1. Data controller
BEDROCK STREAMING (hereinafter referred to as "Bedrock", “our” or "we"), registered with the Registre des Commerces et des Sociétés of Nanterre under SIRET n°493 869 002 00011, having its registered office at 89 AVENUE CHARLES DE GAULLE 92575 NEUILLY-SUR-SEINE CEDEX, is the Data Controller within the meaning of the Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "the GDPR") for the processing of the personal data it collects in the context of your use of the https://bedrockstreaming.com/ website (hereinafter referred to as "the Website").
2. Purpose and scope of the Policy
Bedrock is committed to processing your personal data with the utmost care and to comply with the principles and provisions of the GDPR and more broadly with any applicable data protection law or regulation.
This policy is made to provide you with all the information required for your understanding of how and why your personal data is processed by our services and to allow you to use the Website with confidence.
3. Compliance with the main principles for the processing of personal data
Bedrock warrants to respect the principles relating to the processing of personal data set out in Article 5 of the GDPR. These principles include:
Compliance with the lawfulness, fairness and transparency principles
Bedrock commits to processing your personal data only for lawful and fair purposes. Your data will only be processed for lawful purposes and you will be informed by this policy and, where applicable, by information notices.
Compliance with the purpose limitation principle
Bedrock undertakes to process your personal data only for the purposes detailed in Article 4 "Why and how we process your personal data".
Compliance with the data minimization principle
Bedrock only collects and processes personal data which is adequate, relevant and limited to what is necessary for the purposes of the processing operations set out in Article 4.
Compliance with the storage limitation principle
Bedrock warrants to only store your personal data for a limited, lawful, necessary and proportionate duration relative to the processing operations for which it is collected. These periods are specified in Article 4 of this policy.
Compliance with the accuracy principle
Bedrock implements technical and organizational means to ensure your personal data is accurate and updated when required. Where Bedrock becomes aware of any personal data inaccuracy Bedrock warrants to rectify or delete the personal data.
Compliance with the integrity and confidentiality principles
Bedrock implements all appropriate technical or organizational security measures to ensure the integrity and confidentiality of personal data you entrust to us.
4. Why and how do we collect your personal data?
Purposes | Processed data | Legal basis | Storage duration | Processors | Location of processing operations |
Processing Website user requests | Data from the contact form:
| Legitimate interest | Up to 6 months | GOTOANDBUZZ | EU |
To process job applications |
| Contractual or pre contractual measures | For up to 1 year | USA | |
Audience measurement operations | Browsing data (choice of settings, particularly with regard to cookies and other tracers) | Legitimate interest | 1 year | GOTOANDBUZZ ; Matomo | EU |
Establishing and maintaining a commercial relationship with partners |
| legitimate interest | 3 years from your last contact | Hubspot | USA |
5. Personal data recipients
The personal data you provide us with are processed by our internal services and may be transmitted to Bedrock’s processors, as set out in Article 4 of this policy.
Additionally, Bedrock may disclose your personal data to competent authorities or to third parties upon these authorities’ requests if such disclosure is required by law, regulation or a court order, or if such disclosure is necessary to ensure the protection and defense of Bedrock’s rights.
6. Out of EU transfers of personal data
Your personal data may be transferred to recipients outside of the European Union.
If applicable, Bedrock is committed to comply with the principles set out in Chapter V "Transfers of personal data to third countries or international organizations" of the GDPR.
Bedrock therefore warrants that your personal data will only be transferred to countries which benefit from an adequacy decision in accordance with the requirements of GDPR Article 45, or if appropriate safeguards as per the requirements of GDPR Article 46 are implemented in order to ensure an adequate level of protection.
7. Data security
Taking into account the state of the art, the costs of implementation and the nature, scope, context, and purposes of the processing specified in Article 4 of this policy as well as the risks they might pose to your fundamental rights and freedoms, Bedrock and its processors warrant to implement appropriate technical and organizational security measures and ensure the security of your personal data. These measures are regularly evaluated and updated to take into account market developments in security.
8. What are your rights regarding personal data ?
In accordance with the regulations in force, you have the following rights with regards to the processing of your personal data :
Right of access: You may request confirmation from us that personal data concerning you are or are not being processed by our services and, if applicable, any relevant information relating to such processing(s) as well as a copy of said data.
Right to rectification: You may ask us to rectify the personal data that we process and which concern you if they are inaccurate or to complete them if they are incomplete.
Right to erasure: Subject to the conditions of applicability of this right, you may ask us to erase the personal data we process about you.
Right to restriction of processing: You can obtain the restriction of the processing of your personal data by Bedrock when you object to this processing, when you dispute the accuracy of your data, when you believe that their processing is unlawful, or when you need them for the establishment, exercise or defense of your legal rights.
Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable and interoperable format, or to have it transferred to another data controller without our interference.
Right to object: Subject to the conditions of applicability of this right, you may object to the processing of your personal data by Bedrock at any time.
Right not to be subjected to a decision exclusively based on automated processing: You have the right not to be subjected to a decision based exclusively on automated processing which produces legal effects concerning you or similarly significantly affects you.
Complaint: You have the right to file a complaint with a supervisory or judicial authority.
Instructions in the event of death: You can give us instructions concerning the fate of your personal data in the event of your death.
You can find more information about your rights regarding personal data on the CNIL’s dedicated website if you are a French speaker, or on the ICO’s dedicated website if you are an English speaker.
To exercise these rights, you can contact our DPO by email at dpo@bedrockstreaming.com or by mail "To the attention of the DPO of Bedrock Streaming "89 AVENUE CHARLES DE GAULLE 92575 NEUILLY-SUR-SEINE CEDEX".
9. Policy update
Bedrock reserves the right to update this policy as necessary. Therefore, we recommend consulting it periodically.
If there are substantial changes to the Policy, Bedrock will make reasonable efforts to bring those changes to your attention.
Policy’s last update date: 11/05/2023