Privacy policy

This policy describes how BLUMANA processes the personal data collected through the blumana.com website, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. This English version is provided for convenience; in case of discrepancy, the French version prevails.

1. Data controller

The data controller is BLUMANA, a French SAS with a share capital of €6,000, registered with the Paris Trade and Companies Register under number 982 027 153, whose registered office is at App 4B, 3 place du Père Chaillet, 75011 Paris, France, represented by Alain Nguyen, Managing Director. For any question about your data: privacy@blumana.app.

2. Data we collect

• Demo request: name, work email, company and, if you fill it in, the message you send us.
• Attribution: referring page and campaign parameters (UTM), when present.
• Meeting booking: if you book a slot, the information entered in the calendar (name, email, chosen date).
• Site visits: IP address, pages viewed, date and length of the visit, used to determine which company the site is being viewed from. A browser identifier lets us recognise you from one visit to the next only if you accept it (see our cookie policy).
• Audience measurement: aggregated, anonymous statistics, without cookies.
• Technical data: IP address and browsing information processed by our host to deliver the site and protect it from abuse.

3. Purposes and legal bases

• Answering your demo request and arranging a meeting: steps taken at your request prior to entering into a contract.
• Following up on the business relationship and sending you information about our services (B2B prospecting): legitimate interest. You can object at any time.
• Identifying the companies that visit the site to better target our sales approach: legitimate interest. Recognising your browser from one visit to the next: consent, which you can withdraw at any time.
• Measuring and improving the site's audience: legitimate interest.
• Securing the site and preventing abusive submissions (anti-spam): legitimate interest.

4. Recipients and hosting

Your data is accessible to the BLUMANA team and to the technical providers acting on our behalf, strictly for the purposes above (hosting, customer relationship management, messaging, meeting booking, audience measurement). We do not sell your data.

• Cloudflare, Inc. (United States) — website hosting and bot protection.
• OVH SAS (France) and Scaleway SAS (France) — hosting of Blumana's infrastructure.

Where data is processed outside the European Union, these transfers are covered by appropriate safeguards: an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

5. Retention

• Prospect data (demo request, meeting): 3 years from your last contact with us, then deleted. If you become a customer, it is kept for the duration of the contractual relationship.
• Browser identifier: 12 months if you accept it; otherwise, erased when you close the tab.
• Your cookie choice: 13 months if you accept, 6 months if you decline.
• Audience statistics: aggregated and anonymous, they cannot identify you.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to its processing, including for marketing purposes. You can withdraw your consent at any time and set instructions for what happens to your data after your death. To exercise these rights, write to privacy@blumana.app; we will reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (cnil.fr), or with the authority of your country of residence.

7. Security

The website is static and stores no form data. Data is transmitted over HTTPS only, and access keys to third-party services are never exposed in the browser. Access to data is limited to the team members who need it.

8. Changes

We may update this policy to reflect changes to the site or to regulations. The date of the last update is shown at the top of this page.