Privacy Policy

Personal data protection policy

OCEA takes the protection of your personal data very seriously. The purpose of this policy is to inform you in a transparent manner about our personal data protection practices, whether your personal data is processed through the www.ocea.fr website or as part of your relationship with the company.

OCEA undertakes to process your personal data in accordance with the provisions of the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD) and Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and freedoms (the « Data Protection Act »), which define the conditions under which personal data may be processed.

Any information processed by OCEA that directly or indirectly identifies you is considered personal data and will be processed in accordance with this policy.

Data controller and data protection officer

The company responsible for processing the data collected and processed on this website is OCEA, whose head office is located at Quai de la Cabaude, 85100 Les Sables d’Olonne. OCEA designated its Data Protection Officer (DPO), who can be contacted at privacy@ocea.fr.

Purposes ofprocessing, legal bases and retention periods

Purpose of processing

Legal basis

Shelf life

Commercial relationship management Performance of the contract and pre-contractual measures 10 years from the end of the commercial relationship or the last contact from the prospect.
Manage requests sent via the contact form

Performance of the contract

Legitimate interest

Responding to contact requests

For customers: 10 years from the end of the commercial relationship

For prospective customers: 10 years from the date of collection of the personal data or from the last contact from the prospective customer.

Site audience measurement Consent

12 months after the cookie is deposited

Recruitement

Performance of the contract/pre-contractual measures

Legitimate interest

Meeting staffing needs through a CV database

Unless you object, up to two years from the date of our last contact in the event of a negative outcome.

 

Categories of data recipients

The data you send us may be passed on to the following recipients:

  • Distribution within the Group: the data collected is intended for the OCEA departments and entities concerned by the subject of your request and may be communicated to other Group entities when such communication is necessary for the performance of the aforementioned processing operations.
  • Transmission of data to subcontractors used to provide services in connection with the above-mentioned processing operations.

Transfers of personal data outside the EU

Some recipients of personal data may be located outside the European Union. These recipient countries may or may not be recognised by the European Commission as providing an adequate level of protection for personal data. In any event, adequate safeguards will be in place to protect your personal data in accordance with the provisions of the General Data Protection Regulation. If you consent to their storage, the management of the cookies present on the site involves the transfer of data outside the European Union, and in particular to the United States, which is governed by European regulations.

Rights regarding the use of personal data

In accordance with the provisions of the RGPD, you may exercise the following rights:

  • Right of access: the right to obtain confirmation as to whether or not your personal data are being processed and to have access to them;
  • A right of rectification: the right to have inaccurate personal data rectified or incomplete data completed;
  • A right to erasure: the right to have your personal data erased, where possible;
  • A right to object: the right to object at any time to the processing of your personal data where this is based on our legitimate interests;
  • A right to withdraw your consent: where the processing of your data is based on your consent. You may exercise this right at any time without having to justify why;
  • A right to restriction: the right to request that your data be frozen for a specified period of time;
  • A right to portability: the right to receive the personal data you have provided in a structured, generally machine-readable format and to communicate it to a third party;

How to exercise your rights

To exercise your rights or to ask any questions about the processing of your data, please write to privacy@ocea.fr. If, after contacting us, you feel that your ‘Data Protection’ rights have not been respected, you may submit a complaint to the CNIL.

Update of the data protection policy

This privacy policy was published on 26/09/2024. If this policy changes, you will be informed on this page.