We ask you to carefully read this privacy policy to understand how your personal data is collected, processed and stored by OuiGroup (hereinafter “OuiGroup”, “we”, “our” and “our”), data controller within the meaning of European regulations on the protection of personal data, a simplified joint stock company with a capital of 13,500 euros, registered in the Paris Trade and Companies Register under the number 899 219 234, whose head office is located at 23 rue de Prony 75017 Paris (hereinafter “OuiGroup”, “we”, “us” and “our”)).
We can be reached at the following email address for any complaint or question regarding this privacy policy: confidentialite@ouilive.co
We receive and process a number of information, which may include personal data about you, in various ways:
Through our tracking tools and technologies such as “cookies” on our website, we track your activity and how you use our website. This is also technical data automatically collected by our cookies, such as for example your type of browser or terminal, your location or the source from which you access our site. For more information on the cookies used by OuiGroup, you can also consult our cookie policy.
We collect, process and store your personal data for the purposes and on the basis of the following legal bases:
— When you contact us via our website, by completing the forms for requests to create and/or participate in a challenge, we will process your personal data in order to contact you again, by telephone and/or by email in order to inform you of our services and commercial offers. The processing of your personal data is thus based on your prior consent for us to contact you again for commercial prospecting purposes.
— When you enter your email in order to receive our newsletter, we will process your personal data in order to send you our newsletter but also in order to inform you of our services and commercial offers. The processing of your personal data is thus based on your prior consent for us to send you our newsletter and on our legitimate interest in sharing our services and commercial offers with persons subscribed to our newsletter.
— When you participate in a promotional operation, we will process your personal data in order to process your participation but also in order to inform you of our services and commercial offers. The processing of your personal data is therefore necessary for the execution of your participation in the promotional operation in question and for our legitimate interest in sharing our services and commercial offers with the participants in our online promotional operations.
— When we or our prospecting partners obtain your personal data through legitimate sources, we will process your personal data in order to send you our services and commercial offers by email. The processing of your personal data is based here either on your prior consent to be contacted in order to receive information on our services and commercial offers, or on our legitimate interest in sharing our services and commercial offers with professionals who have been informed that their data will be used for this purpose during the initial collection, with the right to object.
— When you have accepted, when you first connect to Ouilive.co, the use by our site of tools and tracking technologies such as “cookies” for statistical or marketing purposes, we will analyze your behavior and your browsing on our website, in order to measure and improve the performance of our site and our online advertising campaigns. This processing is based here on our legitimate interest in measuring audience statistics and improving the performance of our targeted online advertising campaigns, following your acceptance of the use by Ouigroup of the types of cookies in question by Ouigroup. For more information on the cookies used by OuiGroup, you can also consult our cookie policy.
Your personal data will only be accessible by authorized persons within OuiGroup and for the purposes strictly necessary for their respective missions. These may include members of the following teams: sales department, marketing department.
Your personal data may also be shared or processed by third parties in the following situations:
— Your personal data will be stored within the infrastructures of our host OVH located in Europe, allowing us to provide access to our Ouilive.co site in compliance with the contractual conditions signed with this host and cannot derogate from the conditions of this privacy policy.
— Your personal data may be made accessible to our technical service providers, including in particular our CRM provider or our email and SMS routing providers. Some of these service providers are located in the United States, a third country not recognized by the European Commission as having an adequate level of protection in terms of personal data protection. However, we have taken care to verify that these service providers respect the confidentiality of your personal data and have concluded with them the standard contractual clauses of the European Commission in order to supervise this transfer of data to the United States.
— Third-party cookie editors allowing us to collect your connection and browsing data on Ouilive.co for statistical or marketing purposes will have access to the data processed via their tools. Some of these service providers are located in the United States, a third country not recognized by the European Commission as having an adequate level of protection in terms of personal data protection. However, we have taken care to verify that these service providers respect the confidentiality of your personal data and have concluded with them the standard contractual clauses of the European Commission in order to supervise this transfer of data to the United States. In most situations, these third-party cookie editors will only process your data in order to provide us with the service offered via these tools. Some of these third-party cookie editors, namely Google, Facebook and Linkedin, nevertheless reserve the right to reuse your data for their own account in order in particular to monitor your online browsing on the various applications and/or websites using their technology globally. Below you will find more information on the practices of the publishers concerned in terms of the protection of your data and respect for privacy:
— Your personal data may also be communicated, if necessary, to the police services (upon judicial request) or to any person legally authorized to receive this information (by order of the judge).
We take care to secure users' personal data in an adequate and appropriate manner and have taken the necessary precautions to preserve and have our host maintain the security and confidentiality of the data and in particular to prevent them from being distorted, damaged or communicated to unauthorized persons. If necessary, any possible security breach will be notified to you in strict compliance with applicable regulations.
If you have a contractual relationship with OuiGroup, your data may be archived for a maximum of five years from the expiry of the contract in question.
If you are only an OuiGroup prospect without a contractual link, your data may be kept for a maximum of three years from the last contact from you (for example, a request and/or message from you or a click on a hypertext link contained in one of our emails). If necessary, you will however continue to receive our newsletter as long as you have not taken the step of unsubscribing via the functionality provided for this purpose within each communication.
In accordance with European regulations on the protection of personal data, you have the following rights:
— A right of access allowing you at any time to know whether or not your personal data is processed by our services and when they are processed, to have access to said personal data and to the information required by law concerning the methods of processing this data,
— A right of correction allowing you to request that any inaccuracy concerning the personal data concerning you be corrected as soon as possible,
— A right to erasure, allowing you to request that your personal data be erased as soon as possible when (i) their retention is no longer necessary in view of the purposes for which they were collected (ii) you opposed the processing and therefore want them to be deleted (iii) the data has been processed unlawfully; (iv) the data must be deleted to comply with a legal obligation which is provided for either by European Union law or by French law,
— A right to limit the processing of your personal data (i) when you contest the accuracy of the personal data collected during the period allowing the accuracy of the data to be verified, (ii) when, following a treatment established as non-compliant, you prefer to limit the processing to the complete deletion of the data (iii) when the personal data is no longer necessary for the purposes of the treatment but is still necessary for the establishment, exercise or defense of legal rights; (iv) when you have opposed the processing and you want the processing to be restricted for a period of time to verify whether the legitimate reason invoked is justified,
— A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this request for portability relates to personal data that you have directly provided and concerning you and that this request for portability does not infringe the rights and freedoms of third parties,
— A right to object to the processing of your personal data, in particular for commercial prospecting purposes, for reasons relating to your particular situation and the processing in question will then be stopped unless there are legitimate and compelling reasons justifying the pursuit in accordance with applicable regulations,
— The right to define guidelines relating to the storage, deletion and communication of your personal data as of your death,
— In the event that the processing of your personal data is based on your consent, you also have the right to withdraw this consent at any time.
These rights can be exercised by contacting us directly at the following email address: confidentialite@ouilive.co
Complaints relating to the use of your personal data may, if necessary, also be sent to the Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy — TSA 80715 — 75334 PARIS CEDEX
We ask you to carefully read this privacy policy to understand how your personal data is collected, processed and stored when using the OuiLive Application (hereinafter “the Application”).
Under this privacy policy, the person responsible for processing the collection of personal data is the company OuiGroup, a simplified joint stock company with a capital of 13,500 euros, registered in the Paris Trade and Companies Register under number 899 219 234, whose head office is located at 23 rue de Prony 75017 Paris (hereinafter “OuiGroup”, “we”, “our” and “our”)).
However, when you use our Application by connecting to a dedicated space on the Application via access provided by the organization to which you belong (organization, educational institution, club/association...), some personal data concerning you will be processed by OuiGroup, acting as data controller.
We can be reached at the following email address for any complaint or question regarding this privacy policy: confidentialite@ouilive.co
We receive and process a certain amount of information, which may include personal data about you when you access and use the Application, in particular when you complete any information form on the Application or when you register or when you update your user account information.
When registering on the Application, you will be asked to enter a certain amount of personal data (first name, last name, gender, email address, profile photo) necessary to create your user account and to identify you when you connect to the Application.
When you connect to the Application, we collect your connection data, i.e. information that is automatically recorded by our servers when you access the Application or when you use it. We also collect data related to the device you use to connect: operating system and operating system version, phone model, manufacturer.
During your use of the Application, you will be able to share with other users certain data about you, such as in particular data on your sports performance and travel, in particular in the context of the sports challenges in which you decide to participate via the Application. This collection is done in particular via Android using “Pedometer or iLive”. The pedometer specific to the Application is directly connected to the sensors on your phone. Using these sensors, our pedometer is able to calculate the number of steps you take each day.
Some challenges also involve taking or sending photos and/or videos to the OuiGroup database in order to accomplish certain objectives related to these same challenges. These photos/videos can only be viewed by the OuiGroup teams for the purpose of verification and moderation and to the other participants of the challenge if the user has accepted such sharing.
Some phones do not have the sensor necessary for the proper functioning of the Application. In order to be compatible with all mobile devices, OuiGroup offers an API (application programming interface) with certain third-party applications such as in order to retrieve your physical activity data.
OuiGroup will only be able to recover the physical activity data collected by these third-party applications after having previously obtained your explicit consent to such collection. In the context of the use of these third-party applications, we will also only access data that is strictly necessary for the functioning of our Application, namely data relating to your sports performance and travel.
However, we will not access data that is not necessary for the functioning of our Application that may also be collected by these third-party applications, such as your geolocation.
This collection of your data via third-party applications can be done in different ways, depending on the service concerned:
As OuiGroup was not at the origin of the initial collection of this information, we invite you to inquire about the privacy policy and the general conditions of use specific to these third-party services.
We collect, process and store your personal data for the purposes and on the basis of the following legal bases:
— When you use the Application and create a user account, your contact details and login data will be processed and stored to allow the creation of your user account and your connection to the Application, in accordance with the commitments of our general conditions of use. The processing of your personal data is therefore necessary for the execution of the user contract entered into with OuiGroup when you decide to use our Application.
— As part of the proper administration of the Application, we may also use your contact details to send you emails concerning your registration on the Application, newsletters, technical notifications, updates, security alerts. The processing of your personal data is therefore also necessary for the execution of the user contract concluded with OuiGroup when you decide to use our Application but also based on our legitimate interest in administering our Application.
— We also process your image (photographs and videos taken during the challenges) as well as data relating to your physical activity and your performance in the challenges in which you participate. This data is processed in order to allow you to participate in the challenges organized via the Application. The processing of this data is based here on your specific consent to the collection of such data by OuiGroup. When this data is otherwise collected by the organization responsible for the challenge concerned, we will only process this data on instructions and in the capacity of subcontractor of this organization. We therefore invite you to refer to the privacy policies applicable within this organization in order to understand more precisely the purposes and legal bases for which your organization processes personal data concerning you and collects it via our Application.
Your personal data will only be accessible by authorized persons within OuiGroup and for the purposes strictly necessary for their respective missions. This may include members of the following teams: customer service, support and technical assistance.
In addition, we may share your personal data in the following situations:
— Your personal data will be stored within the infrastructures of our host located in Europe, allowing us to provide access to the Application in compliance with the contractual conditions signed with this host and cannot derogate from the conditions of this privacy policy.
— Your personal data may be made accessible to our technical service providers, including in particular our provider of analysis of error reports on the Application, as well as our email routing and push notification providers. Some of these service providers are located in the United States, a third country not recognized by the European Commission as having an adequate level of protection in terms of personal data protection. However, we have taken care to verify that these service providers respect the confidentiality of your personal data and have concluded with them the standard contractual clauses of the European Commission in order to supervise this transfer of data to the United States.
— Your personal data may also be communicated, if necessary, to the police services (upon judicial request) or to any person legally authorized to receive this information (by order of the judge).
Where applicable, it is also recalled that the organization to which you belong and which allowed you to use the Application in order to participate in a challenge will also have access to your personal data. This same organization may also collect personal data about you via the Application, for its own purposes.
We therefore also invite you to refer to the privacy policies applicable within your organization in order to understand how your organization processes personal data concerning you and how it collects them via the Application offered by OuiGroup.
In accordance with European regulations on the protection of personal data, OuiGroup has concluded a subcontracting agreement with your organization relating to the hosting and processing of your personal data on behalf of this organization.
We take care to secure users' personal data in an adequate and appropriate manner and have taken the necessary precautions to preserve and have our host maintain the security and confidentiality of the data and in particular to prevent them from being distorted, damaged or communicated to unauthorized persons. If necessary, any possible security breach will be notified to you in strict compliance with applicable regulations.
Any personal data will be destroyed immediately upon the deletion of your user account on the Application or upon the withdrawal of your consent with respect to the data collected on the basis of your consent.
Sports performances and rankings related to sports challenges on the Application are also deleted within one month from the end of said challenge.
In accordance with European regulations on the protection of personal data, you have the following rights:
— A right of access allowing you at any time to know whether or not your personal data is processed by our services and when they are processed, to have access to said personal data and to the information required by law concerning the methods of processing this data,
— A right of correction allowing you to request that any inaccuracy concerning the personal data concerning you be corrected as soon as possible,
— A right to erasure, allowing you to request that your personal data be erased as soon as possible when (i) their retention is no longer necessary in view of the purposes for which they were collected (ii) you opposed the processing and therefore want them to be deleted (iii) the data has been processed unlawfully; (iv) the data must be deleted to comply with a legal obligation which is provided for either by European Union law or by French law,
— A right to limit the processing of your personal data (i) when you contest the accuracy of the personal data collected during the period allowing the accuracy of the data to be verified, (ii) when, following a treatment established as non-compliant, you prefer to limit the processing to the complete deletion of the data (iii) when the personal data is no longer necessary for the purposes of the treatment but is still necessary for the establishment, exercise or defense of legal rights; (iv) when you have opposed the processing and you want the processing to be restricted for a period of time to verify whether the legitimate reason invoked is justified,
— A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this request for portability relates to personal data that you have directly provided and concerning you and that this request for portability does not infringe the rights and freedoms of third parties,
— A right to object to the processing of your personal data for reasons relating to your particular situation and the processing in question will then be stopped unless there are legitimate and compelling reasons justifying the continuation in accordance with the applicable regulations,
— The right to define guidelines relating to the storage, deletion and communication of your personal data as of your death,
— In the event that the processing of your personal data is based on your consent, you also have the right to withdraw this consent at any time.
These rights can be exercised by contacting us directly at the following email address: confidentialite@ouilive.co
Complaints relating to the use of your personal data may, if necessary, also be sent to the Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy — TSA 80715 — 75334 PARIS CEDEX