OUR PERSONAL DATA PROTECTION POLICY
When using our website www.orama-system.com, we collect and process your personal data (hereinafter the “Personal Data”).
ORAMA-System is committed to a continuous process of protecting personal data. We comply with all French and European regulatory and legislative provisions relating to the protection of this data. As such, we comply with the requirements of the Data Protection Act of January 6, 1978 as amended and the Regulation (EU) relating to the protection of individuals with regard to personal data and their free circulation of April 27 2016 (hereinafter the “Regulations”).
This policy describes and informs, for purposes of transparency on the processing implemented, the way in which ORAMA SYSTEM, as data controller, undertakes to collect, use and protect your personal data with all due care and exclusively for the legitimate purposes for which they were collected.
This document is subject to change, particularly when necessary to meet the obligations of legislation on the protection of personal data.
1. What kind of data does ORAMA-System collect?
As data controller, ORAMA-System may collect the following information: name; first name ; E-mail ; address ; Telephone number; IP adress ; …
In particular, for the following uses:
• Access and use of the service
• Contact you by email and telephone
• Request for information via the contact form
• Operation management and optimization of the site
• Prevention and detection of fraud, malware (malicious software)
• Security incident management
The Personal Data collected on the site from users is intended to contact you, for the improvement and maintenance of a secure environment.
The legal basis for processing is legitimate interest.
These data will be kept only for the duration necessary to achieve the purpose of the processing.
However, you may exercise your rights in accordance with this policy.
2. ORAMA-System guarantees that personal data are:
• Processed lawfully, fairly and transparently
• Collected for specific, explicit and legitimate purposes, and are not subsequently processed in a manner incompatible with these purposes
• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
• Accurate and, where necessary, kept up to date
• Kept for a period not exceeding that necessary for the purposes for which they are processed
• Processed in such a way as to ensure appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures adapted to the risks .
Generally speaking, as Data Controller, ORAMA-System collects personal data for the purposes of:
• Management of contacts and customer requests
• Management of orders from its customers (communities; businesses; etc.)
• Management of its commercial contracts (order management, invoicing, collection, etc.)
• ORAMA-System personnel, recruitment and career management (review and contact candidates, etc.)
• Creation and management of services subscribed to by its customers (deliveries, maintenance, etc.)
Depending on these different purposes, ORAMA-System ensures that the lawfulness of the processing is ensured, and that one of the following conditions is met:
• The consent of the natural person has been collected for one or more specific purposes
• The processing is necessary for the performance of a contract to which a natural person is party or for the execution of pre-contractual measures taken at the request of the natural person.
• The processing is necessary for compliance with a legal obligation to which ORAMA-System is subject
• The processing is necessary to safeguard the vital interests of a natural person;
• Processing is necessary for the purposes of the legitimate interests pursued by ORAMA-System, unless the interests or fundamental rights and freedoms of the natural person concerned prevail.
3. How does ORAMA-System secure data?
ORAMA-System deploys all technical, organizational and human means to guarantee the security and confidentiality of Personal Data collected and processed, and in particular to prevent them from being distorted, damaged or communicated to unauthorized third parties, by ensuring a level of security adapted to the risks linked to the processing and the nature of the Personal Data to be protected, having regard to the technological level and the cost of implementation.
Our website may include links to business applications for the strictly dedicated and personal use of our customers or external sources.
You acknowledge that this Personal Data Protection policy only applies to the use of our website, and does not in any way cover information collected and/or processed on external sites or sources, the link to which may appear on the website. Consequently, ORAMA-System cannot be responsible for the practices of these sites or external sources in terms of collection and processing of personal data, which are governed, where applicable, by the personal data policies specific to each of these sites or external sources.
However, ORAMA-System ensured with the publishers of the business applications used and intended for the use of its customers, that they had taken seriously the need for the personal data entrusted to them.
Pursuant to Articles 33 and 34 of the GDPR, any data breach will be notified:
• When ORAMA-System acts as data controller, to the French supervisory authority (CNIL) and, if necessary, to natural persons impacted by said violation;
• When ORAMA-System acts as a subcontractor, to its customers impacted by said violation under the conditions of the contract between ORAMA-System and its customers.
4. How to exercise your rights over your personal data at ORAMA-System
You are informed that under and under the conditions provided for by Personal Data Protection legislation, you have the following rights with ORAMA-System:
• Right to access and obtain a copy of the personal data concerning you held by ORAMA-System,
• Right to have your personal data rectified and updated if it is inaccurate or incomplete,
• Right, conditionally, to have all or part of your personal data deleted,
• Right to obtain information relating to the conditions of use of your data by ORAMA-System,
• Right to object to the processing of your data for reasons relating to your particular situation,
• Right to object, at any time and without justification, to your data continuing to be processed for commercial prospecting purposes, even if you had initially consented,
• Right to withdraw the consent given for the processing of your personal data (when the legal basis for the processing is based on your agreement),
• Right to obtain, under conditions, the limitation (temporary interruption, freezing) of the processing of your data,
• Right to portability of data provided by you to ORAMA-System,
• Right to provide ORAMA-System with instructions on the fate of your data in the event of death,
• Right not to be subject to automated decision-making or profiling that would have legal or significant effects on you.
Pursuant to article 77 of Decree No. 2019-536 of May 29, 2019 taken for the application of the Data Protection Act, you must prove your identity with an identity document at the time of exercising your rights that you can exercise:
To the ORAMA-System Personal Data Protection Manager by writing to:
ORAMA SYSTEM
A l’attention du Data Protection Officier
100 Route des houillères
13590 MEYREUIL
Your request can also be sent under the same conditions by email to @oramasystem.com. Proofing your identity makes it possible to guarantee the confidentiality of everyone’s data (fight against identity theft and the risk of homonymy).
If you are making the request for someone else (you are an agent of the data owner), and in accordance with the provisions of the aforementioned decree, your request must be accompanied:
• The written mandate from the owner of the data (the Principal) specifying the duration and precise purpose of the mandate given to you and clearly authorizing you to be the recipient of ORAMA-System’s response to the request to exercise rights on the personal data of the principal,
• + proof of your identity, and
• + proof of the identity of the principal.
In the absence of compliance with these cumulative conditions, the request will not be admissible.
Subject to the admissibility of your request and compliance with the conditions provided for by law, a response will be provided to you within one month, and exceptionally within two months in the event of complexity or a large number of requests.
If you consider, after making a request to us, that your “Computer and Liberties” rights have not been respected, you can send a complaint to the CNIL online or by letter.
5. What are the retention periods for your Personal Data?
ORAMA-System undertakes not to keep your Personal Data beyond the period strictly necessary for the purposes of use for which they were collected, and in accordance with the Applicable Regulations.
6. Information of the persons concerned
At the time of collecting personal data, ORAMA-System provides the natural persons concerned, and as far as possible, with appropriate information, including: the contact details of the data controller and its Data Protection Officer, the purposes of the processing and its legal basis, the recipients of the data, transfers outside the EU if applicable, the retention period, the possibility of exercising one’s rights and the right to lodge a complaint with the supervisory authority.
7. Transfers outside the European Union
ORAMA-System, hereby informs that certain data collected may be processed outside the European Union, and in particular in the following cases: TO BE INFORMED
ORAMA-System can, in certain cases, implement appropriate data transfer management tools, in application of Article 46 of the GDPR, apart from:
• From the European Union, or
• From the European Economic Area, or
• Countries recognized as having an adequate level of security by the European Commission.
8. Who is your personal data intended for, and who can access it?
Your personal information collected or provided on this site or as part of our commercial relations is intended for the company ORAMA-System, responsible for processing and whose head office is located at:
ORAMA SYSTEM
100 Route des houillères
13590 MEYREUIL
The ORAMA-System company supervises and ensures that they comply with their confidentiality and security obligations relating to your information.
> Authorized third parties
Some of your data may be transmitted, at their request and according to the legal and regulatory procedures in force, to the authorities and administrations of justice, the police and the gendarmerie, to official bodies recognized as third parties authorized by law and by the CNIL, as well as to any other recipient, public or private, by virtue of the law, a decree or a judicial decision.
> Service providers
ORAMA-System may share personal data with third parties providing a service:
• On behalf of ORAMA-System as part of the execution of the customer contract (hosting, consulting, subcontractor) under the conditions provided for therein
• To support ORAMA-System in the execution of the financial and administrative conditions of the contract (recovery, invoicing, etc.)
The ORAMA-System company supervises and ensures that they comply with their confidentiality and security obligations relating to your information.
> Cooperation of ORAMA-System with its customers and the supervisory authority
In accordance with Article 28 of the GDPR and in compliance with its contractual commitments, ORAMA-System undertakes to reasonably cooperate with its customers in order to help them meet their obligations pursuant to Articles 32 to 36 of the GDPR. In general, ORAMA-System undertakes to cooperate with the French supervisory authority (CNIL) when necessary and to reasonably take its recommendations into account.
9. ORAMA SYSTEM staff awareness
ORAMA-System makes every effort to provide all its employees with awareness of the issues surrounding the protection of personal data.
10. Contact
For any questions relating to this policy or contact our Data Protection Officer, you can send your request via the contact form on our site.
11. Use of cookies
The ORAMA-System website automatically collects information from users relating to the use of the site (as well as certain other information such as the type of browser used and the operating system or even IP addresses).
The website uses cookies, these are small text files sent and stored on your computer which allow web servers to recognize user habits, facilitate their access to the ORAMA-System site and allow the site to compile aggregate data which will improve the sites and their content.
Cookies do not damage computers or files. Cookies themselves cannot be used to discover the identity of the user.
The law states that we can only store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages. You can access the source information: https://www.cnil.fr/fr/cookies-traceurs-que-dit-la-loi.
When you first browse this site, an explanatory banner on the use of “cookies” will appear. From then on, by continuing to browse, the customer and/or prospect will be deemed to be informed and to have accepted the use of said “cookies”. The consent given will be valid for a period of 1 hour. The user has the option to deactivate cookies from their browser settings. Any information collected will only be used to track the volume, type and pattern of traffic using this site, to develop its design and layout and for other administrative and planning purposes and generally to improve the service. that we offer you.
12. How to manage your cookies on your browser?
You have several options for deleting cookies. Indeed, if most browsers are configured by default and accept the installation of cookies, you have the possibility, if you wish, to choose to accept all cookies, or to systematically reject them or to choose those that you accept depending on the issuer.
You can also configure your browser to accept or refuse cookies on a case-by-case basis prior to their installation. You can also regularly delete cookies from your device via your browser.
For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your cookie preferences.
> AS AN EXAMPLE:
• For Internet Explorer™: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
• For Safari™: https://support.apple.com/kb/PH19214?locale=fr_FR&viewlocale=fr_FR
• For Chrome™: https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en
• For Firefox™: https://support.mozilla.org/fr/kb/activate-deactivate-cookies-preferences
However, if you configure your browser to refuse cookies or you refuse the installation of a cookie, such deactivation could prevent the use of certain functionalities of the ORAMA-System site or result in the impossibility of accessing certain services , for which we cannot be responsible.