Private policy
The Orisha Group, with a strong commitment to safeguarding individuals’ rights, especially in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act, has established this Privacy Policy. Its primary objective is to provide you with comprehensive information about all data processing activities related to your personal information, the underlying purposes, and the available avenues for you to exercise your rights.
WHAT DATA IS COLLECTED?
When you use our website, you may need to provide us with information, some of which may be of a nature to identify you, and thus, qualify as personal data (hereinafter referred to as “Data”). The Orisha Group exclusively processes and collects Data that is strictly necessary for the purposes for which they are being processed
Hence, we gather the following types of data :
- – Identification data: Information we collect directly when you complete a contact form.
– Browsing-related data : Information we collect indirectly while you browse the fr website using Internet technologies, including “cookies” or trackers.
The Orisha Group is committed to providing you with the option to opt out of this, following our Cookie Management Policy.
WHAT PROCESSING IS CARRIED OUT?
The processes implemented by the Orisha Group serve a clear, legitimate, and defined purpose :
|
Processing Activities |
Data collected |
Purposes |
Legal Bases |
Data Retention Period (Active Basis) |
|---|---|---|---|---|
|
Contact Request Management |
Identification Data comprising name, first name, company, email, phone number, country (drop-down menu), job title (drop-down menu), |
Addressing inquiries for information, demonstrations, or documentation related to our Solutions Handling support requests |
Legitimate interest of the data controller |
The duration necessary to address the specific inquiry |
|
Receive our Newsletter |
Identification Data comprising Mandatory Information: Name, first name, Function (drop-down menu), and Optional Information: email address, phone number |
Keep you informed about our news |
Consent |
The duration necessary to address the specific inquiry |
|
Carrying out prospecting actions |
Identification Data comprising name, first name, company, email, phone number, country (drop-down menu), job title (drop-down menu), |
Acquiring new clients Providing relevant solutions related to your field of activity |
Legitimate interest of the data controller |
Three years from the date of data collection by the data controller or the last contact initiated by the prospect |
TO WHOM ARE YOUR DATA TRANSFERRED ?
Your data is exclusively shared with the following recipients :
- – Authorized individuals with specific roles within the Orisha Group.
– Third parties, including our subcontractors and service providers responsible for tasks such as website hosting and handling job applications. They are contractually obligated to ensure the security and confidentiality of your data and to comply with current data protection regulations.
We only provide our subcontractors and service providers with the data that is strictly necessary for the provision of services. Therefore, they process your data exclusively in accordance with our documented instructions and are strictly prohibited from using your personal data for any other purposes.
WHAT ABOUT OUR SECURITY MEASURES?
The Orisha Group prioritizes the security of personal data through the implementation of robust data protection measures. These measures encompass both organizational and technical aspects, all aimed at safeguarding the security, integrity, and confidentiality of your personal information. Our objective is to prevent any unauthorized alteration, damage, or access to this data.
In addition, our staff is bound by strict confidentiality agreements outlined in their employment contracts, and they adhere to an IT charter that is an integral part of our internal regulations. Furthermore, we conduct regular awareness sessions for our personnel to ensure they are well-informed about privacy compliance and security protocols.
POLICY UPDATE
The currently online version of this Policy is the only one applicable throughout the duration of the website’s use and until a new version replaces it. This Policy is regularly updated to account for legislative and regulatory changes and any modifications made by the Orisha Group in the processing of your data.
WHAT ARE YOUR RIGHTS?
In accordance with the applicable laws and regulations, including the General Data Protection Regulation (GDPR) and the Data Protection Act, you have the following rights: access, rectification, erasure, restriction, objection, and where applicable : data portability, withdrawal of consent, and organization of the fate of your personal data in the event of your passing.
If you have any questions, concerns, or requests regarding the protection of your personal data or if you wish to exercise your data protection rights, our Data Protection Officer is available at the following email address: retailchains.privacy@orisha.com or by postal mail at the following address, 8 Avenue Hoche, 75008 Paris.
If, after contacting us, you believe that your rights are not being respected, you have the right to lodge a complaint with the CNIL (French Data Protection Authority)