Privacy Policy

Purpose of this Privacy Policy

ODW, a Simplified Joint Stock Company with a single shareholder, headquartered at 63 rue de Lancry, 75010 Paris, France (hereinafter referred to as the “Company,” “we,” “our”), along with its technical subcontractors, is committed to respecting your privacy and places great importance on the confidentiality of your data online.

This privacy policy aims to inform users of our website, https://www.odw.fr, about the personal data we collect and process, as well as the following information, where applicable:

  • The personal data we collect;
  • How the collected data is used;
  • Access to the collected data;
  • The rights of the website’s users;
  • The website’s cookie policy.

By using the website https://www.odw.fr, you accept this privacy policy without reservation, modification, or limitation.

 

Applicable laws

Your personal data collected from the Site, hereinafter referred to as “Personal Data,” is processed by the Company as the data controller. The Company is committed to processing your Data in compliance with applicable laws and regulations, including Law No. 78-17 of January 6, 1978, on Information Technology, Data Files, and Civil Liberties, hereinafter referred to as the “French Data Protection Act,” and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons.

In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following principles:

  • Processed lawfully, fairly, and transparently in relation to the data subject (lawfulness, fairness, transparency);
  • Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes shall not be considered incompatible with the initial purposes, in accordance with Article 89(1) (purpose limitation);
  • Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (data minimization);
  • Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy);
  • Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1), subject to the implementation of appropriate technical and organizational measures required by the Regulation to safeguard the rights and freedoms of the data subject (storage limitation);
  • Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).

Processing is lawful only if, and to the extent that, at least one of the following conditions is met:

  • The data subject has given consent to the processing of their personal data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract;
  • Processing is necessary for compliance with a legal obligation to which the data controller is subject;
  • Processing is necessary to protect the vital interests of the data subject or another natural person;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, particularly if the data subject is a child.

 

Consent

By using our site, users agree to:

  • Comply with the terms set out in this privacy policy;
  • The collection, use, and storage of the data listed in this policy.

 

Collected Personal Data

Your data may be collected, with your consent, when you visit and use our site (we use trackers solely for audience measurement purposes via Google Analytics) or when you fill out a contact form.

The data that may be collected when you perform any of the above-mentioned actions includes:

  • Information about your visit: IP address, location, devices and browser software, content viewed on our site (number of pages viewed, number of visits, browsing history), links clicked on our website, date and time of access to our website.
  • Information provided through our contact form: first name, last name, email, company, phone number, message, and any other details shared via our contact form.

Please note that we only collect data that helps us achieve the purposes outlined in this privacy policy. We will not collect additional data without informing you beforehand.

 

Purposes and use of Personal Data

The personal data collected on our website will be used solely for the purposes specified in this policy or indicated on relevant pages of our site. We will not use your data beyond what we disclose.

ODW may use your personal data as a prospect, client, or user of our site for the following purposes:

  • Audience Analysis and Website Improvement
    • To track users’ browsing history to better understand their preferences and improve our services.
    • To analyze audience data and generate statistics on website traffic (number of visitors, most visited pages, time spent on the site, etc.).
    • To optimize navigation and site ergonomics to enhance the user experience.
  • Management of Requests and Business Communications
    • To process your inquiries about our services.
    • To respond to inquiries submitted via contact forms or email.
    • To arrange meetings and presentations of our services.
  • Project Management and Service Delivery
    • To ensure the follow-up of ongoing projects with our clients.
    • To formalize our services through contracts and ensure their proper execution.
    • To manage communications with our partners and service providers within the scope of assigned projects.
  • Marketing and Commercial Prospecting
    • To send you information about our offers, achievements, and updates via newsletters and email campaigns.
    • To provide personalized content based on your interests and interactions with our site.
    • To organize events, webinars, and training sessions related to our areas of expertise.
  • Customer Reviews and Testimonials
    • To collect and publish reviews about our services and performance.
    • To respond to reviews and comments posted on our website or third-party platforms.
  • Application Management and Recruitment
    • To review and assess received applications (CVs, cover letters, professional experience).
    • To organize interviews and manage the recruitment process.
    • To build a CV database, with your consent, in order to contact you for future opportunities that match your profile.
  • Data Security and Regulatory Compliance
    • To ensure the protection and confidentiality of the information collected.
    • To comply with legal and regulatory obligations regarding the processing of personal data.

 

Sharing of Personal Data

Employees

We may disclose user data to any member of our organization who reasonably needs it to fulfill the objectives outlined in this policy.

Third parties

We may share user data with the following third parties:

  • Subcontractors: To provide information necessary for processing your requests, particularly in the context of a quote request.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the specified objective.

Other disclosures

We are committed not to sell or share your data with third parties, except in the following cases:

  • If required by law;
  • If required for any legal proceedings;
  • To establish or protect our legal rights;
  • To buyers or potential buyers of this company if we seek to sell the company.

If you follow hyperlinks from our site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

 

Transfer of Personal Data outside the EU

Personal data is stored internally or on the servers of our service providers located in Europe.

Under no circumstances will we transfer your personal data to recipients outside the European Economic Area (“EEA”). Should such transfers occur and the country or third party does not benefit from an adequacy decision from the European Commission, we commit to concluding an appropriate transfer agreement to protect your personal data.

 

Retention period of Personal Data

Personal data is retained only for the duration necessary to complete the implemented processing. Once we determine that we no longer need to retain your personal data, we delete it from our systems.

User personal data will be retained for a reasonable period as outlined below:

  • Retention of data for marketing or communication purposes: three years from the date of your last contact with us.
  • Retention of data collected on the site (e.g., contact form and cookies): thirteen months from the date of collection/request receipt/cookie deposit.
  • Retention of your client data: five years from the end of our contractual relationship.

However, we may retain your personal data for a longer duration to meet our legal and regulatory obligations, even beyond the termination of the concluded contract.

We will ensure that users are informed if their data is retained longer than this duration.

 

Cookie Policy

A cookie is a small file stored on a user’s device (computer, tablet, smartphone, etc.) by a website. Its purpose is to collect data related to the user’s browsing habits.

To this end, we use an open-source script implemented on our Site to allow you to individually accept or refuse specific cookies.

If you have accepted cookies in your browser settings, the cookies embedded in the pages and content you have accessed may be temporarily stored in a designated area of your device. They will only be readable by their issuer.

The Site uses cookies that enable us to analyze traffic and personalize content. This information is shared with our analytics partners, who may combine it with other information you have provided to them or that they have collected during your use of their services.

We use the following types of cookies on our site:

  • Analytical Cookies: these cookies help us understand your interactions with our Site, such as the most visited pages, applications used, etc. These cookies may enable us to generate statistics or test different displays to improve the relevance and usability of our services.
Cookies Cookie Name Cookie Purpose Cookie Type
Google Analytics _ga Distinguishes unique visitors to the site by assigning a unique identifier to each visitor Statistics Cookies
Google Analytics _gid Stores information collected for statistical purposes Statistics Cookies

You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your web browser, but this may reduce the quality of your user experience.

 

Protection of Personal Data

All data stored in our system is securely protected and accessible only to our employees. Our employees are bound by strict confidentiality agreements, and any breach of this agreement would result in termination.

While we take all reasonable precautions to ensure the security of user data and protect users, there is always a risk of harm. The Internet as a whole can sometimes be insecure, and we cannot guarantee the security of user data beyond what is reasonably practicable.

 

Minors

Under the GDPR, individuals under the age of 15 are considered minors for data collection purposes. Minors must have the consent of a legal representative for their data to be collected, processed, and used.

 

Your Rights as a User

Under the GDPR, users have the following rights as data subjects:

  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restrict processing;
  • Right to data portability;
  • Right to object.

More information about these rights can be found in Chapter 3 (Articles 12-23) of the GDPR.

 

Modification, deletion, or dispute of Collected Data

In accordance with applicable law, you have rights regarding the processing of your personal data that we perform.
You have the right to object at any time to the processing of your personal data when it relates to marketing activities or when we process it based on the legitimate interests we pursue.

You may also object to the processing of your personal data for communication purposes at any time without providing a reason.

You can submit any request regarding your rights over your personal data. We will respond to your request promptly and always within the time limits established by applicable data protection legislation. Please note that we may retain your personal data for specific purposes when required or permitted by law.

 

Modifications

This privacy policy may be updated periodically to ensure compliance with the law and to reflect any changes in our data collection processes. We recommend that users regularly review our privacy policy to stay informed of any updates. If necessary, we may notify users by email of changes to this policy.

 

Contact

If you have questions or wish to exercise your rights, you can contact us using the following details:

  • Email: bonjour@odw.fr
  • Address: ODW, 63 rue de Lancry, 75010 Paris

For security reasons, you must provide proof of your identity, including your name, surname, phone number, and email address. This proof will be deleted once your request has been processed.

We will inform you promptly of any actions taken in response to your request, no later than one month from the receipt of your request. If necessary, we may extend this period to two months, in which case you will be informed. Please note that we may need to verify your identity when you seek to exercise your data protection rights.

You are informed that you can file a complaint with the CNIL (French Data Protection Authority) at 3 Place de Fontenoy, 75007 Paris. For more information, visit the CNIL website.

 

Last updated: December 1, 2024