Privacy Policy
Privacy policy of the Bureau Expert website: data collected, cookies, GDPR rights.
The protection of your personal data is a priority for Bureau Expert. This privacy policy describes the data we collect, how we use it and the rights you have under the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is:
Zoomzen SAS 76 Bd du Couchant, 92000 Nanterre, France SIRET: 819 864 091 00015
Contact: contact@bureau-expert.fr
Zoomzen SAS, as data controller, is responsible for the processing of personal data carried out on the Bureau Expert website (bureau-expert.fr).
2. Data Collected
Automatically Collected Data
During your visit to our site, we automatically collect:
- Navigation data: IP address (anonymized), browser type, operating system, pages visited, visit duration, traffic source.
- Technical data: screen resolution, device type, browser language.
- Interaction data: clicks on affiliate links, scroll depth, time spent on each page.
This data is collected automatically through cookies and similar technologies. It is used exclusively to improve the site and measure audience trends.
Voluntarily Provided Data
If you contact us by email, we collect:
- Email address
- Name (if provided)
- Message content
Data Not Collected
We collect no banking data. Transactions are carried out directly on partner retailer sites that have their own privacy policies.
We also do not collect:
- Social security numbers or national ID numbers
- Location data (GPS)
- Biometric data
- Data relating to health, political opinions, or religious beliefs
3. Purpose of Processing
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Audience measurement and site improvement | Legitimate interest | 14 months |
| Responding to your contact requests | Consent | 3 years after last contact |
| Affiliate performance tracking | Legitimate interest | 6 months |
| Security and fraud prevention | Legitimate interest | 12 months |
Details on Each Purpose
Audience measurement: We use Google Analytics to understand how visitors interact with our site. This helps us identify popular content, improve navigation and optimize the user experience. Data is anonymized before processing.
Contact requests: When you email us, we use your data solely to respond to your inquiry. We do not add your email to any mailing list or share it with third parties.
Affiliate tracking: We track affiliate link clicks to measure the performance of our partnerships and ensure accurate commission attribution. This involves cookies placed by our affiliate partners (Amazon, Awin).
4. Cookies
What is a Cookie?
A cookie is a small text file placed on your device when visiting a website. It stores information related to your browsing. Cookies allow us to recognize your device and store certain information about your preferences or previous actions.
Cookies Used on Our Site
Strictly necessary cookies (exempt from consent):
- Session cookies: ensure proper site operation
- Security cookies: protect against CSRF attacks and spam
Analytics cookies (subject to consent):
- Google Analytics (IP anonymization enabled): traffic and visitor behavior measurement. Duration: 14 months maximum.
- Google Analytics collects: pages viewed, session duration, bounce rate, traffic source, device type
Affiliate cookies (subject to consent):
- Amazon Associates: affiliate conversion tracking (24 hours, extended to 90 days if product added to cart)
- Awin: conversion tracking with our partners (Emma, Tediber, Simba, Hypnia, Bultex). Duration: 30 days.
Duration: varies by partner (generally 24 hours to 30 days).
Managing Your Cookie Preferences
You can configure your browser to refuse some or all cookies. Note that refusing strictly necessary cookies may affect site functionality.
To manage cookies:
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and Site Permissions
You can also visit www.allaboutcookies.org for comprehensive cookie management information.
5. Data Sharing
Your personal data is never sold to third parties.
It may be shared with:
- Our hosting provider (Amazon Web Services) for technical site operation
- Google (Google Analytics) for audience measurement, if you have given consent
- Our affiliate partners (Amazon, Awin and its advertisers) via affiliate cookies, if you have given consent
Some of these providers are located outside the European Union. In such cases, appropriate safeguards are in place (standard contractual clauses approved by the European Commission).
Sub-processor Details
| Sub-processor | Location | Purpose | Data Processed |
|---|---|---|---|
| Amazon Web Services | United States / EU | Hosting | All site data |
| Google Analytics | United States | Analytics | Anonymized traffic data |
| Amazon Associates | United States | Affiliate tracking | Cookie-based conversion data |
| Awin | Germany / United Kingdom | Affiliate tracking | Cookie-based conversion data |
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request deletion of your data under the conditions provided by the GDPR.
- Right to restriction of processing: request limitation of the processing of your data.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to object: object to the processing of your data for legitimate reasons.
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To exercise these rights, contact us at: contact@bureau-expert.fr
Please include in your request:
- The subject line "Personal Data Request"
- Your full name and email address
- A clear description of the right(s) you wish to exercise
We commit to responding within a maximum of 30 days. In complex cases, this period may be extended to 60 days, in which case you will be informed of the reason for the delay.
If you believe that the processing of your data constitutes a violation of your rights, you may file a complaint with the CNIL: www.cnil.fr.
7. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure or destruction. The site uses the HTTPS protocol to encrypt communications between your browser and our servers.
Our security measures include:
- SSL/TLS encryption for all data in transit
- Regular security audits of our hosting infrastructure
- Access control and authentication for administrative systems
- Automatic backups with encrypted storage
- Monitoring and alerting for suspicious activity
8. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. If the breach is likely to result in a high risk, we will also notify you directly.
9. Minors' Data
Bureau Expert does not knowingly collect personal data from minors under the age of 16. If we become aware that we have collected data from a minor under 16, we will take steps to delete such information as quickly as possible.
10. Changes to This Policy
This privacy policy may be updated. The date of the last update is indicated below. We encourage you to review this page periodically to stay informed of how we protect your information.
Significant changes to this policy will be highlighted on our homepage for a period of 30 days following the update.
Last updated: March 8, 2026