Privacy policy

PRIVACY CHARTER

 This privacy policy is intended to help you understand how your personal data is collected, processed and stored by OOBO via the Site.

OOBO understands that the protection of data and privacy is an issue for all users visiting the Site.

OOBO undertakes, in accordance with GDPR regulations, to respect your privacy and protect your personal data, i.e. likely to identify you directly or indirectly as a person.

The objective of this confidentiality policy is to present to you the commitments of OOBO in this area

DEFINITION

The purpose of this charter (hereinafter the “Charter”) is to inform you about the means we use to collect your personal data, with the strictest respect for your rights.

We inform you in this regard that we comply, in the collection and management of your personal data, with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms, in its current version (hereinafter: the “Informatics and Freedoms Law”), as well as Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter: the "GDPR").

The person responsible for collecting your personal data is the company OOBO, a public limited company with share capital of 249,332 euros, registered with the PARIS RCS under number 642 041 198, whose head office is located at 1 rue de Stockholm, 75008 PARIS (hereinafter referred to as: “We”, “OOBO”). 

The legal basis for our collection of your personal data is as follows:

- this collection is necessary in order to perform the contract concluded when you use our services on our Site;

- legitimate interest when you voluntarily provide us with personal data during your visit to our Site, the data being then collected to enable us to better respond to your requests for information about our services.

Your personal data is collected to meet one or more of the following purposes:

- Manage your access to certain services accessible on the Site and their use,

- Carry out operations relating to the management of Customers concerning contracts, invoices, monitoring of the relationship with Customers,

- Create a file of users, customers and prospects,

- Send newsletters, solicitations and promotional messages. If you do not wish this, we give you the option of expressing your refusal on this subject when collecting your data,

- Develop commercial and traffic statistics for our services,

- Organize competitions, lotteries and all promotional operations, excluding online gambling and games of chance subject to approval by the Online Gaming Regulatory Authority

- Manage the management of people's opinions on products, services or content,

- Manage unpaid debts and possible disputes regarding the use of our products and services,

- Personalize responses to your requests for information,

- Comply with our legal and regulatory obligations. We inform you, when collecting your personal data, if certain data must be provided or if they are optional (by asterisks visible on the Site).

Why do we collect your personal data?	What categories of personal data do we collect for this purpose?	What is the legal basis authorizing us to collect your personal data for such a purpose?
We collect your personal data in order to identify you when using our site and in order to send you messages related to the proper administration of our site (e.g. confirmation of registration, modification of the site or conditions of use, etc.).	Identification data Data of connection	This processing has the legal basis of the execution of the contract binding us upon your acceptance of our general conditions at the time of creating your account.
We collect your personal data in order to deliver your order/service to you.	Identification data	This processing has the legal basis of the execution of the contract binding us upon your acceptance of our general conditions at the time of creating your account.
We collect your personal data in order to improve and optimize our site, for example by studying your behavior during your visit and drawing conclusions in order to make changes in terms of ergonomics and user experience.	Usage dataand consumption Data of connection	The legal basis for this processing is our legitimate interest in providing and improving the user experience of our visitors and members of our site.
We collect your personal data in order to understand your preferences and offer you commercial offers corresponding to services/products similar to those already ordered.	Usage dataand consumption Identification data	The legal basis for this processing is our legitimate interest in providing and improving the user experience of our visitors and members of our site.

We inform you, when collecting your personal data, whether certain data must be provided or whether it is optional.

RECIPIENT OF PERSONAL DATA

Will have access to your personal data:

- The staff of our company;

- The services responsible for control (lawyer, accountant in particular);

- Our subcontractors (communications providers, productivity software providers, data hosting providers, payment service providers, billing providers, audience analysis and measurement providers, customer relationship management providers);

- Public bodies may also be recipients of your personal data, exclusively to meet our legal obligations, court officers, ministerial officers and bodies responsible for debt recovery.

PERSONAL DATA RETENTION DURATION

Concerning data relating to the management of customers and prospects:

Your personal data will not be kept beyond the period strictly necessary for the management of our commercial relationship with you.

However, data enabling the establishment of proof of a right or a contract, which must be kept for compliance with a legal obligation, will be kept for the period provided for by the law in force.

Concerning possible prospecting operations aimed at customers, their data may be kept for a period of three (3) years from the end of the commercial relationship.

Personal data relating to a prospect, not a customer, may be kept for a period of three (3) years from their collection or the last contact from the prospect.

At the end of this three (3) year period, we may contact you again to find out if you wish to continue to receive commercial solicitations.

In the event of exercising the right of access or rectification, data relating to identity documents may be kept for the period provided for in Article 9 of the Code of Criminal Procedure, i.e. one (1) year. In the event of exercising the right of opposition, this data may be archived during the limitation period provided for by Article 8 of the Code of Criminal Procedure, i.e. three (3) years.

Financial transactions relating to the payment of purchases and fees via the Site are entrusted to a payment service provider who ensures their smooth running and security.

For the purposes of the services, this payment service provider may be the recipient of your personal data relating to your bank card numbers, which it collects and stores in our name and on our behalf. We do not have access to this data.

To enable you to regularly make purchases or pay related fees on the Site, your data relating to your bank cards are kept during the time you register on the Site and at the very least, until you make your last transaction.

Data relating to the visual cryptogram or CVV2, written on your bank card, is not stored.

If you refuse to have your personal data relating to your bank card numbers kept under the conditions specified above, we will not keep this data beyond the time necessary to allow the transaction to be completed.

In any case, the data relating thereto may be kept, for the purpose of proof in the event of a possible challenge to the transaction, in intermediate archives, for the period provided for by article L 133-24 of the Monetary and Financial Code, in this case thirteen (13) months following the debit date. This period may be extended to fifteen (15) months in order to take into account the possibility of using deferred debit payment cards.

Concerning the management of opposition lists to be received from prospecting:

The information allowing your right of opposition to be taken into account is kept for a minimum of three (3) years from the exercise of the right of opposition.

Regarding audience measurement statistics:

The information stored in the users' terminal or any other element used to identify users and allowing their traceability or attendance will not be kept beyond thirteen (13) months.

SECURITY

We inform you to take all useful precautions, appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data and in particular, to prevent them from being distorted, damaged or from unauthorized third parties having access to them. We also use secure payment systems that comply with the state of the art and applicable regulations.

ACCOMMODATION

We inform you that your data is kept and stored for the entire duration of their retention on the servers of the company GODADDY, whose head office is located at. Shipping Building, Old Vinyl Factory (5th floor), 252-254 Blyth Road, Hayes - UB3 1HA United Kingdom, located in a country outside the European Union but ensuring a substantially equivalent level of protection, in accordance with the adequacy decisions of the European Commission adopted on 28 June 2021

TRANSFER OUTSIDE THE EUROPEAN UNION

Your data may be transferred outside the European Union as part of the tools we use and our relationships with our subcontractors.

This transfer is secured using the following tools:

- Either these data are transferred to a country that has been judged to offer an adequate level of protection by a decision of the European Commission;

- Either we have concluded with our subcontractors a specific contract governing the transfers of your data outside the European Union, on the basis of standard contractual clauses between a data controller and a subcontractor approved by the European Commission.

ACCESS, RECTIFICATION, LIMITATION AND DELETION OF YOUR PERSONAL DATA

In accordance with European regulations regarding the protection of personal data, you benefit from the following rights:

- A right of access allowing you at any time to know whether your personal data is or is not processed by our services and when they are, to have access to said personal data and to the information required by law concerning the methods of processing this data,

- A right of rectification allowing you to request that any inaccuracies concerning your personal data be corrected as soon as possible,

- A right to erasure, allowing you to request that your personal data be erased as soon as possible, provided that this erasure request complies with the conditions required by applicable law,

- A right to limit the processing of your personal data, provided that this request for limitation complies with the conditions required by applicable law,

- A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this portability request complies with the conditions required by applicable law,

- A right to object to the processing of your personal data for reasons relating to your particular situation provided that this opposition complies with the conditions required by applicable law,

- The right to withdraw at any time the specific consent given to the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes,

- The right to define guidelines relating to the retention, erasure and communication of your personal data following your death.

You have the right to obtain the limitation of the processing of your personal data, in the cases defined in article 18 of the GDPR:

- During the verification period that we carry out, when you contest the accuracy of your personal data,

- When the processing of this data is unlawful, and you wish to limit this processing rather than delete your data,

- When we no longer need your personal data, but you wish to keep them to exercise your rights,

- During the period of verification of legitimate grounds, when you have objected to the processing of your personal data.

Persons whose data is collected on the basis of our legitimate interest are reminded that they may at any time object to the processing of data concerning them. However, we may continue the processing if there are legitimate grounds for the processing which override your rights and freedoms or if the processing is necessary to establish, exercise or defend our legal rights.

You can unsubscribe from our promotional emails via the link provided in the emails. Even if you choose to no longer receive promotional messages from us, you will continue to receive our administrative messages.

PORTABILITY OF YOUR PERSONAL DATA

You have a right to portability of the personal data that you have provided to us, understood as the data that you have declared actively and consciously in the context of access and use of the services, as well as the data generated by your activity in the context of the use of the services.

We remind you that this right does not apply to data collected and processed on a legal basis other than consent or the execution of the contract between us.

This right can be exercised free of charge, at any time, and in particular when closing your account on the Site, in order to recover and store your personal data.

In this context, we will send you your personal data, by any means deemed useful, in a standard open format commonly used and readable by computer, in accordance with the state of the art.

INTRODUCING A COMPLAINT BEFORE A SUPERVISORY AUTHORITY

You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the Commission Nationale Informatique et Libertés for France), in the Member State in which your habitual residence is located, your place of work or the place where the violation of your rights has been committed, if you consider that the processing of your personal data covered by this charter constitutes a violation of the applicable texts.

This recourse may be exercised without prejudice to any other recourse before an administrative or judicial court. In fact, you also have a right to effective administrative or judicial recourse if you consider that the processing of your personal data covered by this charter constitutes a violation of the applicable texts.

CHANGES

We reserve the right, at our sole discretion, to modify this Charter in whole or in part at any time.

These modifications will come into force from the publication of the new charter.