GDPR Compliance.
Our commitments regarding the protection of personal data.
1. Our commitment
BS GROUPE, publisher of the LLMBiblos service, processes personal data in strict compliance with the General Data Protection Regulation (GDPR — EU 2016/679 of April 27, 2016) and the French Law No. 78-17 of January 6, 1978 as amended ("Loi Informatique et Libertés").
2. Data controller
- BS GROUPE — EURL
- 14-16 rue Léon Bocquet, Appartement 6, 94100 Saint-Maur-des-Fossés, France
- RCS Créteil — 478 935 596
- Legal representative: David-Alexandre TORDJEMAN, managing director
- GDPR contact: hello@llmbiblos.ai
3. Legal bases for processing
Processing is based on, depending on the case:
- Performance of a contract with the customer (article 6.1.b of the GDPR);
- Consent of the data subject (article 6.1.a);
- BS GROUPE's legitimate interest in providing, securing and improving its service (article 6.1.f);
- Compliance with a legal obligation (article 6.1.c).
4. Hosting and location
The website and service are hosted by Vercel Inc. Content is served primarily from European CDN regions. Any transfer outside the European Union is governed by the European Commission's standard contractual clauses (Decision 2021/914) and the additional safeguards recommended by the European Data Protection Board (EDPB).
5. Subprocessors
The main subprocessors are: Vercel Inc. (website hosting), FormSubmit (contact form delivery), Google LLC (Google Analytics, only on consent), the AI / LLM model providers used by the LLMBiblos conversational agent, and our standard email, CRM and billing providers. The complete and up-to-date list is available upon request at hello@llmbiblos.ai. Each subprocessor is bound by a data processing agreement compliant with article 28 of the GDPR.
6. Security
- TLS 1.3 encryption in transit, AES-256 at rest
- Strict access controls (least privilege principle)
- Access logging and monitoring
- Encrypted backups and restoration tests
- Regular security audits
7. Your rights
You may exercise at any time your rights of access, rectification, erasure, restriction of processing, portability, objection, and consent withdrawal.
To exercise these rights, contact us at hello@llmbiblos.ai. We will respond within a maximum of one month.
If you encounter difficulties, you may lodge a complaint with the French data protection authority — the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
8. Breach notification
In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, BS GROUPE will notify the CNIL within 72 hours, and where applicable the data subjects without undue delay.