Data Protection Policy
GDPR Compliant
Introduction
Okio is committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This privacy policy outlines how we collect, use, disclose, and protect personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable national laws.
Personal Data We Collect
We may collect personal data about you through the following means:
- Information Provided in Contractual Relationships:
o Contact Information: Data you provide when entering into a contract with us, such as name, email address, phone number, and address.
o Feedback and Correspondence: Details you provide when contacting us for support, reporting issues, or corresponding with us in any form.
o Marketing Preferences: Information regarding your preferences for receiving marketing communications. - Information from Third Parties:
oThird-Party Sources: Information obtained from marketing partners, publicly available sources, or data service providers, which may be combined with data we collect from our website. - Automatically Collected Information:
oUsage Data: Information about your interaction with our website, such as your IP address, browser type, pages viewed, and time spent on our site. This data may be collected through cookies.
How We Use Your Personal Data
We process your personal data for the following purposes:
- Identification and Communication: To identify you and communicate with you regarding our services.
- Contract Management: To manage contracts, customer accounts, and relationships with service providers and network members.
- Service Provision: To provide the services you have contracted with us.
- Marketing: To send you information and promotional materials in line with your preferences.
How We Share Your Personal Data
Your personal data may be shared with:
- Internal Personnel: Employees responsible for service delivery and relationship management.
- Third-Party Service Providers: Companies providing services on our behalf, such as data management, logistics, and marketing. These providers are contractually obligated to handle your data according to this policy and applicable laws.
Cookie Policy
We use cookies and similar technologies to enhance your experience on our website:
- Strictly Necessary Cookies: Essential for website operation. Disabling these may impair site functionality.
- Functionality Cookies: Remember your preferences to provide a personalized experience.
- Analytics Cookies: Collect data on website traffic and user behavior to improve our services.
- Advertising Cookies: Serve targeted ads based on your browsing activity. You can manage or disable these through your browser settings.
- Pixel Tags: We use pixel tags to track website activity and measure the effectiveness of our marketing efforts. These do not store personal data on your device but are used to compile aggregate statistics.
Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request information on the processing of your data and obtain a copy of it.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal retention requirements.
- Restriction: Request the restriction of data processing under certain conditions.
- Objection: Object to data processing for direct marketing purposes or based on legitimate interests.
- Data Portability: Request the transfer of your data to another service provider in a structured, machine-readable format.
To exercise these rights, please contact us at [email protected].
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: For processing activities you have explicitly consented to. You may withdraw consent at any time.
- Legitimate Interest: For activities necessary to our business that do not override your privacy rights.
- Legal Obligations: To comply with legal requirements, such as tax and accounting regulations.
International Data Transfers
Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA), the United Kingdom, or Switzerland. We ensure that such transfers comply with applicable data protection laws and that your data is safeguarded through appropriate contractual measures.
Data Retention
We retain personal data for as long as necessary to fulfill the purposes for which it was collected:
- Prospects: Data is retained for three years from the last contact.
- Customers: Personal data is retained for three years from the last order, with contract-related data retained for ten years.
- Iris Capture Data: Retained for 36 months in the active database.
Complaints
If you believe your data protection rights have been violated, you may lodge a complaint with the relevant supervisory authority, such as the Commission Nationale de l’Informatique et des Libertés (CNIL) in France.
Changes to This Policy
We may update this policy periodically. Significant changes will be communicated to you via email or by a prominent notice on our website. The date of the latest revision will always be provided.
Contact Information
For any questions or concerns about this privacy policy, or to exercise your rights, please contact us at:
[email protected]
This policy is intended to ensure transparency and compliance with GDPR and related data protection laws.