Cookie and privacy policy

I. COOKIE POLICY

This website is edited by EXPRIMER, a French limited liability company, with a capital of €300,000, registered in the companies register (RCS) in Aix-en-Provence under the number B 800 375 966, headquartered at 180 Rue Louis Armand, 13290 Aix-en-Provence, France (hereinafter referred to as the “Company”).

Navigation on the www.oisipic.fr website (hereinafter referred to as the “Website”) is likely to cause the installation of cookies on your device.

A device refers to any computer, smartphone, tablet or video game console connected to the internet.

A cookie is a small-sized file that cannot be used to identify the user, but which records a device’s navigation on a website.

The data thus obtained is intended to facilitate future navigation on the Website and also to perform various audience measurements.

The cookies used on the Website are set by the Company or by third parties.

The Company only uses cookies on the Website that are strictly necessary to navigate the Website, enabling the use of the Website’s main features. Moreover, the Company uses functional cookies intended to optimize how the Website works and to adapt the layout of the Website to the device that you are using.

Additional cookies that are not essential for navigating the Website are also used:

  • Google analytics audience measurement
  • Social network share buttons
  • Displaying targeted sponsored content on social networks
  • Targeted advertising trackers

Cookies that are not strictly necessary can be deactivated by following the instructions specified in the “CONFIGURATION” section below.

Cookies that are strictly necessary to provide a service on the Website which you specifically request do not require your consent.

However, cookies that are not strictly necessary to navigate the Website require your consent. As long as you have not given your consent, these cookies cannot be placed on or read from your device. A banner is displayed to inform you of these cookies.

You can withdraw your consent regarding certain cookies being set on or read from your device at any time.

The validity period of this consent is thirteen (13) months. Once this period has expired, your consent will be requested again.

Cookies remain stored on your device for a period not exceeding thirteen (13) months. At the end of this period, the cookies will be permanently deleted from said device. Subsequent visits to the Website before the end of the thirteen (13) month period will not extend the period.

You can object to the cookies using an objection procedure by sending your request to the following address: rgpd@alteor.com

If you exercise this right, no data concerning you will be collected.

Users are cautioned that refusing the installation of a cookie may prevent access to some of the Website’s services.

Further information regarding analytical cookies:

These analytical cookies are implemented by Google Analytics. They are used to find out the usage made of the Website and to assess its performance, i.e. to measure the number of visits to the Website and to establish how its various contents are utilized, as well as to produce statistics aimed at improving the Website’s features and ergonomics.

Given that partners are implementing these cookies, personal data may be transferred to countries outside the European Union, whose legislation in this respect differs from that of the European Union. The Company will implement all appropriate technical and organizational measures to ensure the security of personal data and, in particular, that such data transfers are carried out under conditions and safeguards intended to ensure confidential and secure treatment of the data.

Refusing the implementation of such cookies or deleting them will have no impact on your navigation on the Website. However, this would prevent the Company from ensuring that the Website and its services are of an optimal quality.

For further information and to find out how to deactivate analytical cookies, refer to the following link: https://support.google.com/analytics/answer/6004245?hl=en

Further information regarding social network share buttons

Computer applications from third parties, such as Facebook or Twitter, are included on the Website. These enable you to share content from this Website with other people or to let them know which pages you have visited or share your comments regarding our Website and its content. If you decline the installation of such cookies, you will need to authenticate each time you want to share with the respective networks.

However, users are cautioned that such an application button may enable the social network to follow your navigation on the Website, simply by the fact that your social network account is activated on your device while you navigate the Website, even if you have not used the share button.

We encourage you to refer to the respective privacy policies of these social networks to find out how the data is used and the navigation data they can collect. Among others, these privacy policies must enable you to define your choices regarding these social networks and, in particular, to configure the settings of your user accounts. Their links are provided below:

Further information regarding advertising cookies and navigation data

The Company is likely to process your navigation data while you navigate the Website in order to offer advertising content that best matches your interests. This advertising may be displayed on other websites that you are visiting and, more specifically, on social networks.

Offering advertising content that matches your interests may also be accomplished by combining navigation data from your device collected on the Website or other websites published by the Company or its partners, with the data you may provide when using services on the said websites.

Declining these advertising cookies has no impact on your navigation on the Website. If you decline, the advertising displayed may not match your interests.

Configuration

In order to decline the installation of cookies that are not essential for navigation on the Website, you can configure your web browser settings as follows:

  • In Firefox: “Firefox/Preferences” tab. Click “Privacy” and choose “Never” under “Accept third party cookies”. You can also choose to only keep cookies until Firefox is closed.
  • In Safari: “Safari/Preferences” tab. Click “Privacy” and choose “Block all cookies” under “Cookies and website data”. When you’re done navigating, you can also click “Delete all website data”. You can also choose to activate the “Ask websites not to track me” function.
  • In Edge: “Internet options” tab, then “Privacy”, where you can configure the internet zone and limit cookie access by choosing the “High” privacy setting, which blocks cookies that have an inadequate privacy strategy as well as cookies that register data without the user’s consent.

However, please note that registering your consent relies on cookies. Therefore, if you delete all the cookies your web browser stores on your device, the Company will be unable to know that you have chosen this option.

Caution: If you systematically decline the installation of all cookies on your device, including those strictly necessary for navigation, using the “Block all cookies” options, your navigation on the Website may be limited and you may be unable to access certain services.

For more information, refer to the following link to the French Data Protection Authority’s (CNIL) website (only available in French): https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.

II. PRIVACY POLICY

1. Controller

The personal data controller is: EXPRIMER, a French limited liability company, with a capital of €300,000, registered in the companies register (RCS) in Aix-en-Provence under the number B 800 375 966, headquartered at 180 Rue Louis Armand, 13290 Aix-en-Provence, France (hereinafter referred to as the “Company”).

When you use the Website and the various services and features it provides, the Company collects and processes your personal data in accordance with the amended French Data Protection Act no. 78-17 of 6 January 1978 and with EU Regulation 2016/679 of 27 April 2016.

The Company thus processes personal data within the meaning of the aforementioned act and regulation.

For this reason, the Company is the controller of the personal data collected from you when you submit personal information.

2. Data collected and purpose

Through the Contact Form, the Company collects data pertaining to your first and last names, e-mail address as well as the message you want to send.

This data is collected so that the Company is able to contact you in response to your message and, if you give your consent, to conduct direct marketing campaigns as stated under the conditions set out in article 4 below.

All the personal data requested from you in the Contact Form is required for the Company to be able to adequately provide its services.

3. Legal basis for processing

The data will be collected and processed in a fair and lawful manner, and it will be used to provide the services offered by the Website.

The legal basis for collecting the user’s personal data is Article 6, paragraph 1, point a) of EU Regulation 2016/679.

The data is thus collected and processed in accordance with the procedure described in the present privacy policy should you consent to it.

4. Direct marketing

You can either consent to or decline the use of your e-mail address, at the time when you submit your data, in order for the Company to send you newsletters/news items, special offers/discounts, invitations to events, opinion polls/surveys, commercial solicitations/business proposals (quotations), order tracking information, invoices, credit notes, etc. via e-mail.

You can also object to this solicitation at any time using the link provided for this purpose in any e-mail you receive.

5. Recipient of the data

The Company is the recipient of all the data collected and processed. Solely the Company’s duly authorized staff may have access to it.

The Company’s IT subcontractors may possibly have access to the data during their maintenance operations, but may not perform any data processing operation whatsoever, such as modifying or using this data.

The Company may call on subcontractors for business projects.

6. Subcontracted data processing

The Company works with the following subcontractors to perform some of its data processing:

  • OVH, which hosts the Website and all of the personal data, located at 2 rue Kellermann – 59100 Roubaix – France
  • EXPRIMER, the company that handles the maintenance of the Website, located at 180, rue Louis Armand – 13290 Aix-en-Provence – France

The Company guarantees that its subcontractors host the data within the European Union and provide reasonable assurance concerning the implementation of adequate technical and organizational measures ensuring that the processing meets the requirements of EU Regulation 2016/679 and of the French Data Protection Act.

In any event, all subcontracted work carried out on behalf of the Company is performed in strict compliance with the present document. Consequently, the Company guarantees that its subcontractors, in particular those that have a commercial role, will under no circumstance go beyond the processing procedures set out in the present document.

Subcontractors may themselves be authorized to subcontract all or part of their operations provided that they scrupulously observe the provisions of article 28 of EU Regulation 2016/679 as well as those in the present document.

Notwithstanding the aforementioned, as it is the controller, the Company remains your sole point of contact.

7. Company’s commitments

The Company is committed to preserving the strict confidentiality of your personal data collected and to taking all necessary and appropriate measures to preserve the security of the personal data collected.

The Company is committed to demanding the same from the recipients of the data.

The Company is committed to granting access to the processed data only to duly authorized persons within its staff and within the staff of its subcontractors mentioned above.

The Company commits to not using the data collected for purposes other than those specified in the present document, and in particular not to assign, transfer or make available in any way personal data to third parties, subject to what is expressly provided for in the present privacy policy.

The Company is committed to ensuring that all recipients and subcontractors mentioned in this document strictly comply with its terms and conditions.

8. Right of access, right to object, right to restriction, right to erasure and right to rectification of the data

In accordance with the regulations in force, you have the right to access, rectify, limit and oppose the processing of your data and its use for direct marketing purposes. You also have the right to withdraw your consent at any time, without it affecting the lawfulness of the processing operations carried out prior to this withdrawal.

To exercise these rights, you must write to the Company’s address, specifying in the subject line of your letter or e-mail that it is a request for information or a complaint relating to your personal data, and demand proof that your request has been received.

Any such request should be addressed to the following address:

  • Via e-mail: rgpd@alteor.com
  • Via postal mail: SARL EXPRIMER, 180 Rue Louis Armand, 13290 Aix-en-Provence, France.

All requests must include a copy of your identity document in order to avoid any fraud and/or illegal access to your data.

9. Right to data portability

You have a right to the portability of your data, which must be returned to you by the Company in a structured, commonly used and machine-readable format, if you so request.

Any such request should be addressed to the following address and must include a copy of your identity document:

  • Via e-mail: rgpd@alteor.com
  • Via postal mail: SARL EXPRIMER, 180 Rue Louis Armand, 13290 Aix-en-Provence, France.

10. Right to formulate advance directives

In accordance with the regulations in force, you may formulate advance directives regarding the use of your data after your death.

You can address these directives together with a copy of your identity document to the following address:

  • Via e-mail: rgpd@alteor.com
  • Via postal mail: SARL EXPRIMER, 180 Rue Louis Armand, 13290 Aix-en-Provence, France.

11. Right to lodge a complaint with the French Data Protection Authority (CNIL)

You have the right to appeal to the French Data Protection Authority (CNIL) in the event that the Company’s management of your personal data does not comply with legal and regulatory provisions.

To do so, you can contact the French Data Protection Authority (CNIL) by following this link (only available in French): https://www.cnil.fr/fr/plaintes

12. Data retention period and archiving

The data collected through the Contact Form is kept for the time necessary for the Company to respond to you, and possibly for any subsequent exchanges that may take place between you and the Company. The Company will then archive this data for a period not exceeding three (3) years from the date of collection or from the date on which you sent your last message to the Company.

In the event that you have agreed to being contacted for direct marketing purposes, your personal data will be kept for a period of three (3) years from the time it is collected or from the date on which you last made contact with the Company. (For example, requesting documentation or clicking on a hypertext link contained in an e-mail would constitute a contact made by you. However, opening an e-mail would not.) At the end of this three (3) year period, and in the event that you have agreed to being contacted for direct marketing purposes, the Company may contact you to find out if you wish to continue to receive commercial solicitations. In the absence of an explicit and affirmative reply from you, the data will be deleted.

We also remind you that the storage period for cookies is thirteen (13) months, subsequent visits to the Website before the end of this thirteen (13) month period will not extend this duration.

Moreover, the Company may keep anonymous or anonymized data in an irreversible process for an unlimited period of time for statistical processing purposes. Due to the anonymous nature of this data, it is not considered as personal data within the meaning of EU Regulation 2016/679.

Should you exercise your right of access or right to rectification, data relating to identity documents will be kept for the period provided for in Article 9 of the French Code of Criminal Procedure, i.e. one (1) year.

Should you exercise your right to object, data relating to identity documents may be archived for the period of limitation provided for in Article 8 of the French Code of Criminal Procedure, i.e. three (3) years.

Should you exercise your right to object to receiving commercial solicitations, the data required to take into account your request to exercise this right, such as your e-mail address, is kept for three (3) years from the date on which you notified the Company of your request to exercise this right and may not be used for any other purpose.