The purpose of this Charter is to inform users of the https://okare.art/ website (hereinafter referred to as the "Site") of the way in which data is collected and processed.
This Charter is in line with OKARE's wish to act in complete transparency, in compliance with the regulations in force in France and in the European Union, in particular concerning the General EU Personal Data Protection Regulation. 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
OKARE pays particular attention to the protection of the privacy of users of its Site and therefore undertakes to take the reasonable precautions required to protect the personal data collected against loss, theft, disclosure or use. not allowed.
If the user wishes to react to one of the practices described below, he can contact the Data Protection Officer (hereinafter the “DPO”) at the postal address or at the email address specified in point “Contact” of this Charter.
By accessing and using the Site, the user declares to have read the information described below, accepts this Charter and expressly consents to OKARE collecting and processing, in accordance with the terms and principles described in this Charter, his personal data that he communicates through the Site and / or during the services offered on the Site, for the purposes indicated below.
The user has the right to withdraw his consent at any time. The withdrawal of consent does not compromise the lawfulness of processing based on the consent previously given.
PERSONAL DATA COLLECTED
By visiting and using the website, the user expressly consents to OKARE collecting and processing, in accordance with the methods and principles described below, the following personal data:
its domain name including dynamic IP address.
their e-mail address if the user has previously disclosed it, for example by sending messages or questions on the Site, by communicating with OKARE by e-mail, by using the Chatbot, etc.
all information concerning the pages that the user has visited on the Site.
any information that the user has given voluntarily, for example in the context of requests for information (contact forms, request for an appointment for an offer, subscription to the OKARE newsletter) or information surveys.
It is possible that OKARE is also required to collect non-personal data. These data are qualified as non-personal data because they do not directly or indirectly identify a particular person. They may therefore be used for any purpose whatsoever, for example to improve the Site, the products and services offered or the advertising of the data controller.
In the event that non-personal data is combined with personal data, so that it is possible to identify the data subjects, these data will be treated as personal data until their reconciliation with a particular person is made impossible.
USE OF DATA
In addition to this, you need to know more about it.
Personal data is collected and processed only for the purposes mentioned below:
sending information about OKARE's service offerings.
answer user questions.
improve the quality of the Site and / or the services offered by OKARE.
sending of the OKARE newsletter,
entry of a comment in the "Testimonials" section of the Site.
allow a better understanding of the user's interests.
OKARE could be required to carry out processing operations which are not yet provided for in this Policy. In this case, OKARE will contact the user before reusing their personal data, in order to inform them of the changes and give them the possibility, if necessary, to refuse this reuse.
THE DURATION OF THE CONVERSATION
OKARE only keeps personal data for the time reasonably necessary for the purposes pursued and in accordance with legal and regulatory requirements.
A customer's personal data is kept for a maximum of 5 years after the end of the contractual relationship between this customer and OKARE.
Shorter retention periods apply for certain categories of data, such as traffic data which is only retained for 12 months.
At the end of the retention period, the controller does everything to ensure that the personal data has indeed been made unavailable.
ACCESS TO DATA
By means of a dated and signed written request sent to OKARE at the address referred to in the "contact" point of this Policy, the user may, after having provided proof of his identity (by attaching a copy of his identity card), obtain free of charge written communication or a copy of the personal data concerning him that has been collected.
When the user submits this request electronically, the information is provided in a commonly used electronic form, unless the user requests otherwise.
The copy of their data will be communicated to the user no later than one month after receipt of the request.
Right of rectification
By means of a dated and signed written request sent to OKARE at the address referred to in the "contact" point of this Policy, the user may, after having provided proof of his identity (by attaching a copy of his identity card), obtain free of charge , as soon as possible and at the latest within one month, the rectification of his personal data which are inaccurate, incomplete or irrelevant, as well as supplement them if they prove to be incomplete.
Right to object to processing
By means of a dated and signed written request sent to OKARE at the address referred to in the "contact" point of this Policy, the user may at any time, for reasons relating to his particular situation and after having provided proof of his identity (by attaching a copy of his identity card), object free of charge to the processing of his personal data, when:
the processing is necessary for the performance of a task of public interest or falling within the exercise of public authority vested in OKARE.
processing is necessary for the purposes of the legitimate interests pursued by OKARE or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data (in particular when the data subject is a kid).
OKARE may refuse to implement the user's right of opposition when it establishes the existence of compelling and legitimate reasons justifying the processing, which take precedence over the interests or the rights and freedoms of the user, or for the establishment, exercise or defense of legal claims. In the event of a dispute, the user may lodge an appeal in accordance with the point "complaints and complaints" of this Charter.
By means of a dated and signed written request sent to OKARE at the address referred to in the “contact” point of this Policy, the user may, at any time and after having provided proof of his identity (by attaching a copy of his identity card ), to oppose, without justification and free of charge, the processing of personal data concerning him when his data is collected for direct marketing purposes.
When personal data is processed for scientific or historical research purposes or for statistical purposes in accordance with the general data protection regulation, the user has the right to object, for reasons relating to his particular situation , to the processing of personal data concerning him, unless the processing is necessary for the performance of a task of public interest.
OKARE is obliged to respond to the user's request as soon as possible and at the latest within one month and to justify its response when it intends not to act on such a request.
Right to restriction of processing
By means of a dated and signed written request sent to OKARE at the address referred to in the "contact" point of this Policy, the user can, after having proved his identity (by attaching a copy of his identity card), obtain the limitation of the processing of their personal data in the cases listed below:
when the user disputes the accuracy of a data and only as long as OKARE can check it.
when the processing is unlawful and the user prefers limitation of processing to erasure.
when, although no longer necessary for the pursuit of the purposes of the processing, the user needs them for the establishment, exercise or defense of their legal rights.
for the time necessary to examine the merits of a request for opposition submitted by the user, in other words the time that OKARE checks the balance of interests between the legitimate interests of OKARE and those of the user.
OKARE will inform the user when the restriction of processing is lifted.
Right to erasure (right to be forgotten)
By means of a dated and signed written request sent to OKARE at the address referred to in the "contact" point of this Policy, the user may, after having proven his identity (by attaching a copy of his identity card), obtain the '' erasure of personal data concerning him, when one of the following grounds applies:
the data are no longer necessary for the purposes of the processing.
the user has withdrawn their consent to their data being processed and there is no other legal basis for the processing.
the user objects to the processing and there are no compelling legitimate grounds for the processing and / or the user exercises their specific right of opposition in direct marketing.
the personal data have been the subject of unlawful processing.
personal data erased to comply must be a legal obligation (under Union law or Member State law) to which OKARE is subject.
However, the erasure of data is not applicable in the following 5 cases:
when the processing is necessary for the exercise of the right to freedom of expression and information.
when the processing is necessary to comply with a legal obligation which requires the processing provided for by Union law or by the law of the Member State to which OKARE is subject, or to perform a task of public interest or falling under the exercise of public authority vested in OKARE.
when the processing is necessary for reasons of public interest in the field of public health.
when the processing is necessary for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes and insofar as the right to erasure is likely to make impossible or seriously jeopardize the realization of the purposes of the processing in question.
when the processing is necessary for the establishment, exercise or defense of legal claims.
OKARE is obliged to respond to the user's request as soon as possible and at the latest within one month and to justify its response when it intends not to act on such a request.
The user also has the right, under the same terms, to obtain free of charge the deletion or prohibition of the use of any personal data concerning him which, taking into account the purpose of the processing, would be incomplete or irrelevant or whose recording, communication or conservation would be prohibited or which has been kept beyond the necessary and authorized period.
Right to "data portability"
By written, dated and signed request sent to OKARE at the address referred to in the “contact” point of this Policy and after having provided proof of his identity (by attaching a copy of his identity card), the user can at any time at the moment, request to receive their personal data free of charge in a structured, commonly used and machine-readable format, with a view in particular to transmitting them to another controller, when:
data processing is carried out using automated processes.
the processing is based on the user's consent or on a contract concluded between the user and the controller.
Under the same conditions and according to the same modalities, the user has the right to obtain from OKARE that the personal data concerning him be transmitted directly to another person in charge of the processing of personal data, insofar as this is technically possible.
The right to data portability does not apply to processing which is necessary for the performance of a task of public interest or falling within the exercise of public authority vested in OKARE.
RECIPIENTS OF DATA AND DISCLOSURE TO THIRD PARTIES
The recipients of the data collected and processed are, in addition to OKARE, its employees or other subcontractors, located in the European Union, and collaborate with OKARE in the context of the marketing of products or the provision of services.
In the event that the data is disclosed to third parties for direct marketing or prospecting purposes, the user will be informed in advance so that they can choose whether or not to accept this processing of their data by third parties.
By means of a dated and signed written request sent to OKARE at the address referred to in the “contact” point of this Policy, the user may, at any time and after having provided proof of his identity (by attaching a copy of his identity card ), oppose free of charge the transmission of their data to third parties.
OKARE complies with the legal and regulatory provisions in force and will in all cases ensure that its partners, employees, subcontractors or other third parties having access to this personal data comply with this Charter.
OKARE reserves the right to disclose the user's personal data in the event that a law, legal process or order of a public authority makes such disclosure necessary.
No transfer of personal data outside the European Union takes place.
USE AND MANAGEMENT OF COOKIES
This cookie management policy applies to the Site. These are managed by the DPO.
Most web browsers are configured to automatically accept cookies. If the user wishes to personalize their management, they must modify their browser settings. He will find further information on this subject under "cookie management" of this provision.
By visiting and using the Site, the user expressly agrees with the management of cookies described below.
Definition of cookies
A “cookie” is a data or text file that the server of a website stores temporarily or permanently on the user's equipment (hard drive of the computer, tablet, smartphone, or any other device. similar) through its browser. Cookies can also be installed by third parties with whom the data controller works.
Cookies retain a certain amount of information, such as visitors' language preferences or the content of their shopping cart. Other cookies collect statistics about the users of a website or ensure that graphics appear correctly and that applications work well on the website. Still others allow the content and / or advertising of a website to be tailored to the user.
Essential or technical cookies: these are cookies that are essential for the operation of the Site, allowing good communication and intended to facilitate navigation;
Statistical or analytical cookies: these cookies make it possible to recognize and count the number of visitors and to see their browsing behavior when they visit the Site. This improves the user's navigation and makes it easier for them to find what they are looking for.
Functional cookies: these cookies make it possible to activate specific features on the Site in order to improve the user-friendliness and experience of the user, in particular by remembering their choice of preferences (for example the language);
Performance cookies: these cookies collect information about how visitors use the Site. They make it possible to evaluate and improve the content and performance of the Site (for example by counting the number of visitors, by identifying the most popular pages or clicks), and to better match the commercial proposals to the personal preferences of the user.
Tracking cookies: the Site uses tracking cookies via Google Analytics, in order to help the DPO to measure the ways in which users interact with the content of the Site and to generate visit statistics in a strictly anonymous manner. These statistics are used to continuously improve the Site and provide the user with relevant content. The DPO uses Google Analytics to gain insight into the traffic on the Site, the origin of this traffic and the pages visited. This means that Google is acting as a processor. The information collected by Google Analytics is generated as anonymously as possible. For example, it is not possible to identify the people who visit the Site. For further information, the user is invited to consult Google's data protection policy, available at the following address: http://www.google.nl/intl/en_uk/policies/privacy/
The retention period for cookies varies depending on their type: essential cookies are generally kept until the browser is closed, while functional cookies remain valid for 1 year and performance cookies for 4 years.
Most browsers are set to automatically accept cookies, but all allow you to customize settings to suit user preferences.
If the user does not want the Site to place cookies on his computer / mobile device, he can easily manage or delete them by modifying his browser settings. The user can also program their browser to send them a notice when they receive a cookie and thus decide whether to accept it or not.
If the user wishes to block and / or manage certain cookies, he can do so by following the link linked to his browser:
Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
To no longer be tracked by Google Analytics on any website, the user is invited to visit the following website: http://tools.google.com/dlpage/gaoptout
In the event that the user deactivates certain cookies, it is possible that certain parts of the Site cannot be viewed and / or used, or that they are only partially so.
The DPO implements the appropriate technical and organizational measures to guarantee a level of security of the processing and the data collected with regard to the risks presented by the processing and the nature of the data to be protected adapted to the risk. It takes into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks to the rights and freedoms of users.
The DPO always uses encryption technologies that are recognized as industry standards within the IT sector when it transfers or receives data on the Site.
The DPO has put in place appropriate security measures to protect and prevent the loss, misuse or alteration of information received on the Site.
COMMUNICATION BY MAIL, TELEPHONE OR EMAIL
Communication by post
If the user communicates his postal address to OKARE via the Site, his data is recorded in the OKARE address file to respond to his request and to keep him informed of the services offered by OKARE. OKARE does not communicate user data to third parties for direct marketing purposes.
The user can at any time consult, correct or delete his data in the OKARE file. To do this, he must contact OKARE at the address referred to in the "contact" point of this Policy, remembering to specify his exact name and address (spelled correctly). OKARE agrees to delete its data from the list it shares with other companies or organizations.
If the user communicates his phone number to OKARE via the Site, he may receive a phone call or an SMS:
of OKARE in order to provide it with information on products and services
If the user does not / no longer wish to receive such telephone calls, he can contact OKARE at the address referred to in the "contact" point of this Policy, not forgetting to specify his name and his exact address (spelled correctly). OKARE undertakes to delete its data from the list.
Communication via e-mail
If the user communicates his e-mail address to OKARE via the Site, he can receive:
e-mails from OKARE in order to communicate information on products and services to it on the condition that the user has expressly consented thereto or that he is already a customer of OKARE and that he has communicated his e-mail address to OKARE .
If the user does not / no longer wish to receive such e-mails, he can contact OKARE at the address referred to in the "contact" point of this Policy, not forgetting to specify his name and his exact address ( spelled correctly).
CLAIMS AND COMPLAINT
The user can lodge a complaint with his national supervisory authority, whose contact details are listed on the official website of the European Commission: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id = 612080
For any question and / or complaint, in particular as to the clarity and accessibility of this Charter, the user can contact the Data Protection Officer by email using the contact form available on the Site.
APPLICABLE LAW AND COMPETENT JURISDICTION
This Charter is governed by the national law of the place of principal establishment of OKARE.
Any dispute relating to the interpretation or execution of this Charter will be submitted to the courts of this national law.
OKARE reserves the right to modify the provisions of this Charter at any time. The changes will be published with a warning as to their entry into force.
This version was last amended on November 1, 2021.