Data processing summary

Roles

For personal data on a customer’s website, the customer is the controller and SiteBienfait is the processor. For account, billing and contract data, SiteBienfait is the controller and the privacy policy applies.

Subject matter and duration

Processing covers hosting, serving, rebuilding and changing the customer’s site, producing and storing audit evidence, and running the approval-gated change loop. It lasts for the term of the contract.

Processor obligations

• Process the data only on documented instructions from the customer.
• Keep the people who access the data under a duty of confidentiality.
• Apply the technical and organisational measures described below.
• Assist the customer with data subject requests, impact assessments and prior consultation where the law requires it.
• Notify the customer of a personal data breach without undue delay after becoming aware of it.
• Return or delete the data at the end of the service, subject to legal obligations.

Subprocessors

The providers used today are listed on the subprocessors page. A provider is added there only when it is actually activated, and the page is updated when that happens.

A customer who objects to a new subprocessor on reasonable data-protection grounds can raise the objection. If the objection cannot be met, the affected service may have to end.

Security measures

• HTTPS in transit, provided by the hosting and CDN provider.
• Access limited to the accounts that need it, with tenant and ownership checks enforced in the API and the database.
• Published customer sites are static: the public output carries no server-side database.
• Every change set passes a private preview and an approval decision before deployment.
• Every production change keeps a known-good rollback target.
• Administrative actions are logged so an incident can be reconstructed.

Personal data breach

A breach that concerns customer data is notified to the customer without undue delay after SiteBienfait becomes aware of it, with the information the customer needs for its own notification.

The customer remains responsible for notifying its supervisory authority and the people concerned where the law requires it.

Deletion and return

At the end of the service the customer can export the site repository, content and assets. Data is then deleted on request, apart from records required by law and copies still held in provider backups, which expire on the provider’s schedule.

Security, export and deletion remain available after cancellation.

Where this summary applies

A signed data processing agreement attached to an estimate or order form prevails over this page where the two differ. A question about it goes to ismael@sitebienfait.fr.

This page summarises the processing arrangements. It is not the signed agreement itself.