Privacy Policy
1. Data controller
The data controller is Benoît Bremaud (Brasse-Bouillon, pre-incubation project). Contact: via the site form.
2. Data we collect
- Contact data (the message and details you provide) submitted through the site form.
- Newsletter subscription data (email).
- Product questionnaire data (profile, usage, priorities, suggestions).
- Questions asked to the FAQ assistant (message text only - do not include personal data).
The site uses no third-party audience measurement tool and no tracking cookies. No browsing data is collected for analytics purposes. Web fonts are self-hosted: no data is sent to a third-party font provider.
3. Purposes and legal bases
- Replying to messages: legitimate interest and/or pre-contractual steps.
- Sending newsletters: explicit consent (form checkbox).
- Improving the product through questionnaire responses: explicit consent.
- Answering questions asked to the FAQ assistant: legitimate interest (informing visitors about the project). Do not share personal data in your messages - the assistant never asks for any.
4. Recipients and international transfers
Data may be processed by the following technical processors:
- Formspree, Inc. (USA) - receiving forms. The transfer outside the EU is governed by Standard Contractual Clauses (GDPR art. 46); a copy is available on request.
- Cloudflare - website hosting (Cloudflare Pages). Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; the transfer to the US is covered by the European Commission's adequacy decision.
- Mistral AI (France, European Union) - generation of the website FAQ assistant's answers. Questions asked to the assistant are sent to the Mistral AI API, hosted in the EU; they are not used to train its models. No transfer outside the EU.
5. Data retention
- Contact data: up to 3 years after the last interaction.
- Newsletter data: until unsubscribe, or 3 years of inactivity.
- Questionnaire data: up to 3 years for product analysis.
- FAQ assistant: conversations are not stored by the site.
6. Your rights
Depending on your country of residence (EU GDPR, US local laws such as CPRA, etc.), you may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent at any time. To exercise your rights, use the site form.
7. Security
We implement reasonable technical and organizational safeguards to protect data. As no system is fully secure, absolute security cannot be guaranteed.
8. Minors and alcohol
The website targets adults (18+). Brasse-Bouillon promotes responsible drinking.
9. Complaints
Please contact us first for any privacy question. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the supervisory authority of your EU country of residence.