Ph Dev Informatique attaches great importance to the protection of your personal data. This policy explains what data is collected by the HexaBees application (hexabees.fr), for what purposes and under what conditions, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
The data controller is Ph Dev Informatique, 37, avenue Jules Cantini, 13006 Marseille. For any question, contact us via the contact form.
2. Data collected
- Account data : name, email address, password (stored encrypted), optional profile photo, subscription plan.
- Beekeeping usage data : apiaries, hives, queens, inspections, treatments, harvests and tasks that you enter.
- Technical data : IP address, connection logs and browsing data for security and statistics purposes.
3. Purposes and legal bases
- Provide and manage the Service and your account — performance of the contract.
- Manage the Premium subscription and billing — performance of the contract / legal obligation.
- Ensure security and prevent abuse — legitimate interest.
- Measure site audience in an anonymised way — legitimate interest (see the cookie policy).
- Respond to your requests via the contact form — legitimate interest.
4. Retention period
Your data is kept as long as your account is active. If your account is deleted, it is erased or anonymised within a reasonable time, subject to legal retention periods (particularly accounting for invoices). Technical logs are kept for a limited period for security purposes.
5. Recipients and processors
Your data is never sold. It is accessible only to Ph Dev Informatique and its technical service providers strictly necessary for the operation of the Service : the host OVH SAS — 2, rue Kellermann, 59100 Roubaix (France), the audience measurement tool Matomo (self-hosted) and the email delivery service Mailjet (Sinch France SAS), which receives your email address and the message content in order to deliver it to your mail provider. All data is hosted within the European Union.
Our emails do not track you. The messages we send you relate to the operation of the Service (address verification, password reset, invoice, task reminder, support reply) : we send no marketing email. The open and click tracking offered by our delivery provider is disabled on every message : no invisible pixel is inserted, no link is rewritten, and we therefore know neither whether you open our emails nor what you click. Only the delivery status of the message — accepted or rejected by your mail provider — is reported back to us, so that we can spot addresses that have become invalid.
6. Security
Passwords are stored as encrypted hashes. Exchanges are protected by TLS encryption (HTTPS). Ph Dev Informatique implements reasonable technical and organisational measures to protect your data against any unauthorised access.
7. Your rights
In accordance with the GDPR, you have the following rights :
- right of access, rectification and erasure ;
- right to restriction of and objection to processing ;
- right to portability of your data ;
- right to set directives regarding the fate of your data after your death.
You can exercise these rights via the contact form or by post at the address mentioned above (Ph Dev Informatique, 37, avenue Jules Cantini, 13006 Marseille). You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Cookies
The use of cookies is detailed in our cookie policy.