Privacy Policy

ARTICLE 1 - PRÉAMBLE

This Privacy Policy applies to the https://www.olela.co.uk website.

The purpose of this Privacy Policy is to show the website’s users:

  • How their personal data are collected and processed. Personal data are any data that may be used to identify a User. This means their first name and surname, their age, their postal address, their e-mail address, the User’s location and even their IP address;
  • What the User’s rights are concerning these data;
  • Who is responsible for processing collected and processed personal data;
  • To whom are these data sent;
  • Possibly the website’s policy regarding cookies.

This Privacy Policy comes in addition to the Legal Notice and the General Terms and Conditions of Use.
 

ARTICLE 2 – GENERAL INFORMATION REGARDING DATA COLLECTION AND PROCESSING

In accordance with the provisions of Article 5 of European Regulation 2016/679, collecting and processing the website Users’ data must comply with the following rules:

  • Lawfulness, fairness, and transparency: data can only be collected and processed with the consent of the owner of these data. Each time personal data are collected, the User will be made aware that their data are being collected and for what reasons they are being collected;
  • Minimum necessary: collecting and processing data are carried out to meet one or several purposes as stipulated in these General Terms and Conditions of Use;
  • Data collection and processing minimisation: only data necessary for the proper execution of pursued objectives by the website are collected;
  • Reduced period of data retention: data will be retained for a limited duration, of which the User is informed. When this information cannot be communicated, the User will be informed of the criteria used to determine the retention duration;
  • Collected and processed data integrity and confidentiality: the Data Processing Manager undertakes to ensure the integrity and confidentiality of collected data.

In order to be lawful, and to be in accordance with the requirements of Article 6 of the European Regulation 2016/679, collecting and processing personal data can only take place if the process complies with at least one of the following listed conditions:

  • The User has explicitly consented to the processing;
  • Processing is required for the correct execution of a contract;
  • Processing meets a legal obligation;
  • Processing can be justified by a need linked to safeguarding the vital interests of the person concerned or another natural person;
  • Processing can be justified by a need linked to the execution of a task of public interest or comes under the scope of the exercise of a public authority;
  • Collecting and processing personal data are required for legitimate and private interest purposes that are pursued by the Data Processing Manager or a third party.
     

ARTICLE 3 – PERSONAL DATA THAT IS COLLECTED AND PROCESSED DURING WEBSITE BROWSING

a) Collected and Processed Data and the Data Collection Method

Personal data that are collected on the website www.olela.co.uk are as follows:

  • Surname, First name
  • Postal address
  • E-mail address
  • Telephone number

These data are collected when the User carries out one of the following operations on the website:

  • When making a contact request,
  • When creating a client account,
  • When booking.

The Data Processing Manager may store all collected data on the website’s IT system, and in reasonable security conditions, for 3 months.

Collecting and processing data meet the following purposes:

Location and IP address data are saved for statistical and security purposes.
 

b) Data Sent to Third Parties

Personal data collected by the website may not be sent to a third party and may not be processed by anyone other than the website’s publisher.
 

c) Data Storage

The www.olela.co.uk website is hosted by: SEQUOIASOFT, 2000 Route des Lucioles, Les Algorithmes, Bâtiment Thalès B, 06410 BIOT — www.resalys.com — France.

The hosting provider can be contacted via the following number: +33 (0) 4 92 94 10 04.

Data that are collected and processed by the website are exclusively stored and processed in France.
 

ARTICLE 4 - DATA PROCESSING MANAGER AND DATA PROTECTION OFFICER

a) Data Processing Manager

The Personal Data Processing Manager is Mr Thierry Guignard, as President of the Oléla company.

The Data Processing Manager may be contacted at: contact@olela.fr.

The Data Processing Manager is responsible for decisions about the purposes and implemented means of processing personal data.
 

b) Obligations of the Data Processing Manager

The Data Processing Manage undertakes to protect collected personal data, to not send these data to third parties without having informed the User of this, and to adhere to the purposes for which these data are collected.

The website has an SSL certificate in order to ensure that information and data transfers that take place on the website are secure operations.

A Secure Socket Layer Certificate is used to secure data that are shared between the User and the website.

Additionally, the Data Processing Manager undertakes to notify the User in the event of rectification or suppression of data unless this would entail disproportionate formalities, costs, and processes.

In the event in which the integrity, the confidentiality or the security of the User’s personal data has been breached, the Data Processing Manager undertakes to inform the User of this by all means.
 

c) Data Protection Officer

Additionally, the User is informed that the following person is the Data Protection Officer: Mr Thierry Guignard.

The role of the Data Protection Officer is to ensure the correct implementation of national and supranational provisions pertaining to collecting and processing personal data. This can sometimes be abbreviated to DPO.
 

ARTICLE 5 – USER RIGHTS

Per regulations regarding the processing of personal data, the User has the following listed rights.

In order for the Data Processing Manager to execute their request, the User undertakes to provide them with their first name, surname, and e-mail address, and if relevant, their account or subscriber number.

The Data Processing Manager is obliged to reply to the User within 30 (thirty) days maximum.
 

A. PRESENTATION OF THE USER’S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

a) Rights of Access, to Rectification and of Removal

The User may familiarise themselves with, update, modify or request removal of data about them, by following the procedure described below:

These different functionalities are available via the forms in the Trust Centre, at the bottom of each page.

If the User has a client account, they may request to have it deleted by following the procedure below:

The User can use the form available in the Trust Centre or e-mail: contact@olela.fr.


b) Right to Data Portability

The User may request to port their personal data held by the website to another website by following the procedure described below:

The User can use the form available in the Trust Centre or e-mail: contact@olela.fr.


c) Rights to Restrict to and to Object to Data Processing

The User may request to restrict or object to data processing by the website, which the website cannot refuse to accept unless the website can prove legitimate and essential reasons that may prevail over the interests, rights, and freedoms of the User.

In order to request to restrict or to object to data processing, the User must follow the procedure below:

The User can use the form available in the Trust Centre or e-mail: contact@olela.fr.


d) Right to Not Be Subject to Automated Decision-Making

In accordance with the provisions of Regulation 2016/679, the User has the right to not be subject to automated decision-making if the decision made causes legal effects that concern the User, or significantly affect the User in a comparable way.


e) Right to Choose What Happens to Data Post-Mortem

The User may decide on what happens to their collected and processed data upon their death, in accordance with law no. 2016-1321 of 7 October 2016.


f) Right to Refer to a Relevant Inspection Body

If the Data Processing Manager decides not to reply to the User’s request, and the User wishes to contest this decision, or, if the User believes that one of the rights listed above has been denied, they may refer to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr), or any other competent body.If the Data Processing Manager decides not to reply to the User’s request, and the User wishes to contest this decision, or, if the User believes that one of the rights listed above has been denied, they may refer to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr), or any other competent body.
 

B. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 and above may consent to the processing of their personal data.

If the User is a minor below the age of 15, their legal representative must agree to the collection and processing of their personal data.

The publisher of the website reserves the right to verify by all means that the User is aged 15 or above, or that they have received approval from a legal representative before browsing the website.  


ARTICLE 7 – AMENDMENT CONDITIONS OF THE PRIVACY POLICY

This Privacy Policy may be referred to at any time at the address indicated below:

The website publisher reserves the right to amend it in order to ensure it is compliant with laws in force.

The User is therefore asked to regularly refer to the Privacy Policy in order to stay informed about the latest amendments made to it.

The User shall be made aware that the last update of this Privacy Policy took place on: 16/02/2022.