GDPR Policy
The BONANZA website (bonanza.co) is operated by BONANZA, a simplified joint-stock company (SAS) with capital of €11,028.99, registered with the Nanterre Trade and Companies Register under number 820 134 245, with its registered office located at 37 rue Gabriel Péri, 92300 Levallois-Perret, and can be contacted by email at contact@bonanza.co (hereinafter referred to as “the Service Provider” or “BONANZA” ).
Access to the website www.bonanza.co (hereinafter referred to as the “Website” ) and the services offered requires the collection and processing of personal data. It was therefore necessary to establish a personal data protection policy to ensure compliance with best practices regarding the processing of personal data, as set forth by applicable laws and regulations.
Our data protection policy has been established in accordance with the recommendations of the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés). Its purpose is to inform users of the Site about how their personal data is processed and the commitments and measures we have taken to ensure the protection of the personal data of visitors and users of the Site.
It was established in accordance with the provisions of the French Data Protection Act of January 6, 1978, the European General Data Protection Regulation (GDPR) of May 23, 2018, and the Act transposing the European General Data Protection Regulation (GDPR) of June 20, 2018.
The version currently published on our website is the current version of this policy. Bonanza reserves the right to modify it at any time to comply with applicable legal obligations. Any changes made to the Privacy Policy will be communicated to Users in order to obtain their consent to the new policy.
By browsing our website, the user acknowledges that they have read, understood, and accepted this privacy policy. Any questions regarding this policy may be directed to the following address: dpo@bonanza.co.
On the Website, the terms below have the meanings assigned to them under the GDPR (Article 4):
Consent: “any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her” ;
Data Controller: “the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated or the specific criteria for its designation may be laid down by Union law or the law of a Member State ”;
Processor: “a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller”;Processing: “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction”;
Personal data breach: “a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored, or otherwise processed.”
“Candidate ”: means any person applying for a job posting published by BONANZA, in particular in connection with the provision of Services to Clients;
“ Client ”: means any entity that has entered into a Service Agreement with BONANZA for the publication of job postings and the submission of Candidate applications;
“ Partner Company ”: refers to the business that has entered into a Service Agreement with Bonanza under which Bonanza has been authorized to search for and present candidates to the Partner Company for job openings;
“Policy ”: refers to this Personal Data Protection Policy;
“ Service Provider ”: refers to SAS BONANZA, a Simplified Joint-Stock Company (SAS) with a share capital of €11,028.99, registered with the Nanterre Trade and Companies Register under number 820 134 245, with its registered office located at 37 rue Gabriel Péri, 92300 Levallois-Perret. The Company can be contacted by email at contact@bonanza.co.
“Prospect ”: refers to any person who has contacted BONANZA for commercial purposes;
“Site”: refers to the website www.bonanza.co or any other website operated by the Company and made available to the User;“User”: refers to any individual using the Site and having access to its content;
Personal data (the “Personal Data ”) refers to any information that can directly or indirectly identify a natural person (last name, first name, email address, phone number, mailing address, etc.).
In this regard, the GDPR defines personal data as: “any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); an “identifiable natural person” is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;”.
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or older may consent to the processing of their personal data.
Users under the age of fifteen (15) are asked to obtain the consent of a legal guardian—as required by Bonanza—so that their personal data may be collected and they may use the Site’s services. Bonanza reserves the right to request proof of this consent from the legal guardian.
Bonanza shall not be held liable in the event that any user provides personal data concerning a minor under the age of fifteen (15).
While browsing the Site, the User will be required, on several occasions, to provide certain personal data (for the purposes indicated in Article 5).
By providing this data, the User therefore consents to the collection and processing of the personal data provided by the Service Provider for the exclusive purposes detailed in Article 5 of the Policy. This consent, along with other grounds, serves as the legal basis for processing the collected data.
Bonanza collects and processes only the data strictly necessary for the purposes for which it is processed. We commit to our Users that we will not process data for purposes other than those mentioned below. If we were to offer a new service on the Site or any other Site feature requiring the collection and processing of data, we commit to obtaining Users’ consent once again before offering the new service in question.
Whenever the Site processes personal data, the Service Provider takes all reasonable measures to ensure the accuracy and relevance of the personal data in light of the purposes for which it is processed.
A contact form is available on the Website, as well as an email address (contact@bonanza.co). The data processed includes the following: the User’s last name, first name, and email address. The data is processed solely for the following purposes:
- To respond to the User's request;
- Processing the request. The legal basis is the User’s consent.
The legal basis is the User's consent.
A newsletter is available on our Site to allow Users to stay informed about the latest news regarding our services, webinars, and customer case studies. We do not use this data for marketing purposes. Users may unsubscribe from the newsletter at any time by using the opt-out feature provided in the emails or by sending an email to dpo@bonanza.co.
The data processed is as follows: email address.
Email addresses are processed solely for the following purposes:
- Confirm newsletter subscription;
- Send the newsletter;
- Manage unsubscribe requests.
The legal basis is the User's consent.
On the Website, you can schedule an appointment with a Bonanza expert to discuss your project or request a demo of our services.
The data processed includes the following: email address, last name, first name.
The data is processed solely for the following purposes:
- Confirm the appointment request;
- Plan and organize the appointment;
- Follow up on the appointment as part of our after-sales service.
The legal basis is the User's consent.
We regularly post job openings on our website for people interested in joining the Bonanza team.
The data processed includes the following: email address, candidate’s first and last name, phone number, resume, and information contained in the resumes.
The data is processed solely for the following purposes:
- Receive applications;
- Process applications;
- Forward applications to Bonanza’s partner companies (pursuant to a service agreement between Bonanza and the partner company for candidate recruitment).
The legal basis is the Candidate's consent.
When a Candidate applies for a job posting on BONANZA, they may also consent to be added to BONANZA’s “CANDIDATES” database so that their profile and resume can be shared with BONANZA’s partner companies that may be seeking candidates with a profile similar to the Candidate’s.
This sharing of information is only possible if the Candidate has expressly consented to it by checking the “I agree” box in response to the question “Would you like to share your profile with other companies seeking candidates?” in the application forms.
The data processed and transmitted to partner companies are as follows: the candidate’s first and last name, phone number, email address, and all information contained in their resume.
This data is processed for the following purposes:
* To share the candidate’s profile with partner companies;
* To create a “Candidate Pool” database by BONANZA;
* Updating the database and removing the candidate from it as necessary (withdrawal of the candidate’s consent or if the candidate is no longer seeking employment).
The legal basis is the Candidate’s consent.
The Candidate may withdraw their consent at any time by unsubscribing via the emails sent for this purpose.
BONANZA collects prospect data for marketing and commercial communication purposes.
This data is collected as follows:
- Through the website's contact form (Section 5.1);
- Through a User’s subscription to the BONANZA newsletter (Art. 5.2).
Data is collected and processed solely for the following purposes:
- Establish contact with a prospective client with a view to a potential business partnership;
- Send the Prospect commercial communications for which he has given his consent;
- Re-engage prospects while complying with legal timeframes; Enable the management of all unsubscribe requests.
Any Prospect may unsubscribe at any time from communications sent by BONANZA by sending an email to dpo@bonanza.co or by using the unsubscribe link included in emails sent by BONANZA.
While browsing the Site, the User may be asked to provide personal connection data (cookies, trackers, IP address). Connection data and browsing information are used solely for statistical analysis (analysis of Site traffic and user experience) and for other purposes outlined in the cookie policy.
The legal basis is as follows: The processing is necessary for the purposes of BONANZA’s legitimate interests, in particular to provide Users with a smooth and enhanced browsing experience.
Connection data is also used to prevent and combat any form of computer fraud.
The legal basis is compliance with a legal obligation.
Candidates are encouraged to review the “Candidates” Privacy Policy to learn how BONANZA processes their personal data in connection with the performance of the Agreement between Bonanza and the Client.
We do not exceed the statutory data retention periods, and User data is retained only for as long as necessary to fulfill the purposes for which it was collected.
The retention periods are as follows:
- Data of users who submitted a contact request that was not acted upon: the data is deleted within a maximum of one (1) month after the contact request was not acted upon;
- Data of users subscribed to the newsletter: This data is retained for the duration of the user’s subscription to the newsletter, for a period of two years if there is no interaction on the user’s part, and for a maximum of one (1) month after unsubscription;
- User data (demo and appointments): This data is deleted no later than two (2) years after the user’s last contact, or sooner if the user has exercised one of their rights;
- Candidate data: This data is retained for a maximum of two (2) years after the candidate’s application has been processed. Candidates who have been connected with a partner company must contact that company regarding the handling of their data held by the partner company;
- Prospect data: This data is retained for a maximum of three (3) years after the last contact initiated by the prospect;
- Candidate database data: BONANZA retains the data in this database for two (2) months. After this period, the candidate must provide consent again, and must do so every two months. If the candidate does not respond to follow-up emails, their profile will be deleted from the database;
- Login data: In accordance with the Cookie Policy, this data is retained for a maximum of 13 months (except as provided in Article 13).
In the event that a contract with BONANZA’s partner companies—to which applications have been forwarded—is terminated for any reason, BONANZA will delete the candidates’ data (whether or not they were hired) within a maximum of three (3) months after the contract’s termination.
In establishing our data processing policy, we have created a reference framework for data retention periods, developed in accordance with the recommendations of the CNIL. In addition, BONANZA may retain certain personal data to fulfill its legal or regulatory obligations, to enable users to exercise their rights, or for statistical purposes. Upon expiration of the retention period for personal data, such data will be deleted or anonymized.
The data collected via the Site is intended exclusively for the following recipients:
These service providers have access to the data within the scope of their respective responsibilities for hosting the Site. They have limited access to User data in connection with the performance of these services and are contractually obligated to use it in accordance with the provisions of applicable regulations regarding the protection of personal data.
Users’ statistical data (cookies) is used to improve the user experience and enable enhancements to the Website’s features.
The Website and the Data Controller rely on certain third-party services to provide specific features. These third parties have limited access to User data for the purpose of providing these services and are contractually obligated to use such data in accordance with the provisions of applicable data protection regulations.
The data is also disclosed to:
- To Bonanza’s authorized personnel in connection with the provision of the Site’s and the Company’s Services;
- To partner companies, for the purpose of submitting applications for job openings posted by them on the Site.
Data may also be disclosed by BONANZA to third parties and competent authorities to comply with legal, judicial, tax, or regulatory obligations. BONANZA guarantees to Users that no personal data will be transferred to an unauthorized third party without the User’s prior, voluntary, informed, express, and written consent.
BONANZA shall not process, host, or transfer information collected about its users to a country located outside the European Union or deemed “inadequate” by the European Commission without first informing the data subject.
BONANZA has taken all reasonable and necessary precautions, in accordance with the current state of the art in this field, to protect your information in a secure environment in order to prevent any destruction, loss, alteration, disclosure, or unauthorized access. Regardless of the efforts made, no method of transmission over the Internet and no method of electronic storage is completely secure. Consequently, we cannot guarantee absolute security. If we become aware of a security breach, we will notify the affected users so that they can take appropriate measures. Our incident notification procedures take into account our legal obligations, whether at the national or European level.
In the event that the integrity and confidentiality of your data are compromised, the data controller undertakes to comply with the procedures established under the French Data Protection Act of January 6, 1978, and the European General Data Protection Regulation (“GDPR”).
BONANZA does not resell or outsource User data.
In accordance with the legal provisions of the French Data Protection Act of January 6, 1978 , and the European General Data Protection Regulation (“GDPR”), Users of the Site have the following rights:
Users may view, update, modify, or request the deletion of their personal data by sending an email to the data controller, specifying the purpose of their request and using the contact email address dpo@bonanza.co.
The User has the right to request the portability of their personal data held by the Site or by BONANZA to another site by submitting a request for the portability of their personal data to the data controller via email to the address provided above.
The User has the right to request the restriction of or to object to the processing of their data by BONANZA, which may not refuse such a request unless it can demonstrate the existence of legitimate and compelling grounds that override the User’s interests, rights, and freedoms.The User must submit a request to restrict the processing of their personal data to the data controller by sending an email to the address provided above.
In accordance with the provisions of Regulation 2016/679, the User has the right not to be subject to a decision based solely on automated processing if that decision produces legal effects concerning the User or similarly significantly affects the User.
Users are reminded that they may determine what should happen to their collected and processed data in the event of their death, in accordance with Law No. 2016-1321 of October 7, 2016.
To exercise any of your rights, simply:
- Write a letter to BONANZA at the address of its corporate headquarters;
- Or send an email to the following address: dpo@bonanza.co.
Please provide your first and last name, address, and attach a copy of your ID.
The data controller is Mr. Mathieu Marziou dpo@bonanza.co. As the data controller for the collected data, he is committed to complying with the applicable legal framework. In particular, he is responsible for providing users with comprehensive information regarding the processing of their personal data and for maintaining an accurate record of such processing.
Requests will be processed within one month, unless BONANZA provides a compelling and justified reason for extending the deadline.
If BONANZA does not comply with the User’s request, the User has the right to file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) to assert their rights.
Users are informed that a cookie is a small file placed on a user’s device (computer, tablet, or mobile device) by our Site when the Site is visited. It does not contain any personal information, but it allows us to link the user’s device to their usage preferences and experience on our Site (e.g., location, language, font size).
For the use of “cookies” that involve the storage and analysis of personal data, the User’s consent is always required. This consent is valid for a period of thirteen (13) months, subject to any exceptions (see table in Art. 13), after which the User will be asked to provide new consent.
In accordance with CNIL Decision No. 2013-378 of December 5, 2013, the Service Provider informs Users of the Site that cookies record certain information that is stored on their hard drives. This information is used to generate audience statistics for the Site and to offer services based on the information Users have previously selected during their prior visits.
A banner alert asks each User visiting the Site, before proceeding, whether they wish to accept cookies. To ensure the free, informed, and unambiguous consent of Users visiting the Site, the banner will not disappear until they have continued browsing and configured their preferences.
Unless the User has given prior consent, cookies will not be placed or read:
- If any person visiting the Site (whether via the home page or directly on another page of the Site, for example from a search engine) does not continue browsing: a mere lack of action cannot, in fact, be equated with an expression of intent;
- Or if she clicks on the link in the banner that allows her to configure her cookie settings and, if desired, refuse to accept cookies.
We use and collect cookies for the following purposes:
- To process statistics and information about traffic on our Site and to optimize it as effectively as possible;
- To provide our users with a seamless browsing experience by adapting the layout of our Site to the display preferences of the user’s device;
- To store information provided on the Site by the User.
All Users can prevent cookies from being stored by configuring their browser in one or more of the following ways:
- Open an incognito window;
- Or send an email to the following address: dpo@bonanza.co. You can also configure cookies using the “Cookies”widget available on our website’s home page.
- Configure your computer so that a message appears asking you to accept, customize, or reject cookies on each website or across all websites;
- Or any other means available to the user.
At any time, the user may choose to specify and modify their cookie preferences. The Service Provider disclaims all liability for any consequences related to the operation of the Site and any services offered that result from:
- The user's refusal to accept cookies;
- And/or the inability of the Site to store or access the cookies necessary for its operation due to the user’s choice.
The User may configure their web browser to set their preferences regarding the use of cookies.
The User may also configure their browser to accept or reject cookies on a case-by-case basis before they are installed, or to delete cookies from their device. Users are advised that if they configure their browser to reject cookies, certain features of our Site may not be accessible, and neither the Service Provider nor the hosting provider may be held liable in this regard.
The Service Provider reserves the right to modify this Policy at any time. If a change is made to this Policy, the new version will be posted immediately on the Site. If the User does not agree with the terms of the revised Policy, the User may stop using the Site’s Services and stop browsing the Site.
By browsing the Site, the User certifies that he or she has read and understood this privacy policy and accepts its terms, particularly with regard to the collection and processing of his or her personal data, as well as the use of “cookies.”
