Privacy policy for bsport’s business partners

Introduction

This notice of confidentiality is intended for the partners belonging to the bsport database.

At bsport, we commit ourselves informing you of the way we treat your personal data, giving you the control of their use and protecting them.

You will find here information on the type of data which we hold about you, how and why we collect them, how we use them and how we protect them.

This privacy notice also tells you your rights, how you can exercise them and how the law protects you. Finally, it tells you how you can manage the information we have about you and, if for any reason you do not wish to be included in our database, how to ask us to remove you.

About bsport

bsport offers a service of management and booking/payment for studios in the sports/wellbeing industry. In doing so, all user information, with the exception of payment data, passes through our system. The billing data is fully managed by Stripe, except for some studios where it is handled by both Stripe and PayPal.

bsport is responsible for the processing of data and also for your personal data (generally referred to in this privacy notice as “bsport”, “our”, “we” or “us”).

If you have any questions about this privacy notice or how we use your personal data, please contact our data protection officer by email at contact+rgpd@bsport.io.

Our partners database

Our partners database contains all the information with which you can interact via https://backoffice.bsport.io

We chose the term “partners” because a real exchange between bsport and you constitutes a real partnership since contractual.

The data we collect about you

We limit the information we collect in the database to what we believe will allow our users to make the right choice of infrastructure but also our employees to work in the best possible way. For greater ease of audit, most of the information on your structure (bookings/course cards/ invoices…) are never deleted by your actions but simply archived and are for the most part retrievable later. On simple request we are able to delete them permanently, in addition to the tax data for legal reasons.

The different types of data we collect:

We do not hold any information about your origins, your religious or philosophical beliefs, your sexual orientation, your political opinions, your trade union affiliations or your health, except in the specific case where you would be a public representative of a political or trade union organization and unless you yourself have shared this data in the public domain (e.g., you have made this information available to the public by writing about it or by posting it on social networks)

How do we collect your personal data?

The data collection methodology includes:

Direct interactions: you may provide us with personal information by filling out forms or contacting us by mail, phone, email, in person at events, as part of our contractual agreement with you, by entering that data on one of our customer platforms, etc. This includes personal data you provide when:
- You order or express an interest in our products or services,
- You subscribe to our services or publications,
- You participate in a contest, promotion or survey,
- You subscribe to our newsletter.
From technology or automated interactions: when you interact with our website or application, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other sites that use our cookies.
Telephone conversations, chat or bots that may be recorded by us to help us improve our training and quality.
Third parties or publicly available sources: we may receive personal data about you from third parties and publicly available sources, including: social media platforms, our own prospect/customer databases, or online research references.

Why do we use your personal data:

To verify your identity and entitlement to our products and services when you contact us or access our services
To protect you from fraud
To carry out our obligations to you under our contract
To provide you with services and manage your subscriptions
To send you statements and invoices and collect payments from you
To provide you with business quotes
For statistical analysis
To operate and improve our services and our website or mobile application
To notify you of any changes to our website or services that may affect you
To provide you with technical support
To obtain your feedback or comments on our services
To ensure seamless access to any applications you have subscribed to
To enforce our legal rights or comply with legal requirements
To improve the experience and communications on the websites and products, taking into account your product subscriptions and/or collected data

How to edit or delete your profile

We want you to be in control of your data. If at any time you wish to view or modify your profile, please email our team at contact+rgpdpartenaire@bsport.io. Similarly, if you would like us to remove you from our database entirely, you can request the deletion of your data by contacting our team at contact+rgpd@bsport.io .

We use your personal data only when permitted by law, namely:

When we need to perform the contract we are about to enter into or conclude with you.
When we need to comply with a legal or regulatory obligation.
When it is in our legitimate business interests to operate our customer platforms and thereby provide you with access to our network of gyms. We ensure that we consider any potential negative impact on you and your rights before processing your personal data

Tracking

The bsport e-mails can contain a small invisible image of 1 pixel, which can be used to inform the sender (bsport ) of the opening of the e-mail. If the recipient of the e-mail has images enabled on their device, upon opening the e-mail, a message (an automatic request) is sent, to the bsport server, asking for the image. This request is logged by bsport and tells us that the email has been opened. A similar process can be used for links or attachments in the email, with a request sent to bsport for the content that is accessible via the links or attachments, thus indicating to bsport that the link or attachment has been viewed.

How we share your personal data, and with whom:

We may share your personal data with companies in the bsport group and other parties as detailed below. We may also transfer your personal data outside the European Economic Area (EEA), but only when specific protection measures have been put in place to protect your personal data.

We may share your personal data with one or more of the following parties:

Internal third parties: these include other companies in the bsport group such as bsport SAS and our shareholders.

External third parties may include:

Vendors we hire to provide services on our behalf, such as payment processing and marketing companies. These companies are based in Europe and North America.

Also, professional advisors, including lawyers, accountants and insurers as necessary to enable them to provide their services to us.

Finally, regulators and other authorities who require reporting of activities in certain circumstances.

We may also share your personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire or merge with other businesses. If a change in our business occurs, the new owners may use your personal data in the same manner as set forth in this Privacy Statement.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes. We only allow them to process your personal data for specific purposes and in accordance with contractual obligations, which ensure adequate protection of your data.

International Transfers

We may share your personal data with entities within the bsport group and with marketing systems used by the bsport group. Some of the third parties to whom bsport transfers your personal data are also based outside the EEA, so the processing of your personal data also involves a transfer outside the EEA. Where your personal data is transferred outside the EEA, we use specific contracts approved by the European Commission giving your personal data the same right of protection as in the EU.

Safety measures

We are committed to protecting your personal data. We implement safeguards, including appropriate technology, policies and contractual arrangements, to ensure that the data we have about you is protected from unauthorized access and improper use. Finally, we will not retain your personal data longer than necessary.

How long will your personal data be used?

We will retain your personal data only for as long as is necessary for the purposes set out in this privacy statement and to fulfil our legal obligations. We will not retain more data than we need. As long as you remain a customer, we will retain your data in order to continue to provide services to you. If you do not wish to use bsport services, we will retain your personal data for a period of 24 months before deleting it. We are required to retain certain basic customer information for a longer period in accordance with applicable tax laws. Under certain circumstances, you may ask us to delete your data (see below).

Your rights

In certain circumstances, you have rights under data protection laws relating to your personal data, including the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability and the right to object.

If you wish to exercise your rights, please contact our GDPR consultants: contact+rgpd-partenaire@bsport.io.

Under European data protection laws, you have a number of rights relating to your personal data. These rights are not absolute – in some cases they will not apply to you, or to the particular use we make of your data. There are exceptions, for example if we need to process data to comply with our own legal obligations, but if this is the case we will let you know.

Your rights include:

Access to your personal information
To request any changes or corrections to your information
To request the deletion of your personal information in certain situations
To receive the personal information you have provided to us in a structured, commonly used and machine-readable format, and to have the right to transfer that data to a third party in certain situations
To object at any time to the processing of your personal information for direct marketing
To object to decisions made by automated means (including profiling)
To object in certain circumstances to the continued processing of your personal information
To limit the processing of your personal information in certain circumstances

You also have the right to lodge a complaint at any time with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French supervisory authority for data protection matters) (www.cnil.fr). However, please be sure to contact us first.

We hope that we will be able to resolve any concerns you may have before approaching the CNIL, so please contact us first: c ontact+rgpd-partenaire@bsport.io

Privacy policy