Privacy policy

In accordance with the General Data Protection Regulation (GDPR), Bleexo hereby provides information relating to: the identity and contact details of the data controller; the purposes for which personal data are processed; the categories of recipients of personal data; and the period for which personal data will be stored.


General information:

The data controller is Bleexo. The legal representative is Stéphane Waller.

To request further information or exercise your rights, please get in touch:

  • By telephone: +33 (0)5 82 95 69 85
  • By post:

    Bleexo

    At Home

    42 rue du Languedoc

    31000 Toulouse

    France

Your personal data

Customers and prospective customers:

Purposes for which data are processed:
  • Carrying out customer management tasks relating to: contracts; orders; deliveries; invoicing; accounting and, more specifically, managing customer accounts; running a loyalty scheme within one or more legal entities; monitoring customer relations (including conducting customer satisfaction surveys, managing complaints and providing an after-sales service); and selecting customers to take part in studies, surveys and product tests.
  • Carrying out direct marketing tasks: managing technical direct marketing activities (including technical processes such as standardisation, enrichment and deduplication); selecting people to target activities aimed at building customer loyalty, direct marketing, surveys, product tests and special offers.
  • Compiling commercial statistics.
  • Selling, renting or exchanging its files on customers and prospective customers.
  • Having the files it holds on prospective customers updated by the organisation responsible for managing the French telephone preference service, in accordance with the provisions of the French Consumer Code.
  • Organising competitions, prize draws and other marketing campaigns.
  • Managing requests to access and rectify data and objections to the processing of data for specific purposes.
  • Managing outstanding payments and disputes.
  • Managing feedback on products, services and content.
Personal data that may be collected:

Personal identification data; data relating to payment methods; data relating to financial transactions; data relating to the monitoring of business relationships; data relating to the payment of invoices; data needed to carry out activities aimed at building customer loyalty, as well as for direct marketing, studies, surveys, product tests and marketing; data relating to the contributions made by individuals who give feedback on products, services and content, in particular their user names.

Recipients of data:

Authorised staff within the following departments: marketing; sales; those responsible for customer relationship management and direct marketing; admin; logistics; and IT, as well as their line managers. Authorised staff within the departments responsible for internal auditing. Authorised staff working for subcontractors, once a contract has been signed with such subcontractors.

The period for which personal data will be stored:

For customers

Your personal data are stored for no longer than is strictly necessary for managing our business relationship with you.

However, data that can be used to evidence a right or contract, or those that are stored for the purpose of complying with a legal obligation, may be archived temporarily for a period not exceeding that necessary for the purposes for which they are stored.

Furthermore, and subject to compliance with Article 6 of the GDPR, your data may be stored for a period of three years after our business relationship has ended. These will be used for direct marketing purposes.


For prospective customers

Your data will be stored for a period of three years from the date on which they are collected.


At the end of this three-year period, Bleexo will get back in touch with you to find out whether you would still like to receive marketing from us. Unless you confirm that you do wish to continue receiving such marketing, your data will be deleted.


For employees of our customers

Bleexo acts as a processor of your data (we process it on behalf of your employer for the purpose of providing a service). The controller of your data is your employer.


However, to offer greater transparency, we hereby inform you of the purposes for which we use your personal data, the type of data we store and how we store it.


Purposes for which data are processed:
  • Conducting weekly, fortnightly, monthly or quarterly employee engagement surveys.
  • Compiling ANONYMISED statistics on the results obtained from the aforementioned surveys.
  • Managing requests to access and rectify data and objections to the processing of data for specific purposes.
Personal data that may be collected:

All the data we collect on you are provided by your employer. We have entered into an agreement with your employer to give you access to the platform and/or engagement surveys. As such, your employer acts as the controller of your data. Bleexo will not amend your personal data in any way without your employer’s consent or unless they request that we do so.


Below is a (non-exhaustive) list of the type of data we may collect:

Personal identification data (e.g. title, name and age); data relating to your professional circumstances (e.g. your job title, length of service, workplace address and socio-professional category).

Recipients of data:

The sales department collects your data from your employer and subsequently sends them to the IT department.

The period for which data will be stored:

We will store your data for the period during which we have a contractual relationship with your employer.

Your rights

If you would like more information regarding your data, you can exercise the following rights:

Right of access:

You have the right to access any personal data that we hold on you. By exercising this right, you can check that the data we hold on you is accurate and, if necessary, rectify them or request that they be removed.

Right to rectification:

You can request that any inaccurate data we hold on you be rectified. The right to rectify supplements the right of access.

Right to object:

You can object to your data being included in a file, provided a legitimate reason is given (you do not have to give a reason for files used for direct marketing and, more specifically, sales purposes). You can object to your data being published, shared or stored.

Right to erasure (“right to be forgotten”):
You can request that your personal data be removed for one of the following reasons:
  • The data are no longer necessary for the purposes for which they are held.
  • You wish to withdraw your consent to your data being processed or to object to such processing.
  • Data must be removed to comply with a legal obligation provided for by EU or French law.
Right to restriction of processing:

You can request that the processing of your personal data be restricted for one of the following reasons:

  • You dispute the accuracy of the data we hold on you.
  • The data are no longer necessary for the purposes for which they are processed, but such data are still required in order to evidence, exercise or defend your rights in a court of law.