PERSONAL DATA PRIVACY POLICY

As part of the implementation of the new General Data Protection Regulation (GDPR) from May 25, 2018, Ostòria wishes to transparently present its personal data privacy policy.

Our Commitment to Privacy
We make every effort to best protect your data and are committed to ensuring the highest level of security and confidentiality, in compliance with applicable French and European regulations (Regulation 2016/679/EU and Law No. 78-17 of January 6, 1978).

In this document, we present our policy regarding the information, collection, and processing of your personal data, as well as the procedures for accessing, modifying, deleting, and porting your data.

Information We Collect and Collection Methods Used
Generally speaking, you can visit the Ostòria website without identifying yourself or revealing personal information. However, certain circumstances may lead Ostòria to ask you for information (on this website).

Personal information such as your name, phone number, email, etc., is only retained when you voluntarily submit it to us or within the framework of a contractual relationship (past, ongoing, or future). We collect this information in several ways:

– Via registration forms, online or offline (reservation request, service request,… )
– When requesting contact or information (online contact form, telephone contact,… )
– As part of a recruitment process (internal, external, in all its forms)
– Through automated means such as email communications and cookies,…
– Via the use of a social network service (Company Facebook Page, Instagram, LinkedIn, TikTok).

Processing of Personal Data

Personal data collected on this site is done so in the context of a request, an ongoing or future contract, for content enrichment purposes, and statistical analysis.
This data is mandatory as part of an ongoing or future contractual process.

This data is collected with your explicit consent. You can withdraw this consent at any time either through the online tools made available to you (cookie management) or by contacting the services responsible for processing your data. You can also contact the Data Protection Officer for this purpose.

No transfer or assignment of your data to third parties takes place. They are collected solely for the previously defined use, and your data is retained until your request (rectification, restriction, deletion,… via a request using the linked form).

To verify your identity when requesting access, modification, portability, or deletion of your data, please attach a copy of your identity document to your request. We will not be able to delete personal data without verifying the identity of the applicant requesting its deletion. Once your request has been processed by our company, the copy of your identity card will be destroyed, and it cannot be returned.

Please note that you also have the option to lodge a complaint with the CNIL.

Personal data collected within the framework of services offered on ostoria.fr is processed according to secure protocols.

Furthermore, the storage of this data is time-limited and subject to a deletion request from you. Upon this request, your personal data will be deleted. In the case of registration for an online service, a request for renewal of consent will be sent to you.

Each form or online service limits the collection of personal data to what is strictly necessary (data minimization).

How We Use Your Information (Purposes)
Ostòria may use your personal data for:
– Your information requests, service requests,…
– Making the website easier to use
– Helping us personalize content and make it more relevant to your interests
– Informing you about Ostòria news

How Long Do We Keep Your Data
We define a data retention period based on the objectives of each processing operation, any related legal obligations, and the purposes of our activity (subcontractor…). If you wish to know the retention period for your data, you can make a request to the ETT.

How to Request Access, Rectification, Portability, or Deletion of Your Data
We provide unsubscribe links in all emails that are part of a group communication campaign. You can also request access, modification, portability, or deletion of your personal data by registered mail, attaching the “Data Subject Rights Access Form” available by clicking on the link at the bottom of the page. Therefore, you can, at any time, know the personal data held by Ostòria, modify it, transfer it, or delete it.

Postal Address for Sending a Personal Data Access Request:
Ostòria
Personal Data Protection Department (GDPR)
8 rue de la Borderie
24430 Marsac-sur-l’Isle

To verify your identity when requesting access, modification, portability, or deletion of your data, please attach a copy of your identity document to your request. We will not be able to delete personal data without verifying the identity of the applicant requesting its deletion. Once your request has been processed by our company, the copy of your identity card will be destroyed, and it cannot be returned.

Please note that you also have the option to lodge a complaint with the CNIL.

External Links
Links to other websites are available from the Ostòria website to provide you with the most complete information possible. If you use these links, you will leave the Ostòria website. We have not controlled these sites and will not control them, as these sites are not under our responsibility.
Ostòria is, in no case, responsible for the content and/or the personal data privacy policy of these other sites.
Ostòria does not endorse or approve the content to which these sites or sources provide access and excludes all responsibility regarding such content. If you decide to access these sites, you do so at your own risk.

Your Agreement to These Terms
By using the Ostòria website, you signify your agreement to this privacy policy.

How to Contact Us
Ostòria
Personal Data Protection Department (GDPR)
8 rue de la Borderie
24430 Marsac-sur-l’Isle