Website information
Sourcing Force privacy policy
This policy presents the processing planned for the Sourcing Force website: enquiries, appointments, communications and audience measurement. It explains your rights and the contact for exercising them.
Data controller and contact
BME CONSULTING, a French single-member limited liability company (SARL), at 113 rue Marietton, 69009 Lyon, France, is the controller for processing relating to the website and its commercial enquiries.
For questions about your data or to exercise your rights, write to BME Consulting, for the attention of Jérémy Ferrer, at the same address. Jérémy Ferrer is the designated contact for these requests.
Sourcing Force + Buy Made Easy
Services covered by this policy.
This website presents Sourcing Force, an application for centralising one-off purchases, and lets you contact its teams.
Information submitted is used to handle your request for the purposes and periods described below.
Buy Made Easy acts as the single supplier for outsourced procurement; processing under customer contracts is governed by the corresponding contractual documents.
Contact requests and appointments
The planned setup uses HubSpot to receive forms, organise appointments and track exchanges. The information concerned includes professional contact details, company, country, enquiry subject and details voluntarily provided. Avoid sending sensitive data or unnecessary confidential information.
Required fields identify and route your request. Without them, the form cannot process it; you can use the general contact details instead. Additional information remains optional.
A quotation or demonstration request made with a view to entering into a contract falls under pre-contractual steps taken at your request. Other professional exchanges rely on BME's legitimate interest in responding and managing its relationships. An enquiry does not constitute a newsletter subscription.
Marketing emails and newsletter
Professional emails relevant to your activity may be sent on the basis of BME's legitimate interest, with the option to object at collection and in each message.
Newsletter subscription will be separate and based on your consent, given through a voluntary action. You can withdraw consent and unsubscribe at any time. These choices do not determine whether a contact request receives a response.
Depending on the selected setup, email campaigns are handled by HubSpot, Smartlead or Moosend. Unsubscription and retention rules apply regardless of the sending tool.
Audience measurement and cookies
GA4 is planned to measure visits and use of the website. It will load only with your prior consent. Refusing optional trackers must be as easy as accepting them; a permanent control will let you change your choice.
HubSpot tracking functions unnecessary for the enquiry will also require the appropriate choice before loading. Cookies strictly necessary for the requested service are distinguished from measurement and tracking functions.
Search Console is planned to monitor the website's visibility in search results. Choosing it does not, in itself, mean an additional tracker is installed in your browser. External videos available on the website load only after an explicit action; their provider may then receive connection data.
Recipients and service providers
Authorised BME teams handle enquiries from France. The Hostinger server selected for the website is located in France. HubSpot is selected for forms and appointments; HubSpot, Smartlead or Moosend for email campaigns; Google for the measurement and visibility tools described. Information shared with each is limited to its function.
Hosting the website in France and team access from France do not mean that all processing by service providers remains in France or the European Union. Any transfers associated with the tools used must be covered by applicable mechanisms: an adequacy decision or appropriate safeguards, including standard contractual clauses where necessary. You can contact the designated person for information about transfers and safeguards concerning your data.
Selected retention periods
Data on prospects who are not customers is retained for three years from collection or the last contact initiated by the prospect, then deleted or anonymised. Simply opening an email does not restart this period.
For the newsletter, withdrawing consent stops messages; the selected retention period is also limited to three years of inactivity. The minimum information needed to honour an objection is kept separately from active prospecting lists.
The selected retention period for GA4 event and user data covered by the retention setting is two months, without automatic renewal following new activity. Standard aggregated reports are not covered by this setting.
Where justified, documents needed to meet an obligation or defend a right are archived separately, with restricted access and a retention period appropriate to their purpose.
Your rights and how to exercise them
Depending on the processing and applicable conditions, you may request access to your data, rectification, erasure, restriction of processing and portability. You may object to direct marketing and withdraw consent for processing based on it.
Send your request to the contact named at the top of this page, stating your request and the contact details needed to reply. Additional identification may be requested if there is reasonable doubt about your identity. The usual response period is one month; a justified extension may apply under the conditions provided by the regulations.
You may also lodge a complaint with the CNIL. Security arrangements and access permissions must be appropriate to the processing concerned. This page does not describe data processing conditions within a customer's instance of the software, which are governed by its contractual framework.