PRIVACY POLICY

The purpose of this Privacy Policy is to inform and present to customers and users of the OCIGO Product range the manner in which OLYTHE processes personal data collected in the context of the conclusion of the contract with the customer in its capacity as data controller.   Personal data concerning the customer collected during the conclusion of the contract OLYTHE collects and processes the customer’s personal data for the purpose of concluding the contract as follows:
Purpose of processing Ordering Commercial prospecting
Personal data collected Professional client: company name, and concerning the Client’s legal representative and/or the privileged contact designated by the Client: title, first name and last name; postal address, email address; landline and/or mobile phone number. Consumer client: First name and last name; postal address; email address; phone number. Same
Purposes of processing Pre-contractual exchanges, contract conclusion, order processing, billing and payment management, communication with the client for contract execution, after-sales service, management of any disputes. Sending newsletters and promotional offers, contacting the client after the order, conducting statistical studies
Legal basis Contractual performance Legal obligations (accounting) OLYTHE’s legitimate interests in the context of its commercial and prospecting activities
Retention and archiving period Retention: as long as the customer account is active Archiving: 5 years from the date of deletion of the customer account for the purpose of establishing, exercising, or defending a legal right (prescription period). This period is extended to 10 years for contracts concluded with consumers exceeding 120 euros, in accordance with OLYTHE’s legal obligations. Invoices: 10 years from the order date (legal obligation) Retention: 3 years from the date of the last order or last contact from the client

The mandatory or optional nature of data entry is specified during collection, by the mention “required” or by an asterisk placed next to the data to be filled in mandatory. The mandatory communication of certain personal data is necessary for OLYTHE to implement the purposes specified above. Optional data allows OLYTHE to better understand the Client.

 

Recipients of personal data

Personal data is transmitted to OLYTHE staff responsible for order and contract management.

Personal data may also be communicated by OLYTHE to its suppliers (including, for hosting, messaging service, conducting surveys, sending newsletters, online payment, carriers), including certain providers transferring data outside the European Union (applicable guarantees available on request).

If required by law, OLYTHE may transmit data to respond to claims against it and comply with administrative and judicial procedures.

Unless legally or judicially obliged to do so, OLYTHE will never disclose, assign, rent, or transmit the collected personal data to third parties outside the cases provided above.

Data related to online payments are processed by the payment institutions responsible for managing said payment.

 

Client’s rights regarding their personal data

The client has the following rights at any time regarding their personal data:

  • Right of access: obtain confirmation of the processing of their personal data as well as a number of information about the processing, provided that this information is in any case given in this personal data protection policy;
  • Right to rectification: obtain the rectification of their personal data when they are inaccurate or incomplete;
  • Right to erasure (“right to be forgotten”): obtain the erasure of their personal data when they are no longer necessary for the purposes for which they were collected or when the client or collaborator opposes the processing of their personal data.

The right to erasure is not enforceable in the cases provided for in Article 17.3 of the GDPR. In particular, the client or collaborator acknowledges and accepts that this right is not available to them as long as they wish to use the platform and benefit from the subscribed services, as this personal data is necessary for OLYTHE to manage the contract.

  • Right to restriction of processing: obtain restriction of the processing of their personal data, in particular when the client or collaborator disputes the accuracy of the data, when the data retention period has expired but the client or collaborator still needs to retain this personal data for establishing, exercising, or defending a legal right;
  • Right to data portability: obtain communication of the personal data that the client or collaborator has communicated to OLYTHE in a readable format, or request OLYTHE to transmit the personal data that the client or collaborator has communicated to another data controller;
  • Right to object: object at any time, for reasons related to their particular situation, to the processing of their personal data based on OLYTHE’s legitimate interest, especially in cases where this opposition concerns commercial prospecting, except for OLYTHE’s compelling legitimate grounds.
  • Right to lodge a complaint: lodge a complaint with the National Commission for Information Technology and Civil Liberties if the client or collaborator considers that the processing carried out by OLYTHE constitutes a violation of their personal data.
  • Right to define directives regarding the fate of their personal data after their death.

 

The client’s rights regarding their personal data can be exercised at any time with OLYTHE:

  • By email at the following address: contact@olythe.com.
  • By phone at the following number: +33 (0)4 42 52 62 39
  • By postal mail at the following address: Olythe SAS, 240 rue Louis de Broglie, 13100 Aix-en-Provence, France
  • Using the contact form on the website
Scroll to Top