Contact

Privacy Policy


Cookie Policy

Last updated: 20/08/2026

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure it functions properly, to improve your user experience and to measure the website’s audience.

A cookie is a text file stored on your device (computer, tablet or smartphone) when you visit a website. It is used, in particular, to recognise a user, store certain information and analyse browsing behaviour on the site.


Audience measurement cookies

Subject to your consent where required by applicable regulations, we use Google Analytics, an audience analytics service provided by Google Ireland Limited.

Google Analytics enables us to collect information relating to the use of the website, such as:

  • the number of visitors;

  • the pages viewed;

  • the duration of visits;

  • the approximate geographical origin of connections;

  • the type of device and browser used.


This data is used exclusively for statistical purposes to improve the website’s performance and content.


The information collected by Google Analytics may be transferred to and stored on servers located outside the European Union, in particular in the United States. Where such transfers take place, they are governed by the appropriate legal mechanisms provided for under the applicable regulations.


Summary of cookies used

The website uses the following categories of cookies:

  • Strictly necessary cookies: essential for the website to function;

  • Audience measurement cookies: Google Analytics, used to compile statistics on website traffic and usage;


Managing your preferences

When you first visit the website, an information banner allows you to accept, refuse or configure non-essential cookies.


You can change your cookie preferences at any time via the consent manager accessible on the website.


You can also configure your browser to block or delete cookies. However, some features of the website may then no longer work correctly.


Retention period 

Cookies are retained for a period not exceeding that permitted by the applicable regulations. The choices (consent) made by the user regarding cookies are retained for a maximum period of six (6) months, unless otherwise required by law.





Privacy Policy

Last updated: 20/08/2026


This Personal Data Protection Policy applies to the processing of your personal data carried out by 2BSvs, in particular via its website available at the following URL: https://www.2BS.org/ (our website).


Its purpose is to inform you about the processing carried out on your personal data (hereinafter ‘Personal Data’ or ‘Data’) and the rights you have in relation to it.

We encourage you to review this Privacy Policy regularly so that you are aware of any changes that may be made to it. However, you will be notified of any substantial changes.


1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER


Your personal data is collected and processed by:

2BSvs 11, Rue Monceau – 75008 Paris – France

Telephone: +331 58 12 12 40

Email: contact@2bsvs.com


2. DATA COLLECTION


2.1 Categories of data collected


As part of our relationship with you, we are required to process your Data.
In this regard, we process, in particular, Data relating to your identification, your professional life or your comments.

We also process data relating to the devices you use to access the website, such as data from cookies.


2.2 Methods of collection


We may collect your Data in various ways, including:

  • If you or your company are certified by 2BSvs;

  • If you are one of our suppliers or service providers (e.g. certification bodies)

  • When you use our website;

  • When we communicate via the form on our website, by post, by email, by telephone, or on the social media platforms we manage;

  • When you subscribe to one of our newsletters;

  • When you send us an application to join 2BSvs;

  • When you register for an event that we organise.


This data may be collected:

  • Directly, through a declaration made by you (e.g. when you complete the form to obtain certification, when you complete the contact form);

  • Automatically by our systems, through the use of cookies on your device.

  • Indirectly, via partners. Your Data may therefore be disclosed to 2BSvs by partner certification bodies (e.g. when conducting audits), recruitment platforms (LinkedIn, Indeed, France Travail) or your employer when they request certification or a service from 2BSvs.

2.3 Mandatory and necessary nature of data collection


The provision of certain information is mandatory.

If you do not provide this ‘mandatory’ information, 2BSvs may be unable to provide you with certain services or to act on your request.
Fields on a form that are not marked as mandatory are left to your discretion. It is up to you to decide whether or not to complete them.


3 PURPOSES AND LEGAL BASES FOR DATA PROCESSING


Generally speaking, 2BSvs processes and uses your Personal Data only to the extent required by the intended purposes.
Any processing carried out by 2BSvs is based on a legal basis that justifies it.


Purposes of processing 

Legal basis for the processing

Personal data collected

Managing certified companies 

To create and manage the ‘personal area’ accounts of certified companies


To manage certificate documentation and audits of certified companies


Managing invoicing 


Sending information to companies registered on the 2BSvs platform (e.g. changes to standards, information notes)


Necessary for the performance of the contract between the economic operator and the 2BSvs association



Surname, first name, email address, role or title, company, telephone number, country, language preference


Username and password for the personal account


Managing certification bodies


To enable 2BSvs to manage recognised certification bodies to carry out audits for the certifications offered by 2BSvs (administrative tasks relating to the conduct of audits, invoicing, management of certified organisations’ accounts, and relationship management)


Manage invoicing 


Manage auditor training


Manage the database of certification bodies


Necessary for the performance of the contract between the certification body and the 2BSvs association



Surname, first name, email address, role or title, certification body, telephone number, country, language preference


Username and password for the personal account


Managing the 2BSvs website


Technical administration in conjunction with service providers


Managing the security of the 2BSvs website

Generating statistics on website traffic and service usage 


Receiving and processing messages or complaints submitted via the website

Legitimate interest in operating and improving our business and our website


Legal obligation (complaints procedure)

Surname, first name, email address, role or title, company, telephone number


IP address, information about hardware and browser

Login credentials


Managing social media

Manage accounts from a technical perspective


Interact with subscribers and other users on social media platforms

2BSvs’s legitimate interest in promoting its activities and communicating with its professional community on social media (YouTube, LinkedIn, Instagram)


User account username or pseudonym, first name and surname where visible on the profile, profile picture, content of comments, posts, reactions, private messages sent to 2BSvs, data relating to interactions with posts (likes, shares, follows), aggregated audience statistics provided by the platforms


Managing subscriptions to newsletters and alerts


Consent of the subscriber (who has a user account on the 2BSvs platform)

Surname, first name, email address, company, job role or title, data relating to subscriptions and alerts and to interaction with communications sent (delivery, unsubscription), country, language preference


Managing prospects and commercial relationships

Legitimate interest in developing and promoting its activities to a business clientele.

Consent of the data subject where required by applicable regulations (in particular for certain electronic communications).


Surname, first name, email address, telephone number, role or title, company, country, preferred language, content of the enquiry, history of correspondence, 

participation in events or webinars, communication preferences.


Managing events and communication campaigns


Managing events for customers, prospects, suppliers and partners


Managing invitations, registrations and the logistical organisation of events


Legitimate interest in managing 2BSvs’s business and promoting it through events

Surname, first name, email address, company, role or title, telephone number, country, preferred language


Dietary preferences

Managing accounts

Managing assets, analysing financial positions, management control, and social security and tax returns

Invoicing management


Compliance with the legal obligations incumbent on 2BSvs (retention of accounting documents and tax and social security returns)

Surname, first name, email address, company, role or title, telephone number, country, preferred language

Recruitment management 

Processing applications and managing interviews


Necessary for the performance of pre-contractual measures taken at your request

Surname, first name, address, email address, telephone number, role or title,  

Managing requests to exercise the rights of individuals whose personal data is processed by 2BSvs

Compliance with a legal obligation incumbent on 2BSvs

Surname, first name, email address, company, job title or position, telephone number


4 DATA RETENTION PERIODS


2BSvs retains your Data for as long as is necessary to fulfil the purposes for which it was collected, and then archives it, unless:

  • you exercise your right to have your Data deleted, under the conditions set out below,

  • A longer retention period is permitted or required under a legal or regulatory provision. In this respect, the Data may be archived for the applicable statutory limitation period.


The criteria used to determine retention and archiving periods are as follows:

  • The period during which 2BSvs maintains a relationship with you (for example, for as long as you are part of a certified organisation or provide services to 2BSvs);

  • The existence of a legal obligation to which 2BSvs is subject;

  • Whether retention is desirable in view of 2BSvs’s legal position (for example, with regard to applicable limitation periods, disputes or regulatory investigations) or for your benefit.

  • As part of a recruitment process, your Data is retained for 2 years following receipt of your application. After this period, your Data is deleted.


5. RECIPIENTS OF THE DATA


Access to your Personal Data is strictly limited.

However, 2BSvs may need to disclose it to certain categories of third parties (hereinafter the ‘Recipients’):

  • Internally: to the teams responsible for the processing operations identified above (3. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA), in the course of their duties;

  • To service providers (e.g. certification bodies), subcontractors or suppliers in connection with the services they provide in relation to the processing operations identified above (3. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA), on behalf of 2BSvs.

  • To other third parties if such disclosure is required by law, a regulatory provision or a court order, or if such disclosure is reasonably necessary to comply with legal proceedings, respond to any claims or protect the security of your Data or your rights or those of 2BSvs.


In the event of a transfer of your Data outside the European Union, 2BSvs undertakes to put in place appropriate safeguards, unless an exemption applies. 2BSvs uses the Microsoft Office suite as part of its day-to-day operations. Microsoft may host some of the Data abroad and, in such cases, undertakes to sign the European Commission’s standard contractual clauses to govern this transfer.


6. YOUR RIGHTS REGARDING YOUR DATA AND COMPLAINTS


In accordance with the amended French Data Protection Act of 6 January 1978 and European Regulation No. 2016/679/EU of 27 April 2016 (applicable from 25 May 2018), you have the following rights in respect of your Data:

  • a right of access, enabling you to find out exactly which Data is being processed by 2BSvs;

  • the right to rectification, enabling you to amend any Data that is incorrect or out of date;

  • the right to erasure, where you wish 2BSvs to cease processing all or part of your Data;

  • the right to data portability, where you wish to retrieve your Data or have it retrieved by a third party;

  • the right to restriction of processing, where you wish the processing of your Data to be suspended due to an event covered by the said Regulations;

  • the right to object on grounds relating to your particular situation where you no longer wish your Data to be processed by 2BSvs;

  • the right to set out instructions regarding the fate of your Data after your death, where you wish to determine in advance what is to happen to your Data following your death.


Furthermore, you have the right, at any time and without having to provide a reason, to object to the processing of your Data for marketing purposes, including profiling for such purposes, and the right to withdraw any consent given to 2BSvs.


You may exercise these rights, subject to compliance with the conditions governing their application, by contacting 2BSvs by email at contact@2BSvs.com or by post to our address given above.

Finally, you can cancel your newsletter subscription at any time by unsubscribing either by clicking on the link provided for this purpose within the newsletter itself or by accessing your personal account on the 2BSvs platform.


Furthermore, you also have the option to lodge a complaint with the CNIL:

  •  Directly online;

  • By post: 3 Place Fontenoy – TSA 80715 – 75334 Paris Cedex 07.