Legal information
Privacy policy
Effective date: 30/09/2026, 10:00:00
This English version is a translation provided for convenience. The French version prevails.
In brief
- We collect what you send us in order to reply and carry out the service.
- No advertising, no analytics, no sale of data.
- Your voice is never used to train AI.
- You can access, correct or delete your data: [email protected].
Contents
01Who we are
Benchmaven SAS ("we"), simplified joint-stock company (SAS), 22 Rue de Rathsamhausen, 67100 Strasbourg, France, is the controller of personal data collected on the website benchmaven.click and in our exchanges with you: quote requests, bookings, sessions, invoicing.
We process your data for four reasons: to reply quickly to your requests, to carry out and follow up the services ordered, to improve our services based on your feedback, and to run our day-to-day administration (quotes, invoices, accounting). We handle it with respect, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 (the French Data Protection Act), and protect it against unauthorised access, disclosure, alteration or destruction.
We have not appointed a data protection officer, as this is not mandatory for our activity. For any question: [email protected] or +33 (0)3 88 27 54 16.
02Scope
This policy covers website visitors, people who contact us and our clients. It describes our practices and your rights.
When we record people on behalf of a business client — for example the narrators of an audiobook for a publisher, or podcast guests for a production company — it is that client who decides how the recordings are used. We then act as a processor, under our data processing agreement, and the client's policy applies to those people.
03The data we collect
Through the contact form: full name, email address, phone (optional), requested service, preferred date (optional) and a description of your project. Fields marked as required are needed to reply; without them we cannot prepare a quote.
When booking and during the service: billing details, artist or band name, information needed for the quote, email or phone exchanges, bank transfer references. Card payments at the studio are processed by our bank on its terminal: we neither see nor keep card numbers.
Recordings: your voice and performance are personal data when they can identify you. We process them only to carry out the service. If your team films the session, the footage is your responsibility.
Technical data: our host keeps connection logs (IP address, date, page requested, browser) for website security. Your consent choice is stored in your browser; it contains no identifying data.
We do not ask for sensitive data. If you need to reschedule for health reasons, simply tell us you are unavailable: no medical certificate is required.
04Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Replying to a request and preparing a quote | Form, exchanges | Pre-contractual steps at your request (Art. 6(1)(b)) | 3 years after the last contact |
| Booking, carrying out and following up the service | Identity, contact details, project, schedule | Performance of the contract (Art. 6(1)(b)) | 5 years after the end of the relationship (limitation period, Art. 2224 Civil Code) |
| Keeping working sessions | Recordings, session files | Performance of the contract (Art. 6(1)(b)) | 6 months after the last session, then deletion |
| Invoicing and accounting | Identity, billing, payments | Legal obligation (Art. 6(1)(c)) | 10 years (Art. L.123-22 Commercial Code) |
| Handling a complaint or dispute | Exchanges, case documents | Legitimate interest in defending our rights (Art. 6(1)(f)) | Duration of proceedings and appeal periods |
| Securing the website | Connection logs at the host | Legitimate interest and legal obligation (Art. 6(1)(f) and (c)) | 1 year at most (Decree No. 2021-1362) |
| Storing your choice on trackers | Key bmvn_consent_v1 in the browser | Legal obligation (Art. 82 French Data Protection Act) | 6 months (182 days) |
We do not sell or rent your data. We do not send newsletters or marketing emails. If we ever proposed a new purpose, it would be compatible with the original one, or we would ask for your consent.
When we rely on our legitimate interest, we check that the aim is genuine, that the processing is necessary and that it does not override your rights. You can ask us for a summary of this assessment and object to it.
05Voice, image, minors and artificial intelligence
The right to privacy and the right to one's image (Article 9 of the French Civil Code) apply to your voice and image. We publish no excerpts of your recordings, no session photos and do not mention your name on our website or social media without your prior written consent.
We never use our clients' recordings to train, test or improve artificial intelligence systems, and we create no voice clone without the specific written authorisation of the person concerned.
Sessions for minors are booked by their legal guardian, who provides the necessary information. Our website offers no online service aimed at minors; Article 45 of the French Data Protection Act, which sets 15 as the age at which a minor may consent alone to such services, therefore does not apply to the form, which is reserved for adults.
06Who can access your data
Your data is accessible to the two members of the studio team, within the limits of their tasks. It may be passed to the following recipients, only for the purposes described:
- OVH SAS (2 rue Kellermann, 59100 Roubaix, France), host of the website, our email and our storage space, in data centres located in the European Union;
- FormSubmit (formsubmit.co), a service that forwards the contents of the contact form to our mailbox;
- our chartered accountant, bound by professional secrecy, for billing data;
- our bank, for transfers and card payments;
- the consumer mediator, a lawyer or a court, in the event of a dispute;
- authorities that request it within the framework of the law.
Every provider that processes data on our behalf is bound by a contract that complies with Article 28 GDPR.
07Transfers outside the European Union
Our data is hosted in the European Union. The FormSubmit service is operated from the United States: when you use the form, its contents pass through this service. To our knowledge, this provider is not certified under the EU-US Data Privacy Framework. This transfer relies on Article 49(1)(b) GDPR: it is necessary for the pre-contractual steps you request by sending us your project.
If you prefer to avoid this transfer, write to us directly at [email protected] or call +33 (0)3 88 27 54 16: your request will be handled in the same way.
08Security
We apply appropriate measures: the website is served over HTTPS only, access to data is restricted to the team with individual accounts and strong passwords, two-factor authentication where the service allows it, encrypted workstation disks and backup media, premises locked outside sessions, and deletion of sessions at the end of the archiving period.
In the event of a data breach that poses a risk to your rights, we notify the CNIL within 72 hours (Article 33 GDPR) and inform you directly if the risk is high (Article 34). No transmission over the internet is completely secure; once we receive data, we apply our protective measures.
09Your rights
You have the following rights:
- access to your data and to information about its processing (Art. 15 GDPR);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure, in particular when the data is no longer needed (Art. 17);
- restriction of processing in the cases provided for (Art. 18);
- portability of the data you provided, in a structured, machine-readable format (Art. 20);
- objection to processing based on our legitimate interest (Art. 21);
- withdrawal of your consent at any time, without affecting the lawfulness of earlier processing (Art. 7(3));
- instructions on what happens to your data after your death (Art. 85 French Data Protection Act).
To exercise them, write to [email protected] or to our postal address. We reply within one month, which may be extended by two months for a complex request, in which case we will tell you (Art. 12(3)). Exercising your rights is free. If we have reasonable doubts about your identity, we may ask for additional information.
You may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr. We invite you to write to us first: most questions are resolved quickly.
10Cookies and trackers
A cookie is a small file placed on your device by a website to remember preferences or measure use. Other techniques, such as the browser's local storage, web beacons or pixels, serve the same purposes.
The website benchmaven.click uses no cookies or trackers for analytics, advertising or social media. It only stores your consent choice in your browser's local storage (bmvn_consent_v1) for 6 months. Our banner groups trackers into five categories — strictly necessary, functional, audience measurement, advertising, display preferences — and offers three buttons of equal weight: "Accept all", "Reject all" and "Customise". The four optional categories are empty to date.
If we ever added a tracker that requires consent, we would tell you and ask for your consent again. Details are in our cookie policy.
11Links to other websites
The website links to third-party services such as OpenStreetMap. Those websites apply their own privacy policies; we are not responsible for their practices.
12Status and changes
This policy is information about our practices; it does not limit the rights you have under the law. We may amend it to reflect changes in our services or in regulations. The new version is published on this page with its effective date and replaces the previous one. In the event of a significant change, we inform our clients by email.
Contact: Benchmaven SAS, 22 Rue de Rathsamhausen, 67100 Strasbourg, France — [email protected].