Personal data
Privacy policy
What data we collect on bpo-css.com, why, how long we keep it, and how to exercise your rights.
This English translation is provided for information only. The French version prevails.
Data controller
The data collected on this website is processed by Customer Service Subcontractor (CSS), a limited liability company whose registered office is located in Antananarivo, Madagascar (see the legal notice).
For any question about your data, write to us at info@bpo-css.com. For a job application, write to recrutement@bpo-css.com.
Data collected, purposes and retention periods
We only collect the data you send us, through the website forms, by email or by WhatsApp.
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Responding to your contact or quote request | Name, email, phone, company, needs, preferred hours, message | Pre-contractual measures and legitimate interest | 3 years after our last exchange |
| Processing your application and keeping it for future positions | Name, phone, email, desired position, resume, message | Your consent (form checkbox) | 2 years after our last contact, then deletion |
| Communicating with you by email or WhatsApp | Your number or address, the content of the messages | Legitimate interest | 3 years after our last exchange |
You can withdraw your consent at any time, for example to have your resume deleted before the end of the 2 years. We do not sell your data and do not use it for any purposes other than those above.
Who receives your data
Your data is accessible only to the people at CSS who need it: the sales team for contact requests, the human resources team for job applications.
We use technical service providers (website hosting, email, form-processing tools), who act only on our instructions. The website hosting provider is listed in the legal notice.
Transfers outside the European Union
Our teams work in Madagascar, and some of our service providers are located outside the European Union. Your data may therefore be processed in these countries.
When this is the case, we cover the transfer with appropriate safeguards, such as the European Commission's standard contractual clauses.
Cookies and third-party services
This website may use cookies: some are necessary for it to work, others are used to measure traffic or to personalize our communications. Apart from necessary cookies, no cookie is placed without your consent, which you can change at any time from the “Cookie settings” page.
The Contact page displays a Google Maps map: when it loads, Google receives your IP address and may place cookies, in accordance with its own privacy policy.
The contact and job application forms use Cloudflare Turnstile to verify that the submission comes from a person and not a bot. For this purpose, Cloudflare receives your IP address and technical information about your browser, used solely for this verification, in accordance with its own privacy policy. Turnstile does not place advertising cookies.
Security
We protect your data with appropriate technical and organizational measures: access limited to authorized personnel, encrypted connections and backups. To learn more about our infrastructure, see the Security and continuity page.
Your rights
At any time, you can:
- obtain a copy of the data we hold about you;
- have it corrected if it is inaccurate;
- request its deletion;
- object to its use or request that its use be restricted;
- request to receive it in a reusable format (portability);
- withdraw your consent, without affecting what was done before.
Write to us at info@bpo-css.com, or at recrutement@bpo-css.com for a job application. We will respond within one month. To protect your data, we may ask you to verify your identity.
Complaints
If you believe your rights are not being respected, you can file a complaint with the data protection authority of your country: the CNIL in France (cnil.fr) or the Commission malagasy de l'informatique et des libertés (CMIL) in Madagascar.
Changes
We may update this policy, for example if we add a service. The version in force is always the one on this page.
Last updated: November 5, 2026.