BUSINESS DATA SYSTEMS, publisher of the website hopcrm.com (hereinafter "the Site"), attaches particular importance to protecting the personal data of Site visitors. This policy describes the data processing carried out in connection with the use of the Site, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.
Scope: this policy covers exclusively the data collected via the showcase website hopcrm.com (browsing, contact forms, connection requests, partner applications). It does not cover data processed within the HOP CRM software by end clients as part of their use of the product: such processing is governed by a separate Data Processing Agreement (DPA).
1. Data controller
The controller for the data collected on the Site is:
BUSINESS DATA SYSTEMS
58 rue de Monceau, 75008 Paris, France — SIRET: 99394277000013
Legal representative: Michel Hernandez
Data Protection Officer (DPO): Felana Rakotoarison — dpo@hopcrm.com
2. Data collected and purposes
| Data collected | Purpose | Legal basis |
|---|
| Name, email, company, phone number (contact form / connection request) | Process the request and forward contact details to the relevant certified integrator partner | Performance of pre-contractual steps requested by the data subject (Art. 6.1.b GDPR) |
| Name, email, company, professional information (partner application form) | Review the application to join the integrator partner network | Performance of pre-contractual steps (Art. 6.1.b GDPR) |
| Browsing data (IP address, pages viewed, visit duration, device type) | Audience measurement, Site improvement | Legitimate interest (Art. 6.1.f) |
| Language preferences | Adapt the Site display (fr, en, de, it, es, br) | Legitimate interest |
3. Data recipients
Depending on the nature of the request, data may be shared with:
- BUSINESS DATA SYSTEMS internal departments authorized to process the request;
- the certified HOP CRM integrator partner(s) relevant to the request (geographic area, sector, company size), solely for the purpose of following up on a connection request initiated by the data subject. Each certified integrator is bound to HOP CRM by a partnership agreement committing it, in particular, on confidentiality and use of the data shared;
- technical subcontractors of BUSINESS DATA SYSTEMS necessary for the operation of the Site (hosting, email tools, audience analysis tools).
Data collected via the Site’s forms is managed through an internal instance of the HOP CRM solution, used by BUSINESS DATA SYSTEMS to track its own leads and partner applications. Visitor data is never sold to third parties and is only shared with an integrator partner as part of an explicit connection request made by the data subject.
4. Retention period
| Data | Retention period |
|---|
| Data from a connection request that did not lead to a contract | 3 years from the last contact |
| Data from an unsuccessful partner application | 2 years from the application |
| Browsing data / analytics cookies | Maximum 13 months |
| Data of an active integrator partner | Duration of the contractual relationship, then archiving in accordance with legal obligations |
5. Hosting and data transfers
Data collected via the Site’s forms is managed through an internal instance of the HOP CRM solution, used by BUSINESS DATA SYSTEMS to track its own leads and partner applications. The Site itself is hosted in France by OVH SAS (2 rue Kellermann, 59100 Roubaix, France).
This hosting choice is consistent with the hosting architecture of the HOP CRM software solution itself, which also relies exclusively on data centers located in the European Union (Hetzner, Germany/Finland; Scaleway, France), ensuring that all data — both the Site’s and that processed within the HOP CRM software — remains outside the scope of the US Cloud Act.
This internal HOP CRM instance, used to manage requests originating from the Site, is strictly separate from the instances deployed by end clients as part of their own use of the software.
No data transfer outside the European Union is carried out in connection with the Site’s hosting.
6. Cookies
The Site uses cookies and similar technologies. On your first visit, a banner allows you to accept or refuse non-essential cookies.
| Cookie type | Purpose | Consent required |
|---|
| Strictly necessary cookies | Technical operation of the Site (language preference, security) | No |
| Audience measurement cookies | Traffic statistics, via Plausible Analytics (hosted in the European Union, no tracking cookie or fingerprinting) | No — Plausible does not place a cookie and is exempt from consent requirements under CNIL guidance |
You can change your preferences at any time via the cookie management module or your browser settings.
7. Your rights
In accordance with the GDPR, you have the following rights over your personal data:
- right of access, rectification, and erasure;
- right to restriction of and objection to processing;
- right to data portability;
- right to withdraw your consent at any time when processing is based on it;
- right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected.
To exercise these rights, contact us at: dpo@hopcrm.com. We undertake to respond to any request within one month, in accordance with applicable regulations.
8. Security
BUSINESS DATA SYSTEMS implements appropriate technical and organizational measures to protect the personal data collected against loss, unauthorized access, disclosure, or destruction.
9. Changes to this policy
This policy may be updated at any time, in particular to reflect regulatory or functional changes to the Site. The date of the last update appears at the top of the document.
10. Contact
For any question regarding this privacy policy: dpo@hopcrm.com