Privacy Policy

Data collected

We collect the following data when you use the Site:

• Account data: email address, password (encrypted), registration date, GDPR consent.
• Testimonial data: first name or pseudonym, country, BO type, patient's date of birth, story (before/during/after diagnosis), advice, summary, medications, care types, healthcare professionals, social links.
• Health data: testimonials may contain health data, considered sensitive data under Article 9 of the GDPR. This data is collected only with your explicit consent.
• Messages between members: content of messages sent through the platform.
• Technical data: session cookies and language preference cookies (no advertising tracking cookies).

Legal basis for processing

The processing of your data is based on your explicit consent (Article 6.1.a and Article 9.2.a of the GDPR). You give your consent during registration by checking the dedicated checkbox. Regarding health data contained in testimonials, specific and explicit consent is required under Article 9 of the GDPR.

Data sharing

Your personal data is never sold to third parties. When submitting a testimonial, your first name and country are sent to the site administrators (contact@bocommunity.org) by email for review purposes. If you accept analytics cookies, anonymized browsing data is collected by Google Analytics (Google LLC). Transactional emails (testimonial approval, member messages, password reset) are sent via Brevo (Sendinblue, servers in France).

Data retention period

Your data is retained as long as your account is active. You can delete your account at any time from the Settings page, which permanently deletes all your personal data, including your testimonials and messages. Administrative audit logs are retained for 3 years for traceability purposes.

Your rights

Under the GDPR, you have the following rights:

• Right of access: you can view your data from your profile.
• Right of rectification: you can edit your information and testimonial at any time.
• Right to erasure: you can delete your account and all your data from the Settings page.
• Right to data portability: you can export all your data in JSON format from the Settings page.
• Right to withdraw consent: you can withdraw your consent at any time from the Settings page, which will result in the deletion of your account.

Contact

For any questions about your personal data, you can contact us at: support@bocommunity.org. The Site is supported by the Hope for Gabriel association.

Cookies

This site uses essential technical cookies and, with your consent, analytics cookies:

• Session cookie: required for authentication (next-auth).
• Language preference cookie: stores your interface language choice.
• Consent cookie: stores your cookie preference choice (accepted/refused).
• Google Analytics (G-1M19E6LY5B): only if you accept cookies. Anonymized audience measurement (anonymize_ip enabled). Data is processed by Google LLC according to their privacy policy. You can withdraw your consent at any time via the "Manage cookies" link in the footer.

No advertising cookies are used. You can manage your cookie preferences via the "Manage cookies" link in the footer.

Hosting and security

The site is hosted on Vercel (United States, compliant with the EU-US Data Privacy Framework). The database is hosted by Neon (PostgreSQL) with servers located in Europe. Passwords are encrypted with bcrypt. Connections are secured via HTTPS. On-demand translations are performed via the DeepL API — texts pass through DeepL servers for translation only. Transactional emails are sent via Brevo (Sendinblue, servers in France).