General Terms of Use

GENERAL TERMS OF USE AND DATA PROTECTION POLICY

Our personal data protection policy aims to build a relationship of trust between you and our services, ensuring a positive and completely transparent experience. This policy allows us to take your requirements into account and meet your expectations.

In order to respect your trust, Ortholombaire , we guarantee as a matter of priority the respect of your personal data, as well as the confidentiality of our clients (hereinafter "Your data").

For complete transparency and to guarantee the secure use of our Ortholombaire website in all its available versions and related applications (hereinafter the " Ortholombaire Site"), we are providing information on how we process your data to ensure our services always respect your rights. In this way, we guarantee the security, confidentiality, and integrity of your privacy and data across all our platforms.

Our policy and we ourselves guarantee that all necessary precautions are taken to protect your data against disclosure, loss, or alteration. Therefore, we provide you with all the information you need to easily understand how we process your data. This data will only be kept for the time necessary for the specified management and processing purposes. You will, of course, be able to access and modify your data at any time, as it will be available in your personal account on the Ortholombaire website.

To this end, we strive to take all necessary steps to comply with applicable data protection law.

Therefore, the undersigned, Ortholombaire, hereby commits, through this personal data protection policy, to respecting the essential principles of the European General Data Protection Regulation (GDPR) and French law regarding personal data protection. This commitment is made by providing you with information concerning the existence and methods of data processing applied herein (paragraph 3), your rights regarding your data, and how we ourselves exercise these rights (paragraphs 6 and 10). All information relating to potential transfers to a third country or recipients is also provided, as well as the data retention period (paragraph 5) and the security measures in place (paragraph 9).

1. WHO ARE YOU?

When we refer to "you" in this Personal Data Protection Policy, it is simply because it is directly linked to you and concerns you as an Ortholombaire customer, if you have placed an order on the Ortholombaire website, if you have created a customer account but have not ordered any products or services, or if you have browsed as a visitor on the Ortholombaire website without having created a customer account or placed an order.

2. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

3.1. When do we collect your personal data? Your personal data may be collected if you visit the Ortholombaire website using cookies, if you create a customer account on the Ortholombaire website, if you order one of our products or services, or if you agree to subscribe to our newsletters (SMS, emails). We use your personal data to improve your browsing experience on the Ortholombaire website and to offer you a more personalized experience. This allows us to process your orders more efficiently, offer payment in installments, prevent fraud, process necessary refunds, and manage your customer reviews.

3.2. Your browsing on the Ortholombaire Site In order to allow you to browse the Ortholombaire site, we process your data with your consent as the legal basis for this.

3.3. Processing Your Orders To process and manage your orders, we use your data. We use this data to manage mediation, customer relations (including those via social media), our after-sales and remote sales services, our marketing and sales prospecting activities for the Ortholombaire website, as well as order management, deliveries, and shipping. The performance of the contract between you and us is the legal basis for processing this data. Ortholombaire 's legal obligation is the legal basis for processing data related to product recalls. Your consent or our legitimate interest is, as applicable, the legal basis for processing data for marketing and sales prospecting activities. Your consent is required for the implementation of "flash" payment.

3.4. Payment in installments For orders eligible for payment in installments and for certain customers, your data is processed to offer you this payment option. The performance of the contract between the two parties is the legal basis for this data processing. However, your consent remains the basis for processing your bank details.

3.4.1 Klarna In order to offer you Klarna's payment options, we may need to transmit your personal data, including your contact details and order information, to Klarna so that Klarna can assess your eligibility and tailor the options to your needs. Your transferred personal data will be processed in accordance with Klarna's privacy policy.

3.5. Customer reviews To be able to share your reviews with our customers and visitors and to allow you to leave your review on the Ortholombaire website we use your data on the legal basis of your consent or legitimate interest.

3.6. Payment Collection and Fraud Prevention To facilitate payment collection and combat fraud, we use your data. This also allows us to guarantee payment security. The legal basis for this processing is the performance of this contract between the two parties and the legitimate interest of Ortholombaire , as the data controller.

3.7. Ortholombaire Advertising Management Operations Ortholombaire 's advertising management operations are managed using your data. This allows us to expand our customer and prospect database, manage prospect maintenance and technical activities, compile sales statistics and advertising campaign studies, update the prospecting files of the organization responsible for managing objections to telephone marketing, solicitations, and implement our contests and lotteries or any other promotional activity, excluding online gambling and games of chance. The legal basis for the aforementioned uses is the user's consent or Ortholombaire 's legitimate interest.

4. WHERE DOES YOUR DATA GO?

Your data is transmitted to several internal Ortholombaire departments. It is not sent to third parties, except in the situations specified below: In order to process your orders, your personal data may be transmitted to several service providers specializing in banking transactions, customer relations, after-sales service, delivery, IT development, website management, or the provision of warranties or insurance. For the implementation of installment payments, your data may be shared with service providers such as payment and transaction centers (banks, etc.), call centers for managing business processes or customer experience, or, for customer reviews, with a customer feedback collection and processing manager. Ortholombaire 's advertising network is managed, using your data, for the benefit of the network's clients and advertisers.

5. DATA RETENTION

The data collected by Ortholombaire is retained only for the time and assistance necessary to implement and complete the operations mentioned in paragraph 3 of our personal data policy. We retain certain data collected by Ortholombaire for a specific period: In current archives for prospective clients, for 3 years from the last contact with the client (this data is therefore accessible to Ortholombaire departments). We do not perform intermediate archiving of this data (for data of administrative interest to certain departments, such as for litigation, retention periods are governed by applicable statutes of limitations). Regarding our orders, your data will be archived in current archives for 5 years from the end of the client's use of the orders, and in intermediate archives for 5 years from the end of the retention period in current archives. The same applies to clients. As for bank details, they are archived in current archives for the entire validity period of the bank card (plus one day). No intermediate archiving is performed for bank details. Cookies, their use, and their duration are detailed in section 7 of our policy.

6. EXERCISING YOUR RIGHTS

6.1. You have the right to request access to, modification and rectification of your Data.

6.2. You have the right to request the restriction of the processing of your Data. Important note: to do so, you must contest the accuracy of your personal data for a sufficient period to allow us to verify its conformity. Alternatively, if you believe that our use of your personal data is unlawful and you request a restriction of its use, rather than its erasure.

6.3. You have the right to request the deletion of your Data. If you request the deletion of your personal data, Ortholombaire will still have the option of retaining it in an intermediate archive format for the time necessary to fulfill its legal, accounting, and tax obligations.

6.4. You have the right to object to the processing of your data for marketing purposes. For marketing emails, you can request to modify or unsubscribe from newsletters by clicking the "unsubscribe" link available in all newsletters, or by visiting the contact page on the Ortholombaire website. For marketing SMS messages, you can unsubscribe by sending "STOP SMS" to 36007, or by visiting the contact page on the Ortholombaire website.

6.5. You have the right to specify instructions regarding the retention, deletion, and disclosure of your personal data after your death. If you have not specified such instructions, your successors and heirs may contact Ortholombaire to access information on the use of this data and to facilitate the "organization and settlement of the deceased's estate," and/or to close the account on the website and/or request that the processing of personal data cease. You may also request that your data not be disclosed to any third party in the event of your death.

6.6. You have the right to claim your right to data portability.

6.7. You have the right to withdraw your consent to processing based on this legal basis. Important note: If you decide to withdraw your consent, this will not affect the lawfulness of processing carried out before your withdrawal of consent.

6.8. You have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr) at any time. To exercise your rights, please send your complaint (including your email address, full name, a copy of your identity document, and postal address) to the Ortholombaire Data Protection Officer by email at contact@ortholombaire.com and/or by post to Ortholombaire . We will send you a response within one (1) month of receiving your complaint.

7. COOKIES

7.1. What is a cookie? When you browse a website like Ortholombaire 's, it may, depending on your settings, place a text file on your device (computer, phone, or tablet) via your browser. This text file is called a cookie. This cookie allows the website, such as Ortholombaire , to identify your device during the cookie's validity or registration period when you make another visit. Only the issuer of a cookie can read or modify the information contained within it.

7.2. What are cookies used for on Ortholombaire? Different types of cookies can be classified into categories. Some are issued directly by Ortholombaire and its service providers, but some sometimes come from third-party companies.

7.2.1. Cookies issued by Ortholombaire and its service providers. Several categories of cookies may be placed on your device when you browse our website:

  • 7.2.1.1. Essential Cookies : Essential cookies are necessary to access our website; for example, they are used to process orders. Without them, you may experience navigation problems and be unable to place orders. Essential cookies also allow Ortholombaire to track its activity. They may be placed on your device by Ortholombaire or its service providers.

  • 7.2.1.2. "Analytics and Personalization" Cookies : "Analytics and personalization" cookies are not mandatory, they will allow us to facilitate your searches, optimize your experience with us, and enable us to better target your expectations, adapt our offers, and maximize the organization of our site.

  • 7.2.1.3. Advertising Cookies : Advertising cookies are displayed in the advertising spaces on our website. The benefit for you is that your browsing experience is improved and optimized by presenting offers and advertisements relevant to you. To achieve this, advertising cookies target your expectations in real time and offer you advertising content tailored to your current preferences and interests, based on your recent browsing history on other websites. This prevents you from being shown irrelevant advertising content. Similarly, Ortholombaire prefers to show its offers and advertisements to users who are likely to be interested in them. The advertising content displayed may contain cookies issued by Ortholombaire , its service providers, or third parties through the association of a cookie with an advertiser's advertising content.

7.2.2. Cookies issued by third-party companies. Third parties using cookies on our site do so according to their own privacy policies. These cookies are not necessary for the use of our site.

7.2.3. Cookies issued by third-party applications integrated into our site. When you browse our site, we may include third-party computer applications to allow you to share content and/or your opinion from our site with others, for example, when you click on the "share" or "like" buttons from social networks. These social networks can then identify you through these buttons, even if you did not use them while browsing the site. They can do this if, during your last visit to the site, you were simultaneously logged in or active on your social network. We have no control over how they use this information, nor over the data they hold. To learn more about the use of your data and advertising content, you can visit your social networks and consult their privacy policies. For the privacy policies of the aforementioned social networks, click on the social network of your choice:

Regarding our advertising network, we remind you, as mentioned earlier, that all our advertising spaces may contain cookies from third parties (the advertiser responsible for the displayed ad, the advertiser's third-party service providers, etc.). These third parties can therefore use these cookies, and for the duration of their validity, to display ads in the spaces designated for third-party advertising, track the number of ads they display in our spaces, and understand the audience reach and number of clicks. This information allows them to claim any amounts owed to them and compile their statistics. They can also determine if your ad is the same one that previously visited another site containing one of their ads, and thus target you and personalize their content accordingly.

7.3. Options Offered by Your Browser Software Your browser software (Internet Explorer, Firefox, Google Chrome, etc.) contains numerous options that you can adjust according to your preferences. Through these options, you can choose whether or not to accept cookies on your device. However, if you choose to accept the storage of these cookies on your device, then, when you visit websites or access content that uses cookies, these cookies will be automatically stored on your device. Depending on your preferences, you can choose to activate a reminder asking you to accept or reject cookies before they are potentially stored, or refuse the storage of cookies on your device each time. However, it is important to note that the choices you make in these settings may modify or alter your browsing experience on the internet or on certain websites or services that require the use of these cookies (such as placing an order on our website, for example). In the event that you prefer to refuse these cookies on your issuer or delete those already recorded, we decline all responsibility for the consequences of the alteration of the operation of our services, which would result from the inability of our services to record or access the cookies which are used for their operation.

7.3.1. How to choose your options depending on your browser? You have different options and choices available depending on your browser. To learn more, you can consult its help menu.

8. TRANSFERS OUTSIDE THE EUROPEAN UNION

Most of the time, your data is stored within the European Union. However, when our service providers are located in countries outside the European Union, we share some of your data with third countries, such as those where the European Commission has not assessed the level of compliance. In this case, we take the necessary steps to ensure that this data sharing complies with the relevant regulations and that your privacy and fundamental rights are protected (for example, by using contractual clauses approved by the European Commission). The Data Protection Officer can provide you with more information about the data transfer upon request.

9. SECURITY MEASURES

Thanks to the technical and organizational measures we implement, we can guarantee a level of security commensurate with the risks to the rights and freedoms of natural persons, as outlined in point 2. To achieve this, we consider the origin, scope, context, costs, state of the art, purposes of the processing, and identified risks. Furthermore, we comply with the Payment Card Industry Data Security Standard (PCI DSS), demonstrating our commitment to security.

10. PROFILING AND AUTOMATED DECISION-MAKING

Due to the automated processing we use (such as profiling), you are subject to legal effects that affect you. This is essential for the conclusion or performance of the contract between you and us. This is how we can offer and implement automated customer identification and the "4x payment" option. This system is based on the analysis of various variables related to the type of products, services ordered, and customer profile. If the risk is assessed as too high based on these statistics (fraud/non-payment), then this payment method will not be offered. However, if you wish, you can request human intervention, even though the decisions are automated. This will allow you to provide your opinion and/or object to the automated decision.

11. POLICY UPDATE AND REVISION

Our policy regarding personal data will be updated whenever necessary to ensure it is always in compliance with applicable data protection regulations (at least every three (3) years).