1. INTRODUCTION

As part of its commercial activity as a software publisher, and its derived commercial activities, the Kondree Company, publisher of the oxcare.fr website (hereinafter referred to as the "Company") is required to process information about you. For example, when you fill in a registration form, contact our Customer Service department or register for an event we organize, you send us information, some of which may identify you ("Personal Data").

This Privacy Policy tells you how we collect and process your personal data. Please read it carefully.

Important

We only use your personal data in the cases provided for by the regulations in force:

• The performance of a contract we have entered into with you, and/or
• Compliance with a legal obligation, and/or
• Your consent to the use of your data, and/or
• The existence of a legitimate interest in using your data. A legitimate interest is a set of commercial or business reasons that justifies the use of your data by the publisher of the oxcare.fr website.

For the company that publishes the oxcare.fr website, this legitimate interest is mainly to know how many times you use the software each month, so that we can get to know you better and offer you services that are always better adapted, always with the aim of adapting our services to our users' expectations.

In any event, your individual rights will always take precedence over our legitimate interests, and we will never use your data for commercial purposes against your wishes.

2. WHO IS RESPONSIBLE FOR THE PROCESSING OPERATIONS MENTIONED IN THIS DOCUMENT?

The company responsible for the processing mentioned in this document is the publisher of the oxcare.fr website, SAS Kondree, with capital of €42,000, whose registered office is located at 10 place Françoise HERITIER - 34000 Montpellier, registered in the Montpellier Trade and Companies Register under number 900 574 732.

Kondree's data protection officer is Mr Thomas Person.

3. WHAT DATA DO WE COLLECT ABOUT YOU AND UNDER WHAT CIRCUMSTANCES DO WE COLLECT IT?

3.1. Data you send us directly

During the various contacts we have with you, you may be asked to provide us with information about yourself. This information is collected in particular when you create an account.

This data includes :

• Full name ;
• Postal address, e-mail address, business telephone number ;
• Encrypted password used to identify you on our sites or applications;

3.2. Data we collect in the course of our business relationship

The data we collect in the course of our business relationship with you includes the following:

• Information relating to the history of your use of the oxcare.fr website: registration, frequency of use of the software ;
• Requests you have made to our customer service department or incidents you have reported to us;
• Requests to exercise rights.

3.3. Data we collect automatically

Each time you visit our sites and mobile applications, we collect information relating to your connection and browsing. Various technologies may be used to collect this data. We refer to them generically as "cookies".

- Data collected via cookies

The one and only cookie placed by the publisher of the oxcare.fr site is a mandatory cookie, as it is necessary for the operation of the site. It is essential for browsing on oxcare.fr, as it contains your session identifier, which makes it possible to secure your connection. Without this cookie, you would not be able to use the site normally, and we therefore advise you against preventing its use or deleting it.

We do not collect any data via this cookie.

- Data collected by standard Internet technologies

We may also use standard Internet technologies such as scripts, pixels and redirects. Scripts (sometimes called tags), written in javascript language, are programs that run in your browser or mobile application and perform various actions, such as sending information to our servers. Scripts are also capable of creating pixels. Pixels (sometimes called transparent GIFs, clear GIFs or web-bugs) are lines of code that display a graphic image (usually invisible) on a web page or in an e-mail. Redirects make a web page available under several page addresses (URLs). When a browser opens a redirect URL, a page with a different URL is opened.

The purpose of these technologies is to improve your experience on the oxcare.fr site.

These technologies give us access to the following information in particular:

• Information about your use of our sites and applications;
• Information on whether or not you read the e-mails we send you, and on the clicks you make on the links contained in these e-mails.

3.5 Data relating to minors

Our products and services are intended for adults only.

3.7. Exclusion of sensitive data

The Oxcare Site does not collect any sensitive data about you. The following are considered sensitive data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data relating to health or sexual orientation. If such information is communicated to the Company in any way, it will be deleted.

4. WHAT DO WE USE YOUR DATA FOR?

This article tells you the main purposes for which we use the data mentioned in article 3.

4.1 Operations required to supply products or services

• Acceptance of your registration and execution of this contract ;
• Customer relations: a customer service department is available by e-mail for any questions or complaints;
• Satisfaction surveys;
• Sending information about changes or developments in our services;
• Management of the exercise of your rights to your personal data, under the conditions set out in article 9;
• Verification of compliance with applicable legislation, our contracts and general conditions of use.

4.2 Purpose of cookies on your browser

The one and only cookie placed by the publisher of the oxcare.fr site is a mandatory cookie, as it is necessary for the operation of the site. It is essential for browsing on oxcare.fr as it contains your session identifier, which enables you to log in securely. Its purpose is to provide authenticated and secure access to oxcare.fr.

5. HOW LONG DO WE KEEP YOUR DATA?

Your Personal Data is kept for a period that complies with legal provisions or is proportionate to the purposes for which it was recorded. Certain retention periods are in line with the Company's legitimate interests as specified in the introduction.

Retention periods vary depending on whether we have an ongoing contractual relationship with you (you are an active user), whether we have had a contractual relationship with you in the past (you are an inactive user) or whether we have never had such a relationship with you (you are a prospect).

The table below lists the main retention periods for your data.

In any case, we regularly review the information we hold. When its retention is no longer justified by legal or commercial requirements or in connection with the management of your customer account, or if you have exercised a right of modification or deletion, we will delete it securely.

6. WHO MAY HAVE ACCESS TO THE DATA WE COLLECT?

6.1. Data access within the Company

The following may have access to some of your data:

• Employees in the Registration, Customer Relations, Administration, Accounting
  and Controlling, IT and Marketing & Salesdepartments.

Access to your data is based on individual and limited access authorizations. Personnel with access to personal data are subject to a confidentiality obligation (through a nominal and personal confidentiality undertaking).

6.2. Data transmission

The following may have access to some of your data:

- Subcontractors

They provide services on our behalf, in particular:

• Manage your account
• Handling telephone calls, sending postal or digital mail
• Maintenance operations and technical developments

Our subcontractors have access to your data on the basis of signed contracts specifying their obligations to protect data security and confidentiality.

- Police, judicial or administrative authorities

When we are legally obliged to do so or in order to guarantee the rights, property and safety of the Company.

7. IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

We store your personal data in the European Union. 
 

8. HOW IS YOUR DATA PROTECTED?

As data controller, we implement appropriate technical and organizational measures in accordance with applicable legal provisions, to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorized access, and in particular:

• Appointment of an internal personal data manager ;
• Raising awareness of confidentiality requirements among our employees who may have access toyour personal data at
  ;
• Securing access to our premises and IT platforms;
• Securing data access, sharing and transfer;

9. WHAT ARE YOUR RIGHTS?

9.1. Your rights of access to your personal data

You have the right to access your personal data and request that it be corrected, completed or updated. You may also request the deletion of your data or object to its processing, provided you can justify this on legitimate grounds.

You can ask to exercise your right to data portability, i.e. the right to receive the personal data you have provided us with in a structured, commonly used format and the right to transmit this data to another data controller.

Finally, you can formulate directives concerning the conservation, deletion and communication of your personal data after your death.

You may exercise your rights by contacting the Company's Data Protection Officer at the following address: 10 place Françoise HERITIER - 34000 Montpellier or by e-mail: rgpd@kondree.com

Before responding to your request, we may verify your identity and/or ask you to provide further information in order to respond to your request. We will endeavor to respond to your request within a reasonable time and, in any event, within the time limits set by law.

In the event of an unsatisfactory response, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL): https://www.cnil.fr/fr/plaintes

9.2. Your right to object to commercial solicitations

We may use your contact details for commercial solicitations, in accordance with applicable law and the clauses of this privacy policy. You may object to these solicitations at any time, depending on the communication channel we use to send them to you.

- Electronic commercial solicitations (e-mail and SMS) :

We respect the rules of article L.34-5 of the French Post and Electronic Communications Code, which requires your prior and express consent for the sending of commercial prospecting by electronic means (e-mail, push notifications or SMS).

Thus, on the forms you fill out when you subscribe to one of our products or services, when you create an account on our sites or applications, or on the occasion of any other contact with us, you are expressly asked for your consent:

• to receive offers from Oxcare.

Exception: your express prior consent is not required if you are already a customer of the Oxcare site and the purpose of our solicitation is to offer you products or services similar to those we already provide.

In any case, you always have the option of objecting to the receipt of such solicitations by taking the following actions:

• For e-mail, click on the unsubscribe link provided in each e-mail, go to your online account or contact our customer service department.
• For sms, by sending a STOP SMS to the number indicated in the sms or by contacting our customer service department.

- Commercial telephone solicitations

We may contact you by telephone to offer you products or services. If you do not wish to be contacted, you can register on the anti-solicitation list available at www.bloctel.gouv.fr.

- Solicitations by any other means

We invite you to contact our customer service department to inform them that you do not wish to be the subject of such solicitations.

©Kondree 2024