Privacy policy
Last updated: September 30th, 2024
Bump.sh is a solution developed by It Ducks, accessible as a Software as a Service (“SaaS”) through its Website.
This privacy policy (the “Privacy Policy”) describes It Ducks’ policies and procedures on the collection, use, and disclosure of Users’ information and personal data when they use It Ducks’ website and Solution, as defined under Article 1.
It Ducks ensures that the Users’ Personal Data, as defined below, is collected and processed in compliance with the provisions of:
- French law no. 78-17 of 6 January 1978 on data processing, data files, and individual liberties.
- Regulation no 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).
(together, the “Data Protection Laws”).
It Ducks’ Privacy Policy is part of its general terms of services (the “T&Cs”), available on its Website.
1. Definitions
The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
| Definition | Description of definition |
|---|---|
| “Account” | means a unique account created for the Users to access the Solution. |
| “Affiliate” | means an entity that controls, is controlled by, or is under common control with a party, whereas "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority. |
| “IT Ducks” or “Company” | refers to It Ducks, a simplified joint stock company under French law, having its registered office located 25, rue Lenepveu 49100 Angers (France), registered with the trade and companies register of Angers under number 831 116 330. |
| “Cookies” | are small pieces of data placed on the Users’ computers, mobile devices, or any other devices by a website, containing for instance the details of their browsing history on that website. |
| “Data” | is any information that relates to an identified or identifiable natural person. |
| “Processing” | means any operation or set of operations which is performed on Data or on sets of Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. |
| “Service Provider” | means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Solution, to provide the Solution on behalf of the Company, to perform services related to the Solution, or to assist the Company in analyzing how the Solution is used. |
| “Solution” | refers to Bump, a software as a service developed by the Company and accessible through its Website. |
| “Usage Data” | refers to data collected automatically, either generated by the use of the Solution or from the Solution infrastructure itself (for example, the duration of a page visit). |
| “User” | companies using the Solution. |
| “Website” | refers to https://bump.sh and its sub-domains (e.g https://***.bumph.sh). |
2. Processing of Personal Data
2.1. Data controller
It Ducks acts as data controller for the Data collected from the Client exclusively for the creation of the Account and the performance of the contract and the follow-up of the customer relationship. The Company does not collect and/or process any other personal information through the Solution. The Content uploaded by the Client on the Solution never relates to an identified or identifiable natural person.
To exercise their rights or for any questions, Users may contact It Ducks by email at the following address: hello@bump.sh.
2.2. Lawfulness of the Processing
The Privacy Policy must be accepted without any reserve (i) before accessing the Website and the Solution and (ii) each time It Ducks modifies the Policy Privacy.
In the event the User does not accept It Ducks’ Privacy Policy, the User will not be able to access the Solution.
2.3. Types of data collected
The following Data is automatically collected when Users use the Website and the Solution:
| Type | Data collected |
|---|---|
| Data |
|
| Usage Data | Usage Data are part of Users’ Personal Data. Usage Data may include information such as Users’:
|
2.4. Legal basis of the Processing
Data is essential for It Ducks to provide Users access to the Website and the Solution.
It Ducks legally bases the Processing of Data on:
- the performance of the contract concluded with Users; and
- Users’ consent.
Users may withdraw their consent at any time by writing to It Ducks at the following address: hello@bump.sh.
In such case, It Ducks will no longer be able to provide users with its Solution.
2.5. Purpose of the Processing
It Ducks may use Data for the following purposes:
- provide and maintain the Website and the Solution, including monitoring the usage by Users of the Website and the Solution.
- manage Users’ Account (to manage Users’ registration to the Solution).
- perform the contract.
- contact and provide Users with news and information (i.e. contact Users by email regarding updates related to the functionalities of the Solution (including security updates when necessary) or the launch of new services).
- manage Users’ requests.
2.6. Retention of Data
It Ducks keeps Data for:
| Processing | Description of processing |
|---|---|
| The purposes set out in the Privacy Policy | duration of the contract concluded with the User. |
| Contractual liability in case of litigation and in accordance with legal and regulatory obligations | five (5) years after termination of the contract. |
| Analysis purposes | Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Website and Solution. Navigation data are kept for no longer than six (6) months. Anonymized data can be kept with no limitation. |
| Administrative purposes | ten (10) years (for invoicing data, in accordance with the French Code of commerce). |
| Commercial purposes | information relating to a prospect will be kept for three (3) years after the date of the last message from the prospect, as per the French National commission for information technology and liberties (the “CNIL”) recommendation. |
2.7. International transfers of Data
Data may be transferred to servers located outside of France.
It Ducks will take all steps necessary to ensure that Data is treated securely and in accordance with Data Protection Laws, and no transfer of Data will take place to an organization or a country unless there are adequate protection data measures enforced.
It Ducks uses the following Service Providers to monitor and analyse the use of its Website and Solution:
| Service Provider | Description of processing | Privacy page |
|---|---|---|
| Fathom | Web analytics service | https://usefathom.com/privacy |
| Heroku | Servers | https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/compliance%20documents/protection_of_eu_personal_data.pdf |
| Hubspot | Customer Relationship Management. | https://legal.hubspot.com/privacy-policy |
| Intercom | Professional messaging specialist | https://www.intercom.com/legal/privacy |
| MixPanel | Analytics Service | https://mixpanel.com/legal/privacy-policy/ |
| Segment | Web analytics service | https://segment.com/legal/privacy |
| Sentry | Application Monitoring Platform | https://sentry.io/privacy/ |
| Stripe | Payment service provider | https://stripe.com/fr/privacy |
| Typeform | Surveys | https://admin.typeform.com/to/dwk6gt |
Users’ consents to this Privacy Policy embody Users’ agreement to these transfers.
2.8. Security measures
To ensure the security of Personal Data, It Ducks has set up the following technical measures:: access controls with login and passwords, computer protection measures, development of digital certificates, firewalls, etc.
Users must keep in mind that the Internet and methods of electronic storage are not completely secure. While making its best efforts, It Ducks cannot guarantee its absolute security.
2.9. Users’ rights
As per the Data Protection Laws, Users have a right of access, rectification, deletion of their Data, limitation or opposition to their processing, a right to define guidelines for the storage, deletion and communication of their Data after their death, and the right to portability of their Data.
For any claim or request, Users can contact:
- It Ducks by writing at hello@bump.sh; or
- the CNIL at https://www.cnil.fr/fr/plaintes.
3. Third parties’ websites
It Ducks has no control over and assumes no responsibility for the content, privacy policies or practices of any third parties’ sites or services which would appear on its Website and/or Solution.
4. Changes to the Privacy Policy
It Ducks reserves the right to adapt or modify the Privacy Policy at any time by publishing an updated version on the Website and the Solution.
It Ducks shall inform Users of such modification no later than fifteen (15) days before the entry into force of the new version of the Privacy Policy.
Any modification of the Privacy Policy made necessary by a change in the applicable law or regulations, a court decision or the modification of the functionalities of the Solution and/or the Website shall come into force immediately.