Privacy Policy

The company iiiData SAS (hereinafter “OCTOOP” or “we”) is committed to protecting the personal data of visitors and users (hereinafter “the User”) of its website https://octoop.com (hereinafter “the Site”) and undertakes to process it in accordance with applicable law, in particular Regulation (EU) 2016/679 of 27 April 2016, known as the “General Data Protection Regulation” or “GDPR”, and Law No 78-17 of 6 January 1978 as amended, known as the “Data Protection Act” (together “Applicable Data Protection Law”).

OCTOOP carries out data processing for which it acts as a “joint controller” jointly with its professional clients. In this capacity, OCTOOP provides a service to Clients whose use will be carried out by Users. OCTOOP also carries out certain personal-data processing operations as sole Controller. Those operations are marked “RT” in the table in Article 1 of this Policy.

Please note that OCTOOP’s entire activity is directed exclusively at professional clients (B2B). Social-media accounts that may be linked to the User’s Account (“the Account”) are not intended as personal accounts. The Site is not intended for minors.

1. Purposes of Processing, Personal Data Collected and Legal Bases

Purpose of Processing	Personal Data Collected	Legal Basis
Manage the creation and use of the User’s Account	Last name, first name, email address, telephone number, social-media account names, information contained in those accounts (notably LinkedIn: profile photograph, employer, job title, professional experiences, education)	Performance of the contract between the User/Client and OCTOOP
Manage subscription to and delivery of the Service, in accordance with OCTOOP’s Terms and Conditions of Sale and Use	Last name, first name, email address	Performance of the contract between the User/Client and OCTOOP
Manage invoicing for the Service, in accordance with OCTOOP’s Terms and Conditions of Sale and Use	Last name, first name, email address, telephone number, payment method, quote, invoice, VAT number	Performance of the contract between the User/Client and OCTOOP
Process refunds	Last name, first name, email address	Performance of the contract between the User/Client and OCTOOP
Organize platform demonstrations and conduct prospecting	Last name, first name, email address, employer	Legitimate interest of OCTOOP, in compliance with B2B commercial-prospecting rules
Provide assistance and support to the User via their Account, (via chatbot: forthcoming), and/or the contact form on the Site, and/or any other communication means (phone, email) provided by the User	Last name, first name, telephone number, call history, employer	Legitimate interest of OCTOOP in responding to User-initiated requests
Inform the User about OCTOOP’s service offerings and activities	Last name, first name, email address, telephone number, employer	User’s consent to receive OCTOOP’s newsletter
Participate in webinars organized by OCTOOP	Last name, first name, email address	Legitimate interest of OCTOOP to process your personal data for organizing the webinar you registered for
Manage contests (registration, selection of winner(s), delivery of prizes)	Last name, first name, email address	User’s consent to participate in the contest
Track and analyze Site traffic (RT)	Country of origin, type of access device, operating system and version, referral source, all or part of the IP address, trackers	User’s consent to the placement of cookies and other trackers on their browser
Statistical purposes via cookies or shortened links	Country of origin, type of access device, operating system and version, referral source, all or part of the IP address	User’s consent to the placement of cookies and other trackers on their browser
Publish customer reviews and testimonials	Last name, first name, job title, employer, miscellaneous comments, photograph	Customer’s consent to the publication of their review or testimonial on the OCTOOP Site and its social-media pages
Manage affiliation and referral programs	Referring User’s identifier	User’s consent to the placement of cookies and other trackers on their browser

Fields marked with an asterisk at the time of collection are mandatory.
Provision of mandatory personal data is necessary for OCTOOP to achieve the above purposes. Optional data enable OCTOOP to better understand the User.

2. Data Retention Periods

Personal data collected for the purpose of subscribing to the Service, including data used to create the Account, will be retained by OCTOOP for as long as necessary to properly manage the contractual and commercial relationship between the User and OCTOOP. In general:

Accounting data: 10 years
Commercial data: 5 years from the end of the contract
Prospecting and client-relationship data: 3 years
Cookie and tracker data: 13 months
Online chat data: 6 months

3. Recipients of the User’s Personal Data and Transfers

The User’s personal data are strictly confidential and destined exclusively for OCTOOP.

Except where required by law or court order, OCTOOP will never disclose, sell, lease or transmit the User’s personal data to third parties other than:

Social-media networks, for the performance of the contract between OCTOOP and the User;
Competent public authorities (judicial, supervisory, etc.);
Regulated professions (e.g. lawyers, bailiffs) involved in guarantees, debt-collection or litigation.

OCTOOP may engage subprocessors on its behalf for tasks such as:

Securing subscription payments;
Managing telephone calls;
Operating the chat service;
Hosting User data;
Performing email campaigns;
Organizing webinars.

OCTOOP ensures that selected subprocessors comply with GDPR requirements.

OCTOOP does not intend to transfer data outside the European Economic Area (EEA). If such transfers occur, OCTOOP will implement appropriate safeguards to ensure compliance and security.

If a Client wishes to grant non-occasional access to Users outside the EEA, they must request standard contractual clauses from OCTOOP.

OCTOOP is not responsible for personal data sent to or captured by third-party Platforms. Users should consult each Platform’s Terms of Use and Privacy Policy:

Instagram: https://help.instagram.com/519522125107875
Facebook: https://www.facebook.com/policy.php
LinkedIn: https://fr.linkedin.com/legal/privacy-policy
Google: https://policies.google.com/privacy?hl=fr
Matomo: https://fr.matomo.org/privacy/

4. Security Measures

OCTOOP commits to ensuring the security and integrity of the User’s personal data. OCTOOP implements and maintains appropriate technical and organizational measures to protect the Site, the Account, and generally its information system, in light of the nature of the personal data processed and the risks involved. These measures aim to:

Protect personal data against destruction, loss, alteration or unauthorized disclosure;
Ensure restoration of data availability and access within appropriate timeframes in the event of a physical or technical incident.

5. User Rights

At any time, the User may exercise the following rights over their personal data:

Right of access (Article 15 GDPR) and rectification (Article 16 GDPR), updating or completion of data;
Right to erasure (Article 17 GDPR) when data are inaccurate, incomplete, ambiguous, outdated, or unlawfully collected/used/retained;
Right to withdraw consent at any time (Article 13(2)(c) GDPR);
Right to restrict processing (Article 18 GDPR);
Right to object to processing (Article 21 GDPR);
Right to data portability for data processed automatically based on consent or contract (Article 20 GDPR);
Right to define post-mortem data handling, including designation of a third party to receive (or not) their data.

To exercise these rights, the User may contact OCTOOP’s Data Protection Officer in writing at info[@]octoop.com, subject to legal obligations and compelling grounds (e.g. contract performance, public-interest tasks, archival, research, freedom of expression, legal claims). Proof of identity may be requested.

Users may lodge a complaint with the CNIL (https://www.cnil.fr/fr/plaintes).

For any question regarding the processing of personal data by OCTOOP, the User may contact the DPO at info[@]octoop.com.

6. Cookie Collection Methods

OCTOOP uses cookies to operate the Site, improve navigation quality, identify the User on the Site, facilitate communications, and track/analyze Site traffic. A “cookie” is a small data file sent by a web server to the User’s browser and stored on the User’s device; it cannot damage the device.

Data collected via cookies are exclusively for OCTOOP and never shared with third parties.

Strictly necessary cookies are placed automatically.
Analytical/statistical cookies require the User’s consent.

To manage consent, use the CookieHub banner on the Site. If closed, reopen it by clicking the white triangle at the bottom left of any Site page to view the full list of cookies.

7. Social Networks

The Site uses social-media plugins:

Facebook®, operated by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
LinkedIn®, operated by Microsoft Corp. (599 N Mathilda Avenue, Sunnyvale, CA, USA)

When the User interacts with these plugins, their browser connects directly to the social network’s servers, which then record that the User visited the Site. To prevent a network from collecting data, the User must log out of that network before visiting the Site. Non-members may still have their IP address recorded.

OCTOOP has no control over the data collected by these plugins. Use of the plugins is governed solely by each network’s terms:

Facebook: https://fr-fr.facebook.com/policies/
LinkedIn: https://www.linkedin.com/help/linkedin/answer/1828/supprimer-le-cache-et-les-cookies?lang=fr
Instagram: https://help.instagram.com/1896641480634370

Facebook® and Instagram® are registered trademarks of Facebook Inc.
LinkedIn® is a registered trademark of Microsoft Corp.

8. Updates to This Policy

This Policy may be updated periodically to reflect changes in Applicable Data Protection Law.

Last updated: February 2025.