Privacy Policy

At OTR3, protecting your personal data is a priority.

When you use the www.rgentec.com website (the ‘Site’) and as part of the management of our contractual relations with our customers, we may collect personal data about you.

The purpose of this policy is to inform you about the ways in which we process such data in compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data (the ‘GDPR’) and Law No. 78-17 of 6 January 1978 on data processing, data files and individual liberties (together the ‘Applicable Regulations’).

1- Who is the data controller?

When you browse our Webite or as part of the management of our contractual relations with our customers, the data controller is:

OTR3, ORGANES TISSUS REGENERATION REPARATION REMPLACEMENT, SAS registered with the RCS of Paris under number 432 373 058, whose registered office is located at 4 rue française, 75001 Paris (‘We, Us’).

2- What data do we collect?

Personal data is data that enables an individual to be identified directly or by cross-checking with other data.

The data we collect falls into the following categories:

- Identification data (surname, first name, email and postal address, phone number);

- Data relating to your orders;

- Connection data (connection logs, encrypted passwords);

- Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);

- Economic and financial data (data relating to your bank cards);

- Any information you wish to send us as part of your contact request.

Mandatory data is indicated when you provide us with your details. They are indicated by any means.

3- For what purposes, on what legal grounds and for how long do we keep your personal data?

4- Who will receive your data?

Your personal data will be accessible to :

(i) Our staff ;

(ii) Our subcontractors: hosting service provider, website creation service provider, shipping and delivery service provider, newsletter sending service provider, audience measurement and analysis service provider, e-mail service provider, secure payment service provider, invoicing tool, CRM tool, cookie management tool;

(iii) Where applicable: public and private bodies, exclusively to meet our legal obligations.

5- Is your data likely to be transferred outside the European Union?

Your data is kept and stored for the duration of the processing on the servers of the company "772424", which is located in France.

As part of the tools we use (see article on recipients for our subcontractors), your data may be transferred outside the European Union. The transfer of your data in this context is secured using the following tools:

- The data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, the country in question provides a level of protection deemed sufficient and adequate to the provisions of the GDPR;

- The data is transferred to a country whose level of data protection has not been recognised as adequate under the GDPR: in this case, the transfers are based on appropriate safeguards as indicated in Article 46 of the GDPR, tailored to each service provider, including but not limited to the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or under an approved certification mechanism.

- The data is transferred on the basis of one of the appropriate guarantees described in Chapter V of the GDPR.

6- What rights do you have over your data?

You have the following rights with regard to your personal data:

- The right to information: this is precisely why we have drawn up this policy. This right is provided for in Articles 13 and 14 of the GDPR.

- The right of access: you have the right to access all your personal data at any time, in accordance with Article 15 of the GDPR.

- The right of rectification: you have the right to rectify inaccurate, incomplete or obsolete personal data at any time in accordance with Article 16 of the GDPR.

- The right to limitation: you have the right to obtain the limitation of the processing of your personal data in certain cases defined in Article 18 of the GDPR.

- The right to deletion: you have the right to demand that your personal data be deleted, and to prohibit any future collection on the grounds set out in Article 17 of the GDPR.

- The right to file a complaint with a competent supervisory authority (such as the CNIL in France) if you believe that the processing of your personal data violates the applicable regulations, as stipulated by Article 77 of the GDPR.

- The right to set out instructions for the storage, deletion and communication of your personal data after your death.

- The right to withdraw consent at any time is stipulated in Article 7 of the GDPR. It affirms that consent can be retracted at any point, without affecting the legality of the processing that occurred before the withdrawal.

- The right to portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request that it be transferred to the recipient of your choice.

- The right to object: under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process your data despite this objection, for legitimate reasons or to defend legal claims.

You can exercise these rights by writing to us using the contact details below. We may ask you to provide us with additional information or documents to prove your identity.

7- What cookies do we use?

To find out more about how cookies are managed, please consult our Cookie Policy.

8- Contact point for exercising your rights

Contact email: contact@rgentec.com

Contact address: OTR3, 4 rue Française 75001 Paris, France

9- Amendments

This policy may be amended at any time, especially to remain compliant with regulatory, legal, editorial, or technical changes. The amendments will take effect from the date the revised version is implemented. You are encouraged to regularly review the most recent version of this policy. However, we will notify you of any substantial modifications to this privacy policy.

Effective since May 2024