Personal data

This privacy policy applies to any processing of personal data concerning you carried out by OTEXIO, a simplified joint-stock company with a capital of 100,800 euros, registered with the Lyon Trade and Companies Register under number 957 519 820, whose registered office is located at 8, avenue Karl Marx in VAULX-EN-VELIN (69120) (hereinafter referred to as "OTEXIO").

This privacy policy applies to all collections and processing of personal data concerning you, whether you are an OTEXIO customer or a prospect.

• Preliminary information

The collection and processing of your personal data by OTEXIO are subject to Law No. 78-17 of January 6, 1978 relating to Information Technology, Files and Freedoms and European Regulation No. 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR").

OTEXIO is the data controller within the meaning of the GDPR (Article 4 §7 GDPR).

The data protection officer, appointed by OTEXIO as part of its GDPR compliance, can be contacted at the following address for any questions regarding the processing of your personal data and the exercise of your rights with regard to your data:

• Through the contact form
  
  
• By postal mail addressed to his attention: JEAN MESNARD

  Data Protection Officer
  8, avenue Karl Marx
  69120 VAULX-EN-VELIN

• Collection of your personal data

A "personal data" is defined as "any information relating to an

Is a « personal data », « any information relating to an identified or identifiable natural person ». « Is considered to be an « identifiable natural person » a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more specific elements specific to his physical, physiological, genetic, mental, economic, cultural or social identity ».

Regardless of your status or quality, personal data concerning you is required by OTEXIO for current and/or commercial purposes, through online forms to be filled out via its website www.otexio.com.

The data described below may be collected in parallel with the identification data of your company, which are not personal data as long as they only allow the identification of a legal person.

If you do not provide the required data about yourself, OTEXIO will not be able to respond to your request, validate and execute your order, provide you with the requested products and services, or fulfil the contract established between you.

No "sensitive" personal information or data is required by OTEXIO in the context of your contractual or commercial relationship.

Any additional information that is not directly necessary for the execution of your contractual or commercial relationship with OTEXIO can only be collected by OTEXIO if you have expressly consented to the collection and processing of this information or if OTEXIO has a legitimate interest in this collection. The reasons for any additional collection of data concerning you must be notified to you in advance.

• Use of your data by OTEXIO and legal bases for processing

Any other purpose of processing will be systematically communicated to you by OTEXIO in advance.

• Sharing of your data with third parties

Individuals performing tasks or functions within OTEXIO are expressly authorized to access your data, but only within the scope of their duties and responsibilities.

In the context of the use and processing of your data, OTEXIO may transmit your data to the following entities and/or subcontractors:

• Technical service providers and/or subcontractors of OTEXIO, who need to access certain of your data in order to perform the contract between you and OTEXIO;
• Legal advisors.

Each of these entities receiving your data ensures strict confidentiality of the information communicated to them and undertakes to process it only for the purposes of their intervention.

Your data may be shared with the aforementioned recipients particularly in the following situations and conditions:

• When you post a comment in the comment areas on the website operated by OTEXIO;

• When OTEXIO uses the services of providers to provide assistance to users of the website, payment services, or advertising. These providers have limited access to your data within the scope of their services and have a contractual obligation to use them in compliance with the applicable data protection regulations;.

• To enable OTEXIO to comply with its legal and regulatory obligations;

• If required by law, OTEXIO may disclose your data to respond to claims made against it and to comply with administrative and judicial procedures;.

• If OTEXIO is involved in a merger, acquisition, asset transfer, or judicial reorganization procedure, it may transfer or share all or part of its assets, including personal data. In such a case, you will be informed prior to any transfer of your data to a third party.

• Transfer of your data outside the European Union

OTEXIO does not transfer your personal data to any company, entity, or structure located in a country outside the European Union or to any international organization. If such an operation were to be carried out, OTEXIO will inform you of any such transfer and provide details of the measures taken to oversee this transfer and ensure the confidentiality of your data.

In accordance with the Loi Informatique et Libertés (French Data Protection Act) and the GDPR, you have the following rights:

• Right of access to your data (Article 15 GDPR)

• Right of rectification (Article 16 GDPR), update, completion of your data

• Right to blocking or erasure of your personal data (Article 17 GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or their collection, use, communication, or storage is prohibited

• Right to withdraw your consent at any time (Article 13-2c GDPR), without affecting the lawfulness of the processing based on your consent before its withdrawal;

• Right to limit the processing of your data under specifically stated conditions (Article 18 GDPR)

• Right to object to the processing of your data (Article 21 GDPR)

• Right to data portability for the data you provided to OTEXIO, when your data is automatically processed based on your consent or a contract (Article 20 GDPR) 

• Right not to be subject to a decision based solely on automated processing of your data that produces legal effects concerning you or significantly affects you (Article 22 GDPR)

• Right to determine the fate of your data after your death and to choose whether OTEXIO communicates (or not) your data to a pre-designated third party. In the event of your death, and in the absence of instructions from you, OTEXIO undertakes to destroy your data unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.

• Right to know the location of the recipient of your data when they have been transferred outside the European Union and to obtain a copy of the standard contractual clause governing such transfer.

• Right to lodge a complaint with a supervisory authority, including the National Commission for Data Protection and Liberties (CNIL).

You can exercise the above-mentioned rights under the applicable legal conditions by sending a message to OTEXIO via the contact form or by sending a postal mail (8, avenue Karl Marx – 69120 VAULX-EN-VELIN), along with a copy of your identity document.

OTEXIO undertakes to inform you of the measures taken following your request within a maximum period of one (1) month from the receipt of this request, which may be extended by two (2) months if the request is complex or in case of a high number of requests.

• Security and Confidentiality Measures Implemented

OTEXIO implements organizational, technical, software, and physical measures regarding digital security and confidentiality to ensure the protection of your personal data it collects against any alteration, destruction, or unauthorized access to your data.

OTEXIO takes all necessary precautions in relation to the nature of your personal data and the risks presented by the processing it carries out in the context of its activities to preserve the security of your data and prevent their distortion, damage, or access by unauthorized third parties.

In any case, any violation of your personal data that may result in a high risk to your rights and freedoms will be notified to you as soon as possible, in accordance with applicable legal and regulatory requirements.

• Evolution and Modification of the Privacy Policy

OTEXIO reserves the right to make any modification, correction, and/or adaptation to this privacy policy at any time, particularly to comply with applicable legal and regulatory requirements regarding the protection of personal data and to ensure full transparency in its use of your personal data.

OTEXIO undertakes, in any case, to communicate to you any new version of this privacy policy as soon as possible, so that you can be aware of any modification, correction, and/or adaptation made.