

5. Retention periods

– Prospects who did not convert: 3 years from the last contact, in line with CNIL recommendations.

– Clients: for the duration of the contractual relationship, then archived for the applicable legal limitation period (5 years).

– Cookies and trackers: 13 months maximum from deposit, in line with CNIL recommendations.

– Connection data (server logs): 1 year, in line with legal retention obligations (LCEN).

6. Your rights

Under the GDPR, you have the following rights over your personal data:

– Right of access: obtain a copy of the data we hold about you

– Right to rectification: correct inaccurate or incomplete data

– Right to erasure: request deletion of your data

– Right to restriction of processing

– Right to object, notably to commercial prospecting

– Right to data portability

– Right to withdraw your consent at any time, where processing is based on it (newsletter, cookies)

To exercise these rights, contact us at jordan@bulldozer-collective.com. We respond within one month at the latest.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL) — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.

7. Cookies

The site uses cookies and trackers, notably for audience measurement and advertising purposes. Consent is managed by Cookiebot, our consent management platform (CMP). You can change your preferences at any time via the consent banner shown on your first visit, or review the full list of cookies deployed on our dedicated page (bulldozer-collective.com/cookiedeclaration), auto-generated by Cookiebot.

8. Security

Bulldozer implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration, including secure hosting with OVHcloud in France and restricted data access within the team.

9. Changes to this policy

This privacy policy may be updated to reflect legal, technical, or organizational changes. The last update date appears at the bottom of the page. We encourage you to review it periodically.

Last updated: [PUBLICATION DATE]