Personal data such as names, surnames, email addresses, as well as all information that you (the "user" or "you") share with Ott ("we") are subject to computer processing and as such are subject to the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Ott is committed to ensuring that the processing of personal data carried out complies with the General Data Protection Regulation (RGPD) and the Data Protection Act.

This policy completes the general conditions of use of the Ott website accessible at www. ott-design.com.

Data protection policy of the website Ott

1. Information about the data controller

Ott Design, company with limited liability with a share capital of 1000 euros, whose Head Office is located 132 rue Saint-Genes 33000 Bordeaux France, registered in the Bordeaux Trade and Companies Register under the number 920 148 285, represented by Marion Quilichini in her capacity as Manager.

2. Categories of data collected

In the context of the services provided by Ott website, we collect data relating to:

• The identification of the person concerned (name, first name, address, email, telephone number, etc.),

• The means of payment used,

• The transaction carried out (data related to the payment of invoices, to the follow-up of the commercial relationship, to the notices left, to the management of the complaints if necessary, etc.),

• The follow-up of the commercial relationship (history, correspondence, etc.),

• To your contributions when you leave reviews,

• The use of our website (cookies, tracers, navigation data, audience measurement, etc.).

3. Purposes

The purpose of the processing is the visit and/or use of the features and services of the Ott website. This processing has the following purposes:

• Creation of the user's personal space,

• Management of orders,

• Management of payments,

• Management of the customer account,

• Sending emails, SMS, and calls of an informative and promotional nature,

• Drafting of notices,

• Use of data collected through cookies when browsing the Ott website.

In addition, the Ott website provides online forms for the following topics (the list is subject to update):

• Miscellaneous questions,

• Request for information,

• Request for personalized advice.

Via the Ott website, the user also has the possibility to subscribe to a newsletter.

The user is informed that if he/she subscribes to the newsletter or fills in a contact form, Ott will use his/her e-mail address to send him/her any commercial offer, promotion or simple information on its activity. The user can withdraw his consent at any time by clicking on the unsubscribe link at the end of the e-mail or by contacting care@ott-design.com.

4. Legal basis

Processing concerned	Legal basis
Creation of the user's personal space	This processing is based on the existing contract between you and us
Order management	This processing is based on the existing contract between you and us
Management of payments	This processing is based on the existing contract between you and us
Customer account management	This processing is based on the existing contract between you and us
Newsletter subscription	This processing is based on your consent
Sending emails, SMS, informative and promotional calls	This processing is based on your consent
Writing a review	This processing is based on your consent
Online form	This processing is based on your consent
Request for contact / information	This processing is based on your consent
Use of data collected through cookies when browsing the site	This processing is based on your consent

 

 

5. Sources of data

We collect personal data that you provide to us directly.

In the course of its marketing activities, Ott may collect data indirectly (e.g. via institutions or partners). The persons concerned by this data must have given their prior consent for such communication and use.

6. Mandatory nature of data collection and consequences of not providing data

The data collected during the navigation (in particular the cookies) are optional. You have the possibility to object to this, which will not prevent you from browsing the various pages of the website.

The data collected for other purposes are collected in a compulsory way, except - in the case of a direct data collection - contrary mention in the concerned form or on the concerned digital platform, in order to be able to benefit of the service or the functionality which interests you. If you do not provide all the necessary data, your request cannot be processed.

7. Automated decision making

None of the processing operations carried out by Ott lead to automated decision-making.

8. Data subjects

The data processing concerns persons who browse and/or use the services and functions of the Ott website as well as persons who place an order via the website.

9. Recipients of the data

The personal data collected are made accessible:

• To the persons authorized within Ott to know about it with regard to their attributions (and in particular the sales and marketing departments, accounting department, customer relations department),

• To our subcontractors (e.g. accounting firm, IT service providers, our technical service providers in charge of the management of online payments),

• Our partners for the services they manage (for example, online reviews),

• To our transport service providers, in order to deliver your orders to the place of delivery chosen by you,

• To our partners for services subject to your consent (sending commercial emails, etc.). We remind you that in this context you always have the possibility to unsubscribe by clicking on the link at the end of the email or by contacting care@ott-design.com.

10. Transfer of data outside the European Union

As a matter of principle, your personal data is not transferred outside the European Union.
However, it is possible that your data may be transferred from time to time to subcontractors or business partners located in other countries provided that they offer an adequate level of protection recognized by the European Union.
In case of transfer of your data to a country whose level of protection of your data has not been recognized as adequate by the European Commission, we put in place Standard Contractual Clauses approved by the European Commission which allow us to guarantee a sufficient level of protection of the privacy and fundamental rights of individuals.
If you have any questions on this subject, you can send us a written request as follows: care@ott-design.com.

11. Storage period

Data concerned	Storage period
Data related to the creation of the user's personal space	5 years from the last activity
Data related to the placing of an order	5 years from the end of the relation
Payment management	Bank documents (bank statements, check stubs, etc.) are kept for 5 years (art L110-4 of the French Commercial Code). Bank card data may be kept by the technical intermediary in intermediate storage for evidentiary purposes in the event of a possible dispute over the transaction for a period of 13 months (article L133-24 of the French Monetary and Financial Code) and 15 months in order to take into account the possibility of using deferred debit payment cards.
Data related to customer account management	5 years from the end of the relation
Data related to the sending of e-mails, SMS, informative and promotional calls	The user's data is kept for a period of 3 years from the date of its gathering or the last contact from the user himself. At the end of this period, we may contact the user again to find out if he or she wishes to continue receiving commercial solicitations. In the absence of a positive and explicit response, the data will be deleted.
Writing a review	Your review remains online as long as you do not delete it
Use of data collected through cookies when browsing the website	The data collected through cookies are kept for a period of 13 months unless the person concerned objects.
Data collected through the online form	5 years from the date of receipt

Security

Ott implements appropriate measures to protect against accidental or unlawful destruction, loss, alteration or unauthorized disclosure of data. These measures include mainly:
- A management of the authorizations for the access to the data;
- Hosting in Europe, certified in the field of security and in compliance with the GDPR regulation.
- A regular and systematic backup

Your rights

In accordance with the provisions of the GDPR, you have the following rights:

• right of access to your personal data contained in our databases,

• the right to rectify or delete your data, it being specified that this right may be limited in accordance with our contractual and/or legal obligations,

• the right to limit the processing of your personal data in the cases provided for by the regulations and in particular by Article 18 of the GDPR. This is a right that complements your other rights (rectification, opposition...). If you dispute the accuracy of the data used by Ott or object to the processing of your data, the law allows Ott to proceed to a verification or examination of your request during a certain period. During this period, you have the possibility to request Ott to freeze the use of your data.

• right to portability of your data which allows you to request to retrieve the data you have provided, for personal use or to transmit it to a third party of your choice,

• the right to object to the collection and processing of your data. In particular, you have the right to object, at any time, to the use of your data for commercial prospecting purposes by Ott in particular by means of a checkbox or a link on the medium used for prospecting or by contacting us at the address referred to below,

• right to the deletion of your personal data if your data is used for canvassing purposes; if the data is not or no longer necessary with regard to the purposes for which it was originally collected or processed; if you withdraw your consent to the use of your data; or if you assert your right to object and Ott has no legitimate or compelling reason not to comply with this request. If the personal data has been processed unlawfully, or if the personal data must be deleted to comply with a legal obligation. (see article 17 of the GDPR).

• right to withdraw your consent at any time, for the processing operations for which we have collected your consent

Exercising your rights

Ott is your contact person for any request to exercise your rights regarding this processing. You can contact him, free of charge, by sending him your request:

- by e-mail to the address: care@ott-design.com

- by post at the following address: 132 rue Saint Genes 33000 Bordeaux FRANCE

To know more about the exercise of your rights, you can consult this link:
https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles