GDPR

Security and Privacy Policy

Introduction

OctopusMind, in a spirit of transparency and respect for the protection of your personal data, explains how we collect and process the personal data you may be required to provide.

The term “personal data” refers to any information relating to an identified or identifiable natural person.
👉 https://www.cnil.fr/fr/definition/donnee-personnelle

Personal data collected

OctopusMind ensures that it only collects and processes data that is strictly necessary for the proper operation of its services.

The nature of the data collected varies depending on the relationship you have with OctopusMind, whether you are:

  • a visitor to one of our websites,
  • a customer,
  • a partner.

When using our services, one or more personal data items may be collected, including:

  • IP address,
  • connection and browsing data,
  • email address,
  • title, first name, last name,
  • country,
  • VAT identification number and company registration number,
  • phone number,
  • photograph,
  • password,
  • postal address,
  • links to social media pages,
  • order history,
  • complaints and incidents,
  • subscription-related information,
  • correspondence on our website.

Some data is collected automatically through your actions on the website (see Browsing data – cookies).

When using our paid services, you are considered a professional under French law:
👉 https://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000034072545

Data collected during visits to OctopusMind websites

When browsing our websites:

We may collect the following data:

  • IP address,
  • browser used and its settings (language, screen resolution, etc.),
  • pages viewed and visit dates,
  • email address if you contact us.

Data collected from customers, partners, resellers, and business introducers

As part of the use of our services, OctopusMind collects the data necessary for their operation:

  • Identity data: name, address, phone number (identification and billing),
  • Email address: customers, partners, and collaborators,
  • Payment information: monitoring of order payments.

Payment data

Payment information is managed by partner financial institutions.

Credit card numbers may be stored in intermediate archiving for 13 months in the event of a dispute, in accordance with Article L133-24 of the French Monetary and Financial Code:
👉 https://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000022434913

Browsing data (cookies)

Browsing data collected on OctopusMind websites and interfaces is used exclusively by OctopusMind.

We use cookies to:

  • improve and personalize the user experience,
  • measure audience statistics,
  • secure certain functionalities.

Cookies are files stored on your device during browsing. They do not allow the collection of personal data without your knowledge.

You may refuse cookies, but some site features may then be limited.

We also use analytics tools to:

  • measure traffic,
  • analyze browsing behavior,
  • improve content,
  • send targeted information.

Non-essential cookies require your prior consent. You can modify your preferences at any time via your browser.

Cookies may also be placed by third-party websites displaying advertisements. These third parties are responsible for their own cookie policies.

Purposes of data processing

Browsing data

  • compiling website traffic statistics,
  • storing your contact details if you have requested information.

Customer data

Collected data enables:

Refusal to provide certain data may result in limited or unavailable access to some services.

Data recipients

Data is processed by OctopusMind employees, in accordance with strict confidentiality procedures:

  • website management,
  • administrative and accounting management,
  • technical service management,
  • technical support.

OctopusMind does not sell your data and uses it solely for the promotion and delivery of its services.

Data retention

Retention periods vary depending on the nature and purpose of the data and applicable legal obligations.

Customer, partner, or reseller accounts

  • billed accounts: duration of the contract + 10 years (Article L123-22 of the French Commercial Code),
  • free accounts: 2 years after last login,
  • cookie consent requested every 12 months,
  • account deletion link included in every email.

Visitor data

Stored for 2 years after the last visit.

Information requests

  • commercial data: until unsubscribed or a maximum of 10 years,
  • non-commercial data: 2 years.

An unsubscribe link is included in every marketing email.

Data storage

Servers hosting the data are secured and located exclusively in France.

OctopusMind undertakes to inform you within 72 hours in the event of a data breach.

Data portability

Upon request, and provided the data has not been deleted, we can provide you within one month with a structured file containing your personal data.

Exercising your rights

In accordance with the GDPR (EU Regulation 2016/679), you have the following rights:

  • access,
  • rectification,
  • deletion.

You may exercise these rights by contacting:
📧 contact@octopusmind.info

Requests are processed within 30 days. Proof of identity may be required.

Data processing operations have been declared to the CNIL under reference number 1574916.
👉 https://www.cnil.fr/professionnel

You may lodge a complaint with the CNIL if necessary.

Data controller

Personal data is collected by OctopusMind, a limited liability company registered with the Nantes Trade and Companies Register under number 480 280 825,
registered office: 2 Place Saint-Pierre, 44000 Nantes – France.

Policy updates

OctopusMind reserves the right to modify this policy at any time, particularly to comply with legal and regulatory changes.

Any changes will be communicated via the website or when logging into your account.

Last updated: 09/11/2022