GDPR - B2B
Privacy Policy
BNCD.dev attaches particular importance to confidentiality and personal data protection in the context of its B2B digital services.
1. Introduction
This policy explains how BNCD.dev collects and processes personal data when users browse the website, use the contact form, exchange emails, or enter into professional relationships with BNCD.dev.
It is mainly intended for professional users, prospects, clients, and partners of BNCD.dev.
2. Data Controller
- Trading name: BNCD.dev
- Legal status: Sole trader
- Entrepreneur: Mohamed Amine Bounachada
- SIREN: 990 116 410
- APE code: 6201Z - Computer programming
- Email: contact@bncd.dev
- Business address: 10 Rue des Postiers, 67300 Schiltigheim, France
BNCD.dev acts as data controller for data collected through its website and business exchanges.
3. Personal Data Collected
- Identity data: last name, first name, company, role, when provided.
- Contact data: email address and phone number, when provided.
- Message content: information sent through the contact form or by email.
- Business data: project context, technical needs, quote requests, and contractual information.
- Billing data: information required for client invoicing.
- Technical data: IP address, technical logs, and browser/device information processed through hosting and security tools.
BNCD.dev does not intentionally collect sensitive data through the website. Please only send such information when necessary and after prior agreement.
4. Collection Methods
- website contact form;
- direct emails;
- professional exchanges, including video calls, calls, and messaging;
- quote requests;
- signed quotes, contracts, and invoices;
- website browsing and technical hosting logs.
5. Purposes and Legal Bases
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Respond to contact and quote requests | Identity, contact details, message, project context | Pre-contractual measures / legitimate interest |
| Manage the business relationship | Exchanges, project data, client information | Contract / pre-contractual measures |
| Issue quotes and invoices | Identity, company, billing data | Legal obligation / contract |
| Keep accounting records | Accounting and administrative documents | Legal obligation |
| Secure the website and prevent abuse | Technical logs, IP address | Legitimate interest |
| B2B professional follow-up | Professional contact details and exchanges | Legitimate interest, with right to object |
6. Retention Periods
| Data category | Retention period |
|---|---|
| Contact requests / prospects | Up to 3 years after the last meaningful contact |
| Client relationship data | For the duration of the contractual relationship, then archived according to legal limitation periods |
| Quotes, invoices, accounting | Applicable legal period, generally 10 years |
| Technical logs | Limited period, up to 12 months unless a security incident occurs |
| Dispute-related data | Period necessary to handle the claim and applicable limitation periods |
These periods may be adapted where the law requires a different duration or where longer retention is necessary to defend BNCD.dev's rights.
7. Data Recipients
Data is accessible only to BNCD.dev and, where necessary, to service providers strictly required for hosting, security, communication, or administrative management.
- technical hosting provider: Netlify;
- email provider;
- administrative/accounting tools and payment partners, where applicable;
- legal/accounting advisors where necessary;
- public authorities where required by law.
8. Transfers Outside the European Union
Some technical providers may be located outside the European Union or operate infrastructure outside the EU.
Where this applies, BNCD.dev favors providers offering appropriate safeguards, such as European Commission standard contractual clauses or equivalent mechanisms.
9. Cookies and Trackers
The bncd.dev website does not use advertising cookies or non-essential trackers for profiling purposes.
Strictly necessary technical mechanisms may be used for proper website operation, such as local browser language/theme preferences, as well as hosting-side technical logs for security.
You may also configure your browser to block all or some cookies, which may affect certain features.
10. Your Rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, objection, and portability where applicable, as well as the right to withdraw consent where processing is based on consent.
To exercise your rights: contact@bncd.dev.
BNCD.dev may request proof of identity where there is reasonable doubt about the requester's identity.
11. Complaint to the CNIL
If you believe your rights are not being respected, you may file a complaint with the CNIL: www.cnil.fr.
12. Security
BNCD.dev implements reasonable technical and organizational measures to protect personal data: limited access, secured accounts where possible, HTTPS usage, confidentiality precautions, and sharing limited to what is strictly necessary.
No transmission or storage method offers absolute security, so residual risk can never be fully excluded.
13. Processing During Client Assignments
During certain technical assignments, BNCD.dev may process personal data on behalf of the client. In such cases, BNCD.dev acts as processor and the client remains the controller, unless otherwise contractually agreed.
These processing activities are governed by the quote, contract, SOW, or, where necessary, a data processing agreement (DPA).
- access limited to data strictly necessary for the assignment;
- credential sharing through secure channels;
- temporary access may be required to systems, databases, logs, or back offices;
- sensitive data should not be transmitted without prior explicit agreement.
14. Changes to This Policy
BNCD.dev may update this policy to reflect legal, technical, or operational changes.
The applicable version is the one published on the website at the time of consultation.
Last updated: May 7, 2026