Aware of the importance of ensuring data confidentiality, Aurelia Bousquet, owner of Orzyla.com (hereinafter Orzyla), makes strong commitments with regard to the protection of personal data.
The purpose of this personal data protection policy is to inform the Internet user about the commitments and measures taken to ensure the protection of personal data.
This Privacy Policy may be modified at any time. We therefore advise you to consult this page regularly to inform yourself of any possible changes.
Scope of Application of These Privacy Rules
These Privacy Rules apply to the services, sites and mobile applications offered by Orzyla, as well as to the services offered on partner sites.
Note to visitors and users of the Sites: each Site is subject to specific Terms of Use available on each of the Sites and which are part of this Policy. Your use of the Sites and the Personal Data that you agree to communicate on the Sites are subject to the provisions of this Policy and the applicable Terms of Use.
Data Controller
The person responsible for processing personal data is Aurelia Bousquet.
Information about Orzyla is available in its Legal Notice.
Data Collected
Orzyla ensures that it only collects data that is strictly necessary for the purpose of the processing implemented.
The data collected by Orzyla is collected through forms completed by the Internet user, by uploading content online, by subscribing to online services, by subscribing to the Orzyla newsletter, by cookies, when connecting to the site, during a telephone call, when sending an electronic message or by sending correspondence to one of Orzyla's services.
The data collected may include the following:
- Prospect/customer identification data such as Internal code, Title, Last name, First name, Date of birth, Address, Address identifier, Telephone, Email, Identity document, Company name and SIREN if company;
- Data relating to the monitoring of the commercial relationship such as: telephone number to be called back, Date of callback, Product, Offer and options subscribed to, Partner, Origin and provenance of the sale or order, exchanges with the prospect/customer, Date and order number, Status of the order, Identifier of the tele-advisor assigned to the monitoring, Customer account;
- Payment method data: Date, Method and status of payment, Transaction number, Amount;
- Data for commercial prospecting purposes to offer a similar service on another product: Optin newsletter;
- Connection data for audience measurement statistics in order to improve our services: IP address, Cookies, Tracers (date / time / duration of visit, pages viewed), Browser type, Operating system;
- Data related to newsletter subscription: Email, Subscription date, Email reading status;
- •Data relating to contact forms and comments: Date, Message and Subject of the request;
- Data relating to the management of reviews following an order: Rating and Comment;
- Data relating to the exercise of personal rights: Identity document;
Orzyla indicates to the Internet user on the collection form the mandatory data to ensure its service by affixing the following symbol: "*". If the Internet user does not respond to the fields indicated as mandatory, the latter will not be able to register and benefit from the services provided by the Orzyla company.
Orzyla may ask the Internet user to respond to surveys which are used for scientific and statistical purposes.
Telephone calls may be recorded with the consent of the person concerned to improve the quality of service, evaluate and train telephone advisors.
Our sites use cookies to measure the audience and to personalize the services and offers that we offer you in order to facilitate your navigation on our sites. For more information and to oppose the placement of cookies, please consult our cookie management policy.
Special Information for Parents
Our pages are not directed to children under 16, and we do not knowingly collect Personal Data from children. However, it is Orzyla's policy to comply with the law where the law requires a parent or guardian to obtain permission before collecting, using or disclosing Personal Data from children. If a parent or guardian becomes aware that his or her child has provided us with Personal Data without their consent, please contact us at contact[at]orzyla.com. If we become aware that a child has provided us with Personal Data, we will delete his or her information from our files.
Purposes of collecting personal data
Treatment is necessary:
- for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject.
- as well as the legitimate interests pursued by Orzyla in improving its services and understanding user expectations, in particular enabling the protection of user rights and data.
The Internet user, a natural person, is informed that the information collected is subject to computer processing intended to carry out operations relating to:
- Delivery of orders
Telephone calls may be recorded with the consent of the person concerned to improve the quality of service, evaluate and train telephone advisors.
Recipients of personal data
Your personal data may be disclosed to the following recipients, for the purposes set out in this Policy:
- People responsible for the marketing department, the sales department, the services responsible for handling customer relations and prospecting, administrative services, IT and technical services as well as their line managers;
- Orzyla’s subcontractors;
- Orzyla's business partners authorized to carry out data processing;
- The body responsible for managing the telephone canvassing opt-out list;
- Administrative or judicial authorities authorized by French law.
Whenever we share your information, for example to a partner providing services on our behalf such as credit card payment or sending postal mail, we require those recipients to acknowledge our privacy and processing policies data, and adhere to their principles.
Safety
Orzyla has implemented rigorous and appropriate physical, organizational, procedural, technical and personnel measures to ensure the security and confidentiality of personal data.
Transfer of data outside the European Union
Some data may be stored on servers located in the United States adhering to the EU-US Privacy Shield.
Some of the data referred to above may involve transfers of personal data to a country that is not a member of the European Economic Area, whose personal data protection legislation differs from that of the European Union.
The country concerned has not been the subject of an adequacy decision issued by the Commission.
In this context, Orzyla has implemented data processing contracts based on the Standard Contractual Clauses of the European Commission.
Data retention period
Orzyla only keeps personal data for the time necessary for the operations for which they were collected and in compliance with the regulations in force.
Customer/Prospect File Management:
The natural person is also informed that Orzyla will keep the data transmitted according to the criteria and recommendations of the CNIL available in its reference standards: simplified standard no. 48 et simplified standard no. 56.
- The data client are kept for the duration of the commercial relationship, and may be kept for commercial prospecting purposes for a maximum of 3 years from the end of this commercial relationship.
- The data prospect are kept for a period of 3 years from their collection or the last contact from the prospect.
- The information stored in the users' terminal (cookies) or any other element used to identify users and allowing user traceability is kept for 12 months.
- Data relating to pieces of identity for the exercise of the right of the person are kept for a maximum of 1 year. In the event of a right of opposition, this data may be archived for 3 years.
- Bank card data is not stored.
Managing the sending of the newsletter
Orzyla retains the email address as long as the person concerned does not unsubscribe (via the unsubscribe link integrated into the newsletters) and applies an automatic unsubscribe rule in the event of non-opening after 11 times or after 3 years.
Contact form data management
Orzyla keeps this data for 3 years.
Conclusion, management and execution of insurance contracts:
The natural person is also informed that Orzyla will keep the data transmitted according to the criteria and recommendations of the CNIL available in its reference standard: simplified standard no. 16.
- Data retention period when concluding a contract : The retention periods must allow compliance with the limitation periods resulting, in particular, from the insurance code and the civil code.
- Data retention period in the absence of conclusion of a contract : The data may be kept for a period of 3 years from their collection by the data controller or from the last contact from the prospect.
Phone Calls:
Telephone calls may be recorded with the consent of the person concerned. This data is kept for a maximum of 6 months according to the criteria and recommendations of the CNIL available in its reference standard no. 57.
Rights of the data subject
right of access, rectification, limitation and erasure
In accordance with the "Informatique et Libertés" law of January 6, 1978, amended in 2004 and 2016, and the General Data Protection Regulation, every natural person has the right:
- access to data (limited to two access requests per year and subject to proof of identity),
- of data rectification,
- to the erasure of information concerning it under the conditions set out in Article 17 of the General Data Protection Regulation,
- right to restriction of processing,
- right to define general and specific guidelines defining the manner in which she intends these rights to be exercised after her death.
Right of opposition
The natural person also has a right to object to the processing of his or her personal data, as well as a right to object to this data being used for commercial prospecting purposes.
Right to data portability
The person listed also has a right to the portability of their data. In accordance with Article 20 of the GDPR, the data subject has the right to receive the personal data concerning them that they have provided to IKADRAN®, in a structured, commonly used and machine-readable format, and has the right to transmit this data to another controller without Orzyla to whom the personal data have been communicated hindering this.
Exercise of rights
The person concerned may exercise these rights by contacting Orzyla, stating their surname, first name and email address and providing proof of their identity, in accordance with Chapter III of the General Data Protection Regulation:
- to the email address contact@orzyla.com
Right to lodge a complaint with the CNIL
Finally, the person concerned may, where appropriate, file a complaint with the CNIL services (https://www.cnil.fr/fr/plaintes).
To do this, she can contact the CNIL by mail or by telephone (information available here: https://www.cnil.fr/fr/vous-souhaitez-contacter-la-cnil).