Privacy Policy
Personal Data Protection
Data confidentiality is a core commitment of BUDO Events™. Personal data is never sold, rented, assigned, exchanged, or used for advertising, commercial, or profiling purposes. BUDO Events™ does not implement any external individual tracking system.
1. Data Controller
The processing of personal data associated with BUDO Events™ is carried out by CREALEAD, Société Coopérative et Participative Anonyme (SCOP SA) with variable capital, registered with the Montpellier Trade and Companies Register under number 438 076 200, with its registered office at Hôtel de la Coopération, 55 rue Saint-Cléophas, 34070 Montpellier, France. BUDO Events™ is a trademark registered by Laurent NISON, brand manager within CREALEAD.
2. Data Protection Officer
Any request relating to personal data may be sent to the data protection officer (DPO) of BUDO Events™ using the “Contact us” form available in the application or by mail addressed to CREALEAD, for the attention of the BUDO Events™ DPO, at the address indicated above.
3. Data Processed
- identity, country, email address, optional organization and password stored in hashed form;
- information and files submitted to create or manage an event;
- messages sent to support and information necessary for their processing;
- session data, preferences, IP address and technical logs useful for security and diagnosis;
- data related to validation, moderation, and operations performed on the service.
4. Purposes and Legal Bases
- create, validate, and administer accounts in order to provide the requested service;
- publish, moderate, and distribute events, including in public calendars;
- manage organizations and the shared rights of their members;
- respond to contact requests and provide support;
- secure the service, prevent abuse, and retain elements necessary for the defense of rights;
- comply with applicable legal obligations.
These processing activities are based, depending on the case, on the performance of the requested service, the legitimate interest in operating and securing BUDO Events™, consent where required, or compliance with a legal obligation.
5. Public Data
The information of a published event is intended to be accessible on the site and in public iCalendar files. No personal data from an account is published through an event, except for the first and last name of the person who created it when the event is published individually. When an event is linked to an organization, only the name of that organization is made public: the identity of its members and their contact details are not displayed.
The email addresses of people who are members of an organization are not communicated to other members. Anyone contributing to the service must avoid inserting unnecessary personal data into a public record.
6. Confidentiality Commitment
Access to personal data is limited to expressly authorized persons only, solely when such access is necessary for the operation, security, support, or moderation of the service. Data is never sold, rented, assigned, exchanged, communicated, or made available to third parties for commercial, advertising, statistical, or profiling purposes.
Technical operations strictly necessary for the functioning of the service are carried out under a confidentiality obligation and do not allow any reuse of the data for a purpose of BUDO Events™ or any purpose external to it.
7. Data Sovereignty and Localization
Data sovereignty is a core principle of BUDO Events™. Personal data is hosted and processed in France or, failing that, within the European Economic Area, under the protection of European law. BUDO Events™ does not organize any transfer of personal data outside this area and prioritizes infrastructures and technical tools that make it possible to guarantee this localization. Any development likely to modify this commitment would require a prior assessment, an explicit update of these rules, and clear information for the individuals concerned.
8. Retention Periods
Data is retained for the period necessary for each purpose. Deleted accounts and events are logically deactivated in order to preserve the integrity, security, and history of the service, then retained for a period that must be precisely defined. Technical logs, messages, and backups are subject to limited retention periods to be specified.
9. Local Storage and Trackers
BUDO Events™ may store locally technical elements strictly necessary for the proper functioning of the application, its security, the continuity of its use, and the requested preferences. The service does not use any advertising cookie, any external individual audience-measurement tool, any social network tracker, or any cross-site tracking.
10. Security
Reasonable technical and organizational measures protect data against loss, alteration, disclosure, and unauthorized access. Any account holder must choose a strong password, secure their email account, and promptly report any suspicious use of their account.
Since no computer system can guarantee absolute security, BUDO Events™ cannot completely rule out the risk of an attack, intrusion, hacking, or exploitation of an unknown vulnerability. To the extent permitted by law, BUDO Events™ cannot be held liable when a breach of data results from external malicious acts, despite the implementation of reasonable and appropriate protective measures. This limitation does not apply in the event of a fault directly attributable to BUDO Events™ or where a mandatory legal provision provides otherwise.
11. Rights of Individuals
Depending on the situation, any person may request access to, rectification, erasure, restriction, or portability of their data, object to certain processing activities, and withdraw their consent. Proof of identity may be requested in case of reasonable doubt. A complaint may also be filed with the CNIL.
12. Updates
These rules may evolve with features, technical tools, and regulations. Their last update date is indicated at the top of the page, and any significant change may be brought to the attention of people using the service.