Privacy policy

Privacy policy

PREAMBLE 

The purpose of this privacy policy is to inform website users about how their personal data is collected, used, and protected. 

Personal data is considered to be any information that can directly or indirectly identify a user. 

We are committed to respecting your privacy, in accordance with the provisions of Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, and those of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. 

  1. DEFINITIONS
  • Personal data: Personal data is any information relating to an identified or identifiable natural person.

Examples of personal data: a name, date of birth, photo, fingerprint, postal address, email address, telephone number, social security number, internal identification number, IP address, computer connection identifier, voice recording, etc. 

  • The purpose(s) of the processing, i.e., the main objective of the data processing.
  • The means of processing personal data, such as technical tools, procedures, and the types of data collected.

  • Processor: a natural or legal person (company, local authority, or public body) who processes personal data on behalf of a Data Controller, within the framework of a service or provision.
  1. APPLICABLE LAW

My Bubble Health, as the Data Controller, is committed to respecting your privacy, in accordance with the provisions of the amended Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, and those of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

  1. PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of the GDPR, personal data must be: 

  • Processed lawfully, fairly, and transparently:
    • This policy aims to provide you with all information relating to the processing of personal data implemented when you browse our website.
    • When it receives a contact request, My Bubble Health bases its data processing on legitimate interest.

  • Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes:
    • My Bubble Health processes only the information necessary to be able to respond to your request.
       
  • Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed: 
    • My Bubble Health collects only the information necessary to respond to your request.
       
  • Accurate and, where necessary, kept up to date:
    • All reasonable steps are taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay upon receipt of your request.
    • My Bubble Health will inform you as soon as this operation has been carried out.
       
  • Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed:
    • My Bubble Health securely retains your identification and contact data for a period of 12 months from the date of collection. At the end of this period, the data is deleted.
       
  • Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures: 
    • To this end, connections and data recorded via our website are encrypted via a protocol that meets the current security standard (AES 256).
  1. DATA CONTROLLER 

The Data Controller is the company My Bubble Health, registered with the Trade and Companies Register under number 891 322 430.

The Data Controller for personal data can be contacted in the following way: 

  • By mail to the address: 66 Avenue des Champs Elysées 75008 Paris.

  • By email: contact@mybubblehealth.com. 
  1. PERSONAL DATA COLLECTED AND PROCESSED DURING YOUR NAVIGATION ON THE SITE 

5.1: Data collected via our contact form

When you use our site, the following personal data may be collected if you contact us via the dedicated form: 

  • Last name and first name
  • Email address
  • Telephone, if you enter this information in the body of the message you send us.

This collection, based on legitimate interest, has the sole objective of being able to provide you with a response following your contact via our website.

5.2: Data collected via website cookies

The cookie management policy related to your browsing on our site supplements this Privacy Policy and can be consulted at the following address: Politique de cookies (UE) – MyBubbleHealth.

  1. SHARING YOUR PERSONAL INFORMATION AND LOCATION OF YOUR DATA 

6.1: Subcontracting

My Bubble Health does not carry out any commercial solicitation, nor does it share, exchange, or resell your data to third parties.

Your encrypted data is transferred to the LWS subcontractor hosting our site. Where applicable, they may be transmitted to public and private organizations to meet legal obligations or as part of legal proceedings.

Your data is retained and stored for the entire duration of the processing on servers located in France.

We ensure that the subcontractor we use provides the guarantees of security and protection of the integrity of your data and its processing required by the applicable regulations regarding the protection of personal data. They only have access to the technical data necessary for the performance of the services.

You can consult the contact details of this subcontractor in our Legal mentions.

6.2: Redirection to third-party sites

If you click on hyperlinks from our site that redirect you to third-party sites, please note that we are not responsible for and do not have control over their privacy policies and practices. 

  1. YOUR RIGHTS AS A USER OF OUR WEBSITE

As users concerned by personal data processing, you can exercise the following rights: 

  • Right of access, rectification, and the right to erasure of your data (Articles 15, 16, and 17 of the GDPR); 
  • Right to restriction (Article 18 of the GDPR) and to object to the processing of your data (Article 21 of the GDPR);
  • Right to data portability, if applicable (Article 20 of the GDPR);
  • Right not to be subject to a decision based solely on automated processing (Article 22 of the GDPR); 
  • Right to communicate instructions on the fate of your data in the event of death.

To exercise your rights, you can address your request to dpo@mybubblehealth.com.

We may ask you at this time to provide us, if necessary, with additional information or documents to justify your identity.

We will get back to you as soon as possible and within a maximum period of one month from the receipt of your request.

If, after contacting us, you consider that your “Data Protection and Liberties” rights have not been respected, you can submit a complaint to the CNIL at the following address: 3 place de Fontenoy, 75334 Paris Cedex 07, France, or via the Supervisory Authority’s website: Plaintes | CNIL

  1. MODIFICATION OF THE CONFIDENTIALITY POLICY

The publisher of the mybubblehealth.com site reserves the right to modify this confidentiality policy at any time to ensure its compliance with the law in force. 

Any modifications shall not affect actions previously carried out on the site, which remain subject to the Policy in force at the time of their execution.

As users of our site, we invite you to read this policy each time you consult it, without the need for formal notification of the modifications made to our policy. 

This confidentiality policy, published on 06/25/2025, was updated on 09/04/2026.

error: Content is protected !!