Privacy policy

1. TYPE OF DATA PROCESSED BY ODE THROUGH THIS WEBSITE

ODE processes personal data provided by Users of the Website. Data obtained while browsing includes: "pages visited by Users within the Website, domain names and addresses of websites which the User has used to access (through referral) the Website" and information about browser type, operating system, and computer system. Data collection occurs through technical and analytical cookies.

2. PURPOSE OF DATA PROCESSING

Processing occurs under Article 6.1(b) of GDPR for:

• Statistical surveys on Website use
• Maintenance and technical assistance
• Improving Website quality and structure
• Processing contact requests by email
• Exercising rights in judicial proceedings
• Complying with legal requirements

3. NATURE OF DATA PROVISION

Users must provide data for Service purposes. Refusal may prevent service delivery. Data provision for purposes in section 2 is optional and revocable by emailing bureau@ode.maison.

4. METHODS OF PROCESSING AND STORAGE

Processing includes "collection, recording, organisation, storage, consultation, processing, alteration, selection, retrieval" and related operations. Data is processed by automated and non-automated means for the duration necessary to achieve purposes, not exceeding 10 years from collection. Only authorized persons handle data with proper security obligations.

5. ACCESS TO DATA

Data accessibility limited to:

• ODE employees and contractors
• Third-party service providers (Squarespace Inc., Aruba S.p.A.) as processors

6. DISCLOSURE OF DATA

Without express consent, ODE may disclose data to Administrative Bodies and Judicial Authorities as required by law. "The Users' data will not be distributed."

7. THIRD-PARTY WEBSITES

ODE has "no control over the content of those websites" nor access to user personal data. Third-party website owners remain sole controllers. Users should review those sites' privacy policies before providing data.

8. USER'S RIGHTS

Users possess Article 15 GDPR rights including:

• Confirmation of personal data existence
• Access to source, purposes, processing methods
• Updates, rectification, erasure, anonymization
• Right to object to processing
• Data portability
• Withdraw consent anytime
• Lodge complaints with supervisory authority

Rights exercises are "free of charge" via email to bureau@ode.maison.

9. OBJECTION

"The data subject has the right to object at any time to the processing of personal data concerning him or her" under Article 21 GDPR, particularly for direct marketing.

10. AUTOMATED DECISION-MAKING

No automated decision-making or profiling occurs under Article 22(1) and (4) GDPR.

11. CONTROLLER AND PROCESSOR

Controller: Odeya Dana Bendaud, VAT 11522000964, bureau@ode.maison

Processors: Squarespace, Inc. (web hosting) and Aruba S.p.A. (email services)

12. UPDATES TO THE PRIVACY POLICY

Policy subject to periodic updates published in this section.

13. DATE OF LAST UPDATE

Updated February 12, 2021.