Privacy Policy

This Privacy Policy applies to all internet sites, applications and means of communication in digital format provided by ORTHOPLUS.
 

Definitions :

The Editor: ORTHOPLUS SAS – 28 rue Ampère – 91430 IGNY – France – tel: +33(1) 69 41 90 28 – contact
The Site: all the website, internet pages and online services offered by the Editor
The User: the person using the site and the services

 

Nature of the data collected

When using the Site, the Editor is likely to collect the following categories of User data:
  • Civil status information, identity, identification (surname, first name, email, phone number)
  • Data relating to professional life (health professionals)
  • Login details (IP address, event logs…)
  • Geographical location data

Communicating personal data to third parties

Communicating to the authorities on the basis of legal obligations

On the basis of legal obligations, your personal data may be disclosed in application of a law, a rule or a decision by a regulatory or judiciary authority. In general, we commit to conforming to all legal rules that may prevent, limit or regulate the dissemination of information or data, and to specifically comply with the n° 78-17 act of January 6, 1978 relating to data processing, files and freedom.

Communicating to third party partners

We may make some personal data available to strategic partners working with us in order to provide products and services or market our products to clients.

 

Virality of conditions for the re-use of personal data

Commitment towards virality of conditions

When communicating your personal data to a third party, the latter is required to apply identical privacy conditions to those applying to the Site.

 

Prior information on communicating personal data to third parties in the event of a merger

Prior information and possibility to opt out before and after the merger/acquisition

Should we take part in a merger, acquisition or any other transfer of assets, we commit to guaranteeing the confidentiality of your personal data and to informing you before the data is transferred or submitted to new privacy policies.

 

Purpose of the re-use of collected personal data

To carry out tasks relating to client management in terms of

  • contracts, orders, deliveries, invoicing, accounting and more specifically managing customer accounts
  • a loyalty programme within the entity or several legal entities; managing customer relations through  satisfaction surveys, managing claims and after-sales
  • Selecting clients to carry out studies, surveys and product testing (unless consent of persons concerned has been collected under conditions laid down by Article 6, these operations must not lead to profiling sensitive data such as racial or ethnic origin, philosophical, political, union, religious, and sexual opinions or personal health)

Carrying out solicitations

  • Management of solicitations (including techniques such as normalisation, enrichment and
    deduplication)
  • Selecting personnel to carry out loyalty actions, solicitation, polling, product testing and promotion (unless consent of persons concerned has been collected under conditions laid down by Article 6, these operations must not lead to profiling sensitive data such as racial or ethnic origin, philosophical, political, union, religious, and sexual opinions or personal health)
  • Carrying out solicitations
Compiling commercial statistics
Managing requests for rights of access, correction and opposition
Managing any default of payment and litigation, provided it doesn’t relate to infractions and/or
doesn’t disentitle the person from any right, benefit or contract.
Managing people’s opinions on products, services or content

 

Data aggregation

Aggregation of non-personal data

We can publish, disclose and use aggregated data (data relative to all our Users or to groups or specific User categories that we combine in order to prevent the identification or mention of any User) and non-personal data for the purpose of sector and market analysis, demographic profiling, promotional and advertising purposes as well as other commercial purposes.

Aggregation of personal data available on the User’s social network

If you connect your account to the account of another service, the service may share your profile information, login data as well as any other information you consented to release. We may aggregate information relative to all our other Users, groups, accounts, to personal data available
about the User.

 

Collecting data

Free access

Accessing the Site does not require any inscription or prior identification. It is possible without providing any individual-related data (surname, first name, address…) We do not save any individual- related data when consulting the Site.

Inscription and prior identification in provision of service

Your nominative data (surname, first name, address, email, phone number…) is used to carry out our legal obligations resulting from delivery of goods and/or services under the end-user license agreement, warranty terms if need be or any other applicable condition.
You shall not provide any false nominative information or create an account for another person without their consent. Your contact details should always be accurate and up-to-date.

 

Collecting identifying data

Using the User’s login only to access the services

We only use your electronic logins for and during the execution of the contract.

 

Collecting terminal data

Collecting profiling data and technical data for the purpose of service provision

Some of your device’s technical data is automatically collected by the Site. This data includes your IP address, internet access provider, hardware configuration, software configuration, the type and language of your browser. Collecting this data is necessary for service provision.

Collecting technical data for advertising, commercial and statistic purposes.

Your device’s technical data is automatically collected and saved by the Site for advertising, commercial and statistic purposes. This data helps us personalise and continually improve your experience on our Site. We do not collect or keep any nominative data (surname, first name, address…) that could be related to technical data. The data collected is likely to be sold to third parties.

 

Cookies

Retention period for cookies

In accordance with the CNIL’s recommendations, the maximum length of time cookies are stored is 13 months after their initial storage on the User’s terminal, as is the length of the User’s consent to use these cookies. The lifetime of cookies is not prolonged after each visit. Therefore, the User’s consent must be renewed after this deadline.

The purpose of cookies

Cookies may be used for our statistics, in particular to optimise the service provided to the User, by treating data regarding frequency of access, page personalisation as well as operations carried out and information consulted. You are informed that the Editor is likely to place cookies on your terminal. Cookies save information relative to user navigation (the pages viewed, the time and date of the viewing…) that may be read during subsequent visits.

User’s rights to refuse cookies, deactivation resulting in degraded functioning of the service

You acknowledge having had prior notification about the Editor using cookies, and authorise it. If you do not want cookies to be used on your terminal, most browsers offer the possibility to deactivate cookies via the settings option. However, you are informed that some services are likely not to function properly.

Possible association of cookies and personal data for the functioning of the service

The Editor may collect browsing data via the use of cookies.

 

Retention of technical data

Retention period for technical data

Technical data is stored only for the time required to fulfil the purposes referred to above.

 

Retention period for personal data and anonymisation

Retention of the data for the duration of the contractual relation

In accordance with article 6-5° of the n°78-17 act of January 6, 1978 relating to data processing, files and freedom, personal data subject to processing is not stored beyond the time required to fulfil its obligations, defined when concluding the contract or the predetermined time of the contractual relation.

Retention of anonymised data beyond the contractual relation / after the account is deleted

We store personal data for the time required to fulfil the purposes described in the present TOU. Beyond that time, it will be anonymised and stored for statistical purposes only and will not be subject to commercial use of any kind.

Deleting data after deleting the account

Some data removal processes have been developed to delete data effectively once the retention or archiving period required to fulfil the determined or imposed purposes has been reached. In accordance with article 6-5° of the n°78-17 act of January 6, 1978 relating to data processing, files and freedom, you may exercise your right to delete your data at any time by contacting the Editor.

Deleting data after 3 years of inactivity

For security reasons, if you have not logged onto the Site for a period of three years, you will receive
an email inviting you to log in as soon as possible or your data will be deleted from our database.

 

Deleting the account

Deleting the account upon request

The User can delete their account at any time, simply by asking the Editor OR through the account’s deleting menu that can be found in the account’s settings, if need be.

Deleting the account in case of TOU violation

In the event of a breach of one or several provisions or any other document incorporated herein by reference, the Editor reserves the right to end or restrict your use and access to the services, your account and all Sites without prior notice and at its sole discretion.

 

Indications in case of security breach detected by the Editor

Informing the User in case of security breach

We commit to using all the appropriate technical and organizational measures so as to guarantee a level of security adapted to risks of accidental, unauthorized, or illegal access, to disclosure, alteration, loss or destruction of personal data. In the event that we are informed of any illegal access to your personal data stored on our servers or those of our service providers, or any unauthorized access resulting in the occurrence of the risks aforementioned, we commit to:
  • Informing you of the incidents as soon as possible;
  • Examining and informing you of the causes of the incident in question;
  • Taking the necessary measures within a reasonable timeline in order to reduce the negative effects and prejudice resulting from the incident.

Limitation of liability

Under no circumstances may the commitments defined hereabove relating to notifications in case of security breach be assimilated to any acknowledgement of misconduct or responsibility regarding the incident in question.

 

Transferring personal data abroad

No transfer outside the E.U.

The Editor commits not to transfer its Users’ personal data outside the E.U.

 

Modification of the TOU and privacy policy

In the event that the present TOU may be modified, we commit not to significantly lower the level of confidentiality without prior notification to the concerned parties.

We commit to informing you in case of any significant modification of the present TOU, and not to significantly lower the level of confidentiality of your data without prior notification or your consent.

 

Applicable law and appeal modalities

Application of the French law (CNIL legislation) and competence of courts

The present TOU and your use of the site are governed and construed in compliance with French laws, in particular the n°78-17 act of January 6, 1978 relating to data processing, files and freedom. The choice of applicable law does not infringe your rights as a consumer in accordance with the law applicable in your place of residence. If you are a consumer, both you and we accept to submit to the non-exclusive competence of French jurisdiction, which signifies that you can undertake action relating to the present TOU in France or any country in the E.U. in which you live. If you are a professional all the actions against us must be taken before French competence.

In the event of litigation, the parties will seek an amicable solution before taking any legal action. Should this fail, any dispute regarding the validity, interpretation and/or the execution of the present TOU must be taken before French competence even in the case of multiple parties or guarantee calls.

 

Portability of data

Portabilité des données

The Editor commits to offering you the possibility to retrieve all your data on simple request. In this way, the User is guaranteed a better control over their data and has the possibility to reuse it. This data shall be provided in an open format and be easily reusable.