Data controller
The controller of your personal data is:
- Registered name
- BF BERNIS FACTORY
- Legal representative
- Sullivan Bernis — Manager
- Address
- 17 Boulevard de la Pugette
13009 Marseille — France - bernisfactory@gmail.com
- Phone
- 06 43 87 53 19
Data we collect
We collect only the data strictly necessary for our auto tuning workshop activity and for properly handling your requests.
When you get in touch
- First and last name
- Phone number
- Email address
- Vehicle information (make, model, year, mileage, usage)
- Description of your project (tuning, maintenance…)
- Photos / videos you choose to share
During the service
- Billing details (postal address)
- Vehicle information (registration document, VIN)
- Intervention history and associated documents (quotes, invoices, intervention reports)
Technical browsing data
When you visit the site, we may collect anonymised technical data (browser type, operating system, pages visited) for audience measurement and site improvement. No personally identifying data is collected without your knowledge.
We do not collect any sensitive data within the meaning of article 9 of the GDPR (racial origin, political opinions, religious beliefs, health data, etc.).
Purposes and legal bases
Your data is processed for specific purposes justified by a legal basis under the GDPR:
Responding to your requests
Legal basis: Legitimate interest (article 6.1.f GDPR). We process your data to respond, prepare a quote and arrange an appointment.
Performing the service
Legal basis: Contractual performance (article 6.1.b GDPR). If you become a client, we process your data to deliver the service, invoice you, and ensure follow-up.
Legal obligations
Legal basis: Legal obligation (article 6.1.c GDPR). Retention of accounting and tax documents for the legally required periods (10 years for invoices).
Retention period
- Prospects (non-clients)
- Data retained for 3 years from the last contact.
- Active clients
- Data retained for the entire duration of the commercial relationship.
- Inactive clients
- Data retained for 3 years from the last active contact.
- Accounting / invoice documents
- Retention 10 years in accordance with legal and tax obligations (article L123-22 of the French Commercial Code).
- Browsing data
- Maximum retention 13 months (period recommended by the CNIL).
Data recipients
Your data is intended exclusively for Bernis Factory and, where appropriate, for technical partners acting as processors strictly within our activity:
- OVH Cloud France — website hosting (servers based in France)
- Partner engine engineer — only for mapping services requiring his intervention
- Sub-contracting partners (washing, detailing, cosmetic bodywork) — only with your agreement and only for the services entrusted to them
- Chartered accountant — for legal obligations (invoicing, tax declarations)
We do not sell, rent or transfer your data to third parties for commercial purposes. No client file is ever transferred.
Transfers outside the European Union
Your data is hosted in France (OVH Cloud, Roubaix) and is not transferred outside the European Union. All processing operations take place within the European Economic Area.
Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure:
- Secure HTTPS connection across the entire site
- OVH hosting with regular backups
- Data access restricted to authorised personnel
- Strong, protected passwords on internal tools
- Paper retention of sensitive documents in a secure location at the workshop
Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data at any time:
- Right of access : obtain confirmation that your data is being processed and receive a copy.
- Right of rectification : have inaccurate or incomplete data corrected.
- Right to erasure ("right to be forgotten"): request the deletion of your data, subject to legal retention obligations.
- Right to restriction : restrict the processing of your data in certain cases.
- Right to object : object to processing for reasons relating to your particular situation.
- Right to portability : receive your data in a structured, commonly used format.
- Right to withdraw consent at any time when processing relies on it.
How to exercise your rights
To exercise one of these rights, contact us:
- By email: bernisfactory@gmail.com
- By phone: 06 43 87 53 19
- By post: BF BERNIS FACTORY, 17 Boulevard de la Pugette, 13009 Marseille
We commit to responding within one month at most. We may ask for proof of identity in order to verify you.
Complaint to the CNIL
If, after contacting us, you believe your rights are not being respected, you can file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.
Cookies
The Bernis Factory site uses only technical cookies strictly necessary for its operation. These cookies don't require your prior consent under the "ePrivacy" directive or the French Data Protection Act.
Cookies used
- Session cookies for proper navigation
- Preference cookies (language, display choices)
You can at any time configure your browser to refuse or delete cookies. Note that disabling technical cookies may impair certain site features.
No advertising, tracking or social media cookie is placed on the site without your explicit consent.
Minors
Our site and services are aimed at an adult audience. We do not knowingly collect data relating to minors under 16 without the consent of their parents or legal representatives.
Policy updates
This privacy policy may be updated at any time, in particular to reflect legislative or regulatory changes or workshop practices. The applicable version is the one accessible online at the date of your visit.
In case of a substantial change, we will notify you by any appropriate means (email to active clients, visible notice on the site).
Last updated · 28 May 2026