Omedom

Data protection policy

This data protection policy (hereinafter referred to as “the Policy“) defines the conditions under which the simplified joint stock company OMEDOM, registered in the Albi Trade and Companies Register under number 895 124 949 and whose registered office is located at La Favarié, 81170 Noailles (hereinafter referred to as “OMEDOM“) processes the personal data of persons benefiting from or wishing to benefit from the services offered on its web and mobile application (hereinafter referred to as “the Application“).

Before accessing the Application and its services, the User is invited to read the provisions below.

1. Definitions

The purpose of this Policy is to define how data is collected and processed by the Data Controller. The following terms are defined as: 

 

Customer” means the natural person subscribing to a subscription contract and/or benefiting from or wishing to benefit from the services offered on the Application, the term Customer including the potential Customer;

 

Personal Data” or “Data” means any information that directly or indirectly identifies a natural person; 

 

Data Protection Officer” or “DPO” means the person in charge of advising and controlling the Data Controller in matters of personal data protection. In this case, the OMEDOM DPO can be reached at dpo@omedom.com;

 

«Data Controller» means the natural or legal person who determines the purposes and means of processing Personal Data, in this case OMEDOM, a simplified joint-stock company registered in the Albi Trade and Companies Register under number 895 124 949 and having its registered office at La Favarie, 81170 Noailles; 

 

Processor” means the natural or legal person in charge of processing Personal Data in the name and on behalf of the Data Controller in the context of a service or service; 

 

«Processing» means any operation concerning Personal Data, regardless of the process used, computerized or not, such as the collection, recording, organization, adaptation, modification, extraction, consultation, the communication, use, dissemination or reconciliation of Data; 

 

«User» means the natural person browsing the Application.

2. Persons concerned

This Policy is intended for Users and Customers of the Application natural persons, employees and officers of Customers legal persons.

3. Purposes and legal bases of data processing

The Personal Data of Users and/or Customers are collected and processed by the Data Controller on the basis of legal grounds and to the extent strictly necessary for the achievement of the purposes below. These purposes are determined, explicit and legitimate.

 

The majority of the Treatments implemented by OMEDOM are based on the execution of the contract between OMEDOM and the User and/or the Customer. The following purposes are therefore based on this basis or the execution of pre-contractual measures : 

 

  • Processing of requests for information sent by the User and/or the Customer through the Menu, “Help and Contact”;

  • Creation and management of the User account;

  • Adding an asset to the User’s account;

  • Sharing of the property with a third party (which includes sharing of: name, surname and email address of the User/Client);

  • Generation of documents such as invoices;

  • Configuration and monitoring of the User budget on each property;

  • Monitoring of cash flow across all assets;

  • Subscription to a subscription to the Application;

  • Processing of bank data;

  • Administration of the Application;

  • Fight against fraud;

  • Prevention of possible disputes.

In the absence of certain mandatory Data (name, surname, postal code, email address and password), OMEDOM will not be able to process the request of the User or Customer, create the account and set up the requested subscription. 

The economic and financial data (income, financial situation, banking data) processed by OMEDOM are for the exclusive purpose of using the Application.

 

The Processing carried out on the basis of the consent of the User and/or the Customer include the following :

 

  • Personalization of the Application by tracking and tracking the navigation of the User and/or Customer (cookies);

  • Sending newsletters to individual customers.

  • Sending notifications to the User and/or the Client

  • Sending communications to the User and/or the Client

The User and/or the Customer have the right to withdraw their consent at any time, without prejudice to the lawfulness of the Processing carried out before the withdrawal thereof.

 

Finally, OMEDOM may process certain Data for the purposes of the legitimate interests it pursues in the context of marketing and statistical operations relating to the use of the Application and its commercial prospecting:

 

  • Evaluation and improvement of services and user experience;

  • Satisfaction surveys;

  • Sending newsletters to professional customers.

The User and/or the Customer may unsubscribe from any electronic communication at any time by clicking on the “unsubscribe” button accessible at the bottom of each communication or by unchecking the notification(s) in the Application for any notification(s) received by e-mail.

4. Data recipients

The recipients of the Data collected and processed by OMEDOM are :

  • Authorized members of its staff by reason of their duties;

  • The persons possibly in charge of the maintenance of the Application, whether internal or external to OMEDOM;

  • Providers of subscription payment solutions;

  • Providers of banking solutions; 

  • Providers of payment risk solutions;

  • Providers of Data analysis solutions.

Finally, the Data Controller may disclose User and/or Customer Data to legitimate recipients for reasons required by law.

5. Rights of users and customers

The rights of Users and/or Customers over their Data are as follows :

Right of access to data

The User and/or the Client may request confirmation from the Data Controller that their Personal Data is or is not being processed.

 

If the Data Controller actually processes the Data, the User and/or the Customer may check its accuracy by requesting a copy, readable in an understandable format, of any information that the Data Controller holds concerning them.

Right of rectification of Data

The User and/or the Customer may request the modification of their Personal Data when they are incorrect or incomplete.

Right to object to processing

The User and/or the Customer may object, for legitimate reasons, to their Personal Data being used for specific purposes.

Right to withdraw consent

The User and/or the Customer may withdraw their consent at any time when the Processing of their Personal Data is based on it.

Right to limitation of Processing

The User and/or the Customer may request that the Processing of their Personal Data be blocked for a certain period of time, including the time to examine a request for exercise of rights.

Right to erasure of Data

The User and/or the Customer may request the erasure of the Personal Data that the Data Controller holds on them, provided that compelling or legal reasons do not allow OMEDOM to retain them.

Right to give instructions on the fate of Data after death

The User and/or the Customer have the possibility to inform the Data Controller about the terms of use of his Data after his death.

Right to data portability

The User and/or the Client may request the recovery of some of their Data for their own use or for the purpose of communicating them to another body.

For any request to exercise rights, the User and/or the Client must send their requests to dpo@omedom.com

OMEDOM may request a copy of an identity document if necessary. OMEDOM undertakes to respond as soon as possible, and in any case within one (1) month from receipt of the complete request. However, this period may be extended by two (2) months in view of the complexity and number of applications.

 

In the absence of a satisfactory response from the Data Controller, the User and/or the Client are entitled to lodge a complaint with the CNIL, 3 place de Fontenoy TSA 80715/75334 Paris Cedex 07.

6. Duration of data retention

OMEDOM undertakes to respect the retention periods imposed by the regulations in force.

 

The Data processed within the framework of a subscription contract to the Application are kept for the entire duration of the latter and up to 3 (three) years after the termination thereof. 

 

The contractual elements are kept for 5 (five) years at the end of the contract on a probationary basis and the Billing Data may be kept for 10 (ten) years under a legal accounting obligation. 

 

Tax documents may be retained for up to 6 (six) years from their issuance. 

Asset Management Data may be retained for up to 5 (five) years after issuance.     

7. Data processing outside the European Union

The Personal Data processed are stored in France.

 

However, it is possible that, in the context of certain missions, certain Data may be processed by Subcontractors located outside the European Union. Concerned to protect the privacy and Personal Data of Users and/ or Customers, OMEDOM makes its best efforts to select partners offering guarantees of security and confidentiality and to set up contractual relations corresponding to regulatory standards, particularly at European level.

8. Changes to this policy

The Data Controller reserves the right to modify this Personal Data Protection Policy. In this case, an updated version will be published on the Site and in the Application and the User/Client will be informed by any means.

9. Coordinates

For any further information or any complaint relating to the use of its Data, the User/Customer may contact the OMEDOM DPO at dpo@omedom.com.