1. Data collected

We collect personal data transparently and explicitly. As such, OCEAN PINK collects:

• Data relating to the identification of the persons concerned (civility, surname, first names, address, telephone number, e-mail addresses, etc.)
• Connection data (IP address, connection logs, etc.)

2. Purposes of processing

Each processing is carried out specifically for explicit purposes and clearly referred to on the page of the Site where the data is collected. These purposes are as follows:

• Contract management. The legal basis for this processing is the necessary execution of pre-contractual or contractual measures to which the person(s) concerned are parties (article 1.b of Regulation 2016/679 of April 26, 2016).
• Keeping the general accounts and the auxiliary accounts that may be attached to it. The legal basis for this processing is compliance with a legal obligation (article 1.c of Regulation 2016/679 of April 26, 2016).
• Customer relationship follow-up. The legal basis for this processing is the necessary execution of pre-contractual or contractual measures to which the person(s) concerned are parties (article 6.1.b of Regulation 2016/679 of April 26, 2016).
• Realization of statistics. The legal basis for this processing is the pursuit of legitimate interests of the data controller (article 6.1.f of Regulation 2016/679 of April 26, 2016).
• Getting in touch with OCEAN PINK. The legal basis for this processing is the necessary execution of pre-contractual or contractual measures to which the person(s) concerned are parties (article 1.b of Regulation 2016/679 of April 26, 2016).

OCEAN PINK reserves the right to create additional and/or complementary means of collection. As such, OCEAN PINK will specify, in accordance with the regulations, the purposes specific to the processing concerned on the data collection page.

3. Data recipients

The recipients of the data are of several orders:

• Authorized OCEAN PINK staff
• The OCEAN PINK data host
• OCEAN PINK’s subcontractors and institutional partners
• If necessary, the organizations, the legal assistants and the ministerial officers in the event of recovery of debts

These categories of recipients are supplemented by the competent administrative and judicial authorities as well as, where applicable, categories of recipients specific to each processing operation and expressly referred to in the notices displayed on the data collection page.
The transmission of personal data to recipients (regardless of their legal nature, subcontractor, data controller or simple recipient) is carried out in a secure manner and pursuant to an agreement between OCEAN PINK and each recipient. OCEAN PINK undertakes that each recipient is aware of the guiding principles for the protection of personal data and is subject to them in application of the law and/or a specific contract.

4. Data transfer

The data collected on the Site may be processed outside the European Union. If this is the case, OCEAN PINK will take all necessary measures with its subcontractors and partners to guarantee a level of protection of the data collected in accordance with the applicable regulations.
If the subcontractors and partners concerned are not located in a country with legislation considered to offer adequate protection, they will then have previously signed the “standard contractual clauses” of the European Commission or will be subject to binding internal rules. approved by the competent authorities.

5. Data retention

OCEAN PINK takes care to store your personal data either within the European Union, or in a country that guarantees a level of protection adequate to the level of legal protection provided by European Union law, or by signing with the subcontractor hosting your personal data the standard clauses of the European Commission.
As such, OCEAN PINK has taken all the guarantees in terms of compliance with the regulations. Your personal data is thus kept by OCEAN PINK in a secure manner, in accordance with the applicable regulations, for a period not exceeding that necessary with regard to the purposes for which they are processed and in no case exceeding the limitation periods provided for by applicable law.

6. Your rights

You have the following rights:

• right of access to your personal data;
• right to rectification of your personal data if they are inaccurate or incomplete;
• right of limitation under the conditions referred to in Article 18 of Regulation 2016/679 of April 26, 2016;
• right to erasure of your personal data if:
• they are no longer necessary for the purposes for which they were collected or otherwise processed;
• you withdraw your consent with regard to processing subject to consent (e.g. commercial prospecting);
• you validly object to the processing;
• they have been unlawfully processed; or a law requires it.
• right of opposition for legitimate reasons,
• right to the portability of your data,
• right to define directives relating to the fate of your personal data after your death and,
• for processing based on consent, to withdraw your consent at any time

To exercise one or more of these rights, you must provide proof of identity and contact the person in charge of data protection at OCEAN PINK, whose contact details are as follows: contact@umay.app

7. Contact details

In the event of a complaint, you can contact the CNIL (www.cnil.fr).
Any User who is a consumer within the meaning of consumer law may register on the list of opposition to cold calling on www.blocktel.gouv.fr/.

Cookies

This policy applies to cookies and other technological systems present on the digital services published by OCEAN PINK and accessible by any User via their television, computer, tablet, smartphone or any other terminal.
In accordance with the applicable legal provisions, and in particular with deliberation no. 2020-091 of September 17, 2020 adopting guidelines relating to the application of article 82 of the law of January 6, 1978 as amended to read or write operations in a user’s terminal, this policy constitutes an informative document intended for Users and in no way presumes the consent of Users.
The User is informed that, during his visits to the Site, a cookie may be installed on his navigation software. The cookie is a block of data that does not identify Users but is used to record information relating to their browsing on the Site.
Cookies are secure, they can only store information that is made available by the browser, information that the User has previously entered into the browser or that is included in page requests.
Only cookies whose exclusive purpose is to allow or facilitate communication by electronic means or which are strictly necessary for the provision of an online communication service at the express request of the User will be automatically stored or registered in the terminal equipment. of the User.
Conversely, for all other types of cookies, the User is able to give their consent independently and specifically through the settings console accessible on the Site.

• Temporary cookies contain information that is used within your browsing session. These cookies are automatically deleted when you close your browser. Nothing is stored on your terminal once your navigation is finished.
• Persistent cookies are used to store information that is used between This data allows the sites to recognize that you are a recurring User, and adapt accordingly. Persistent cookies have a long-term value which is defined by the Site, and which can vary from a few minutes to several years.

DEFINITIONS
Unless otherwise expressly specified in this DPA, the terms “Regulatory Authority”, “Personal Data”, “Data Subjects”, “Binding Corporate Rules”, “Controller”, “Processor”, “Processing” and “Personal Data Breach” will have, in this DPA, the definitions provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).
In addition, the term Laws and regulations applicable to the protection of personal data will have, in this DPA, the following definition: “laws, regulations and other national and European standards, applicable to the processing of personal data implemented works under the Contract(s), including in particular the GDPR and French law adopted in addition to or in application of the provisions of the GDPR, as well as, where applicable, the European regulations applicable to the processing of electronic communications data , the use of tracking technologies such as cookies and direct marketing (“e-Privacy” rules). The laws and regulations applicable to the protection of personal data are interpreted by the CNIL and the EDPB. »