Terms of Use (TOU)

This privacy policy explains why we collect your data and how we are committed to protecting it. OCARYO Studio is committed to safeguarding your personal data and your privacy. In accordance with the General Data Protection Regulation ("GDPR"), we inform you below about the conditions under which your personal data may be processed by us.

Which personal data do we process?

Purposes: We may collect and retain personal data about you for the following purposes: to process and respond to your messages; to manage newsletter subscriptions; to establish and follow up any commercial relationship arising from your messages; to improve our monitoring and customer service; to send you commercial and advertising information based on your preferences; to detect attacks and pursue legal action against fraud; to process and respond to requests to exercise your rights; and to comply with applicable or forthcoming regulatory requirements. Categories of data: contact details (for example: family name, first name, telephone number, email) and technical and location information generated when using our services.

Legal bases for processing

The processing of personal data is based on one of the following legal grounds: the data subject's consent (Article 6.1.a GDPR) where prior consent is required. In online forms, required fields are marked with an asterisk; if mandatory questions are not answered, we may not be able to provide the requested services. Processing may also be necessary for the performance of a contract or the implementation of pre-contractual measures, for the pursuit of a legitimate interest (Article 6.1.e GDPR), or to comply with a legal or regulatory obligation.
Data retention: Your data are retained only for the time necessary to fulfill the purposes described above. The retention period for clients' personal data depends on the relevant purpose. Client data are kept as long as needed to handle their request. Failing any action, personal data are deleted within the timeframes recommended by the French Data Protection Authority (CNIL), generally within three years from collection, subject to legal archiving obligations, mandatory retention periods for evidentiary purposes, or data anonymization. Personal data collected to perform contractual offers are retained for the duration necessary to manage the contractual relationship. By exception, data required to establish proof of a right or a contract are archived according to legal provisions (5 or 10 years after the end of the business relationship, depending on the case).

Who are the recipients of your data?

Your personal data are intended for OCARYO Studio and our internal teams: they may be processed by staff from services such as sales or IT security. Email service providers (for example Mailjet or SendGrid) may also process data on our behalf. We may sometimes allow partners to process personal information on our behalf for the purposes described in this policy or as required by law. Client personal data are hosted in France. If we use a provider located outside the European Union, we commit to ensuring appropriate safeguards are in place so that the personal data benefit from an adequate level of protection.

How does OCARYO Studio protect your data?

We implement organizational and technical measures to ensure an appropriate level of security for your personal data and to prevent any loss of confidentiality, integrity or accessibility. We regularly back up data, restrict access to personal information to those who need it to perform their duties, and put in place technical and organizational measures to keep client personal data secure for the duration necessary to achieve the stated purposes. Our teams receive GDPR-related training.

What rights do you have over your personal data?

Under applicable law, you have the following rights: the right to rectification — you may request correction of inaccurate data; the right to have incomplete data completed; the right to erasure — in certain cases you may request deletion of your data though this right is not absolute and some data may be retained for legal or legitimate reasons; the right to restriction of processing — in certain cases you may obtain a restriction on the processing of your data; the right to data portability — you may receive the personal data you provided to us in a structured, commonly used and machine-readable format for your own use or to transfer to a third party; this right applies when processing is based on consent, on a contract, or when the processing is carried out by automated means; the right to object to processing — you may object at any time to processing based on our legitimate interest, on a task carried out in the public interest, or for direct marketing purposes; this right is not absolute and we may refuse an objection for legal or legitimate reasons; the right to withdraw consent at any time when processing is based on consent (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal); and the right to lodge a complaint with a supervisory authority. We will respond to any request to exercise these rights promptly and in any case within 30 days of receipt of the request. We reserve the right to request proof of identity if there is a reasonable doubt about the identity of the requester, to extend the response period by two months (informing the requester of the extension and reasons within one month of receipt), and to refuse requests that are manifestly unfounded or abusive (for example because of their number or repetitive or systematic character).

Who should you contact for GDPR-related requests?

To exercise your rights, you can contact us at: OCARYO Studio Address: 5 rue du collège, 61000 ALENÇON Phone: 07 85 02 77 22 Publication director: Dylan ARROYO OCAÑA If, despite our efforts and commitments, you believe that your personal data rights have not been respected, you may file a complaint with the French Data Protection Authority (CNIL): CNIL, 3 place de Fontenoy TSA 80715, 75334 Paris Cedex 07.

Amendments to the Data Protection Policy

This Data Protection Policy may be updated. It was created from a free template available at https://donnees.net. As we continuously develop our services, we reserve the right to modify this Privacy Policy in accordance with applicable law. Any changes will be published on this page in due time. We advise you to consult this page regularly to stay informed of any updates or changes to our privacy policy.