Personal Data Policy

WHY THIS PRIVACY POLICY?

Aware of the importance of processing personal data and in accordance with the General Data Protection Regulation (GDPR), the OGEU Group and its subsidiaries ensure, through this policy, that the manner in which personal data is collected, used and potentially transmitted to third parties is explained.

This Personal Data Policy is intended to govern the processing of data collected directly online, in particular via our OGEU GROUPE website, as well as through third‑party social networks.

 

WHO COLLECTS YOUR DATA?

The company OGEU GROUPE, registered with the Pau Trade and Companies Register under number 483 867 008, and whose registered office is located at 5 Avenue des Fontaines, 64680 OGEU‑LES‑BAINS, is responsible for the processing of personal data collected via its website, its social media accounts, as well as through the forms and pages it makes available to you.

 

WHAT PERSONAL DATA MAY WE COLLECT?

OGEU GROUPE may collect personal data directly from you or receive it from you via its website and social media, depending on the modes of interaction and communication.

OGEU GROUPE may collect the following types of data:

  • Personal contact details: last name, first name, postal address, email address, telephone number, browsing data
  • Demographic information: date of birth, age, gender, preferred products, hobbies, interests, lifestyle
  • Technical and usage data: information about the computer or mobile device and browsing activity, such as IP address, system and browser type/version, pages viewed, history, cookies/trackers, statistics on your interactions, in particular visit duration, links clicked, response time, loading errors. You may refuse certain trackers via our cookie policy
  • Contests and promotions: data related to participation, including date, frequency, responses, and prize awarded.
  • Shared information and feedback: content published, including photos, videos, stories, reviews, comments on our websites, applications, or social media, as well as information from your social profiles and satisfaction surveys
  • Communications with consumer services: calls, messages, chats (excluding banking information, except where legally required), for quality or training purposes. You are systematically informed if the call is recorded.
  • Applications: data submitted during an application (CV, education, experience, references)
  • Interactions on third-party websites: information received when you click on our advertisements on other websites to measure the effectiveness of advertising campaigns (views, clicks, reach) and to optimize our communications through technologies such as third-party cookies.
  • Sensitive data: this information is collected only in rare cases, with explicit consent and in compliance with specific regulations.

Mandatory data are identified by an asterisk. Some data are essential in order to process your request. Therefore, failure to complete the fields marked with an asterisk will prevent us from responding to you or processing your order.

OGEU GROUPE attaches particular importance to the protection of children’s privacy on the Internet. We encourage parents and guardians to accompany and monitor their children’s online activities. We collect data only with the explicit consent of a parent or guardian.

Certain entities of the OGEU Group may, with your consent, contact you for personalized communications related to the Group’s brands, using information concerning you or your child.

You have the right at any time to verify, modify, or delete data relating to your child, by following the procedures indicated in our section on your rights. This policy is part of the European legal framework, which imposes strict rules for the protection of minors’ personal data, including parental consent and measures adapted to their digital security. The principles of transparency, digital education, and parental control are essential to ensure a safe online environment for all children.

 

WHAT ARE THE PURPOSES OF THE PROCESSING AND/OR USE OF YOUR PERSONAL DATA?

OGEU GROUPE may collect data for the following purposes:

  • Responding to your contact requests and providing personalized follow-up
  • Carrying out commercial prospecting actions targeting non-customers and professional customers, in order to inform you about our offers and services
  • Placing cookies to personalize content and advertising according to your interests, measure and improve your experience on our websites, and facilitate sharing on social media (see our cookie policy)
  • Organizing and managing participation in promotional operations such as contests and competitions
  • Managing subscriptions and mailings for our newsletter
  • Fulfilling our contractual obligations, in particular the management of orders, payments, deliveries, returns, and refunds
  • Ensuring comprehensive management of the customer relationship via telephone, chat, or email, including service quality monitoring and staff training through the recording of exchanges (with prior information)
  • Managing your customer account securely
  • Réaliser des analyses statistiques pour optimiser nos services, offres et sites web
  • Prévenir la fraude et gérer les impayés
  • Handling any disputes or litigation
  • Reorganizing our internal activities to better serve you
  • Complying with applicable legal and regulatory obligations
  • Responding to requests to exercise your rights relating to your personal data (access, modification, deletion, objection, portability, etc.)

 

WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

Where OGEU GROUPE collects personal data, such data will be intended in particular for our legal entities and our teams responsible for marketing, communication, customer relationship management, and logistics.

OGEU GROUPE may share your personal data only with the following third parties:

  • Technical service providers, in particular those responsible for hosting and IT security
  • Service providers responsible for customer relationship management, such as chat service providers, satisfaction surveys, or opinion polls
  • Marketing service providers, including those belonging to the Ogeu Group, for commercial prospecting, management of contests, and advertising agencies
  • Service providers responsible for transport and delivery, which may also belong to the Ogeu Group
  • Partner companies, only with your explicit consent
  • Entities of the Ogeu Group as part of restructuring, reorganization, or business transfer processes (for example, sale, merger, or dissolution)
  • Regulated professions such as lawyers, notaries, and statutory auditors, acting within the scope of their mandates or in response to legal obligations, as well as competent judicial or administrative authorities

OGEU GROUPE may also share your personal data with other third parties only where the company is required to do so under its legal obligations or upon request from public authorities (e.g. judicial authorities).

 

HOW LONG DO WE RETAIN THE DATA?

The personal data collected are retained by OGEU GROUPE in a form that allows identification of the data subjects for a period not exceeding what is necessary in relation to the purposes for which they are processed.

Data from the prospecting database (including the sending of newsletters) are retained for up to 3 years from the date of the last contact.

Data from the customer database are retained for up to 3 years following the end of the contractual relationship and are then stored in an intermediate database for the purposes of complying with legal limitation periods.

Data collected as part of the recording of incoming and outgoing calls (where applicable) are retained for a maximum period of six months. Documents analyzing the recorded conversations may be retained for up to one year.

Data necessary for compliance with a legal obligation are retained in accordance with applicable legal provisions (in particular, but not limited to, those provided for by the Commercial Code, the Civil Code, and the Consumer Code).

 

ARE DATA TRANSFERS OUTSIDE THE EU CARRIED OUT?

OGEU GROUPE does not intend to transfer personal data outside the European Union. However, certain technical service providers may be required to process your data outside the European Economic Area.

In such cases, and in accordance with Regulation (EU) 2016/679 (“GDPR”), OGEU GROUPE would ensure that these service providers guarantee a level of protection equivalent to that required by the European Union. This is achieved in particular through the signing of the European Commission’s Standard Contractual Clauses (SCCs), or by adherence to Binding Corporate Rules, approved by a European supervisory authority.

OGEU GROUPE would also carry out an ongoing assessment of the level of protection offered by third countries receiving the data, in compliance with European case law, in particular the Schrems II ruling.

You may obtain any additional information regarding these safeguards by contacting the following email address: digital@ogeu.com.

 

WHAT ARE YOUR RIGHTS?

Any individual whose personal data are processed has the right to exercise their rights of access, rectification, erasure, objection, data portability, and restriction of the processing of their data, in accordance with Articles 15 et seq. of Regulation (EU) 2016/679 of 27 April 2016. They also have the right to withdraw their consent where processing is based on consent, as well as the right to define post-mortem directives pursuant to Article 85‑1 of Law No. 78‑17 of 6 January 1978, as amended, relating to information technology, data files, and civil liberties.

These rights may be exercised directly with OGEU GROUPE.

In accordance with applicable regulations, your request must be signed. OGEU GROUPE may require proof of the requester’s identity.

You may submit your request:

  • By email, to our Data Protection Officer, at the following address: digital@ogeu.com
  • By post, to the following address: 4 Route de Gelos, 64290 GAN

In the event of reasonable doubt as to your identity, OGEU GROUPE may ask you to provide a copy of your identity document or any other valid proof of identity. If a person other than you submits the request on your behalf, they must prove that they are legally authorized to do so, failing which the request may be rejected.

As a general rule, providing an identity document is not mandatory in order to exercise your data protection rights. However, where there is doubt, this measure helps to secure the processing of your request.

If you remain dissatisfied with the handling of your request, you may lodge a complaint with the CNIL, the French data protection authority: https://www.cnil.fr/fr/plaintes