OCTOPIA MARKETPLACE API
PRIVACY POLICY
For us, MAAS Octopia, it is essential to ensure the confidentiality and respect of your Personal Data by using MAAS Octopia Marketplace API website : https://developer.octopia-io.net
We protect your privacy by ensuring the protection, confidentiality, non-alteration, availability and security of the Personal Data you entrust to us through all our communication channels.
We make every effort to (i) provide you with clear and transparent information about how your Personal Data will be processed, (ii) apply the technical and organisational measures necessary to protect your Personal Data in accordance with applicable personal data protection law, (iii) retain your Personal Data only for the time necessary for the purposes of the processing determined.
Table of contents
1. DATA CONTROLLER AND HIS DPO.. 3
2. WHAT DATA ABOUT YOU IS COLLECTED ?. 4
3. WHY DO WE PROCESS YOUR DATA ?. 4
4. HOW LONG DO WE KEEP YOUR DATA ?. 6
5. HOW TO EXERCISE YOUR RIGHTS ?. 6
6. COOKIE MANAGEMENT. 8
6.1 What is a cookie ?. 8
6.2 What are cookies used for on www.cdiscount.com ?. 8
6.2.1 "Essential" cookies. 8
6.2.2 Cookies " Analytics and Personalization " cookies. 8
6.3 Manage cookies placed on your device. 8
6.3.1 The choices available with the Evidon tool 9
6.3.2 The choices available to you through your browser software 9
7. TRANSFERS OUTSIDE THE EUROPEAN UNION.. 9
8. SECURITY MEASURES. 10
9. REVIEW AND UPDATE OF THE POLICY. 10
1. DATA CONTROLLER AND HIS DPO
Octopia is a public limited company with a share capital of €6,403,294.38, registered in the Bordeaux Trade and Companies Register under number B424059822, represented by Mr Emmanuel Grenier, in his capacity as Chairman and Chief Executive Officer and whose registered office is located at 120-126, Quai de Bacalan - 33067 BORDEAUX Cedex.
MAAS Octopia publishes the MAAS Octopia Marketplace API Website and, as such, processes your Personal Data in various ways as Data Controller.
The MAAS Octopia DPO ensures the conformity of the processing of personal data carried out by MAAS Octopia. You can contact him:
- or by email sent to informatique-et-libertes@cdiscount.com
- or by post addressed to MAAS Octopia, Personal Data Protection Officer, 120-126 quai de Bacalan 33000 BORDEAUX.
2. WHAT DATA ABOUT YOU IS COLLECTED ?
When you sign up in MAAS Octopia Marketplace API Website, the information collected by MAAS Octopiaincludes mandatory information (indicated by *) or optional information:
- Identity information - this is the information we use to ensure that you are who you say you are. This includes: first name, last name, society, e-mail address, telephone number, etc.
- Contact information - this is the information we use for commercial prospecting purposes. This includes for example: telephone number, postal address, e-mail address, etc.
- Device information - this is the information we use to secure our network and improve our services and performance. This includes, for example: the IP address, the date and time of the visit, the duration of the visit on our MAAS Octopia Marketplace API Website.
- Further information regarding your society - this information are optional : website, type of society, desired services, etc.
3. WHY DO WE PROCESS YOUR DATA ?
Your Personal Data are processing for the following processing operations :
N° / REF
Principal purpose
Legal basis
Recipient
Data processing n°1
Management of developers/integrators account
Performance of the contract
Intern Recipient of MAAS Octopia
Extern Recipient :
- Service providers specialising in management of account
Data processing n°2
Management of the MAAS OctopiaMarketplace API service (access to the documentation, API key, etc.)
Performance of the contract
Intern Recipient of MAAS Octopia
- Direction MarketPlace
Data processing n°3
Management of requests exchanges with developers/integrators
Performance of the contract / compliance with a legal obligation
Intern Recipient of MAAS Octopia
Service providers specialising in customer relationship management
Data processing n°4
Management of prospecting developers/integrators
Legitimate interest
4. HOW LONG DO WE KEEP YOUR DATA ?
We keep your Personal Data to allow you to use the MAAS OctopiaMarketplace API Website on a continuous basis, for as long as necessary to carry out the processing operations referred to in paragraph 3 above and to comply with legal requirements.
Typology of purpose
Retention period (active archive)
Retention period (intermediate archive)
Purpose related to prospects
Until objection, or 3 years from collect or last contact with Prospect
No intermediate archive – deletion
Purpose related to developers/integrators
During all commercial relationship
5 years from the end of commercial relationship
5. TRANSFERS OUTSIDE THE EUROPEAN UNION
As a general rule, we store your Data within the European Union.
Exceptionally, Personal Data may be transferred outside the European Union by our service providers.
In such a case, we ensure that this transfer is carried out in accordance with the applicable regulations and guarantees an adequate level of protection of your privacy and fundamental rights (in particular by using standard contractual clauses of the European Commission, the model of which you can find by clicking on this link https://www.cnil.fr/fr/les-clauses-contractuelles-types-de-la-commision-europeenne ).
Upon simple request to our Data Protection Officer, we can provide you with more information about these transfers.
6. HOW TO EXERCISE YOUR RIGHTS ?
For requests that reach the Data Protection Officer by email or post, please indicate the email address attached to your seller account (or use it in the case of an email) as well as your full name. In the event that you are unable to find the e-mail address attached to your seller account or in the event of serious doubts about your identity, additional information relating to your identity may be requested from you in accordance with Article 12 of the DGPS.
We will send you a reply within a maximum of one (1) month following the date of receipt of your request. This period may be extended by two (2) additional months depending on the complexity and number of requests.
For the sake of transparency and simplicity, you will find below a table summarizing your rights according to the different processing operations.
A glossary of key terms is available at the beginning of the document.
Your rights
Conditions
Data processing concerned
Right of access
-
All processing of personal data
Right to rectification
It is important to note that this right only applies if:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you wish to object to the processing and there are no legitimate compelling reasons for the processing or if it is a processing operation carried out for the purpose of commercial prospecting;
- the personal data have been unlawfully processed.
All processing of personal data
Right to restriction of processing
It is important to note that this right only applies if:
- you dispute the accuracy of your Data for the duration of time allowing us to verify the accuracy of the same,
- you consider that we are processing your Data unlawfully and that you require that their use be limited rather than deleted,
- we no longer need your Data for the purposes referred to in paragraph 3 but that they are still necessary for the establishment, exercise or defense of your legal rights,
- in the event that you exercise your right to object during the period of verification as to whether the legitimate grounds we are pursuing prevail over yours.
Processing operations based on the performance of the contract, your consent or our legitimate interest.
Right to erasure
In the event of a request to delete your Data, MAAS Octopia may nevertheless keep it in the form of an intermediate archive, for the time necessary to satisfy its legal, accounting and tax obligations.
Processing operations based on the performance of the contract, your consent or our legitimate interest.
Right to object
-
Processing operations based on our legitimate interest.
Right to data portability
-
Processing operations based on your consent or the execution of the contract.
The right to formulate post-mortem guidelines
You have the right to formulate specific and general post-mortem guidelines regarding the storage, deletion and communication of your Data.
In the absence of any instructions, your heirs may contact MAAS Octopia to
- to access Data processing allowing "the organisation and settlement of the deceased's succession".
- and/or to have your Account on the MAAS Octopia Marketplace API Website closed and/or to oppose the further processing of your Data.
In any case, you have the possibility to inform us, at any time, that you do not wish, in the event of death, that your Data be communicated to a third party.
All processing of personal data
The right of complaint
You can, at any time, file a complaint with the competent supervisory authority.
All processing of personal data
7. SECURITY MEASURES
We undertake to implement appropriate technical and organisational measures to guarantee a level of security appropriate to the risk to the rights and freedoms of natural persons in the context of the processing operations referred to above.
These measures shall be defined taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing operation as well as the risks identified.
8. COOKIE MANAGEMENT
This section is dedicated to our cookie management policy on MAAS Octopia Marketplace API Website.
It allows you to learn more about the origin and use of the navigation information processed during your consultation of our MAAS Octopia Marketplace API Website and your rights.
8.1 What is a cookie ?
When consulting its MAAS Octopia Marketplace API Website, MAAS Octopia may, subject to your choices, deposit a text file on your terminal (computer, smartphone, tablet) using your browser.
This text file is a cookie. It will allow MAAS Octopia , during the validity or registration of the cookie, to identify your device during your next visits.
Only the issuer of a cookie may read or modify the information contained in the cookie.
Below you will find information about cookies that may be placed on your device while you are on the MAAS Octopia Marketplace API Website, either by MAAS Octopia or by third parties, and how you can delete/reject the registration of these cookies on your device.
8.2 What are cookies used for on https://developer.octopia-io.net
8.2.1 "Essential" cookies
These cookies are essential for navigation on the MAAS Octopia Marketplace API Website. These cookies are also necessary for tracking MAAS Octopia's activity. These cookies may be installed on your device by Cdiscount or its service providers.
8.2.2 The choices available to you through your browser software
You can configure your browser software as you wish, so that cookies are (i) accepted and stored on your device or, on the contrary, (ii) rejected.
If your browser software is set to accept cookies on your device, cookies embedded in the pages and content you have viewed will always be saved on your device.
You can configure your browser software in such a way that (i) you are offered the option of accepting or rejecting cookies from time to time, before a cookie is likely to be saved, (ii) you systematically refuse to save cookies in your device.
Warning : Any settings you may make on your browser software regarding the acceptance or rejection of cookies may affect your Internet experience and your access to certain services that require the use of these same cookies.
For example, by refusing certain essential cookies, you may no longer be able to use the MAAS Octopia Marketplace API Website.
If you choose to refuse to store cookies on your device or delete cookies stored on your device, we do not accept any responsibility for the consequences of the degraded operation of our services resulting from the inability of us to store or view the cookies necessary for their operation and that you have refused or deleted them.
9. REVIEW AND UPDATE OF THE POLICY
This policy will be updated as necessary to meet the requirements of applicable data protection regulations. It shall be reviewed at least every three (3) years.
The 8th December 2020
Validated by the MAAS Octopia DPO
GLOSSARY
For a proper understanding of this privacy policy, here are some key concepts:
Cookies : A cookie is a small text file placed on the user's hard drive by the server of the visited site or by a third party server, it contains information about the navigation performed on this site.
Personal data : Any information that directly or indirectly identifies a natural person (for example, your name, e-mail address, billing information, telephone number, date of birth).
Right of access : You have the right to ask us to confirm whether or not personal data concerning you are being processed and, if so, to access such data and:
- the reasons why we hold your personal data;
- the categories of data we hold;
- our use of your personal data;
- who has access to your personal data (and their location);
- where your personal data may be transferred;
- the length of time we keep your personal data;
- if you have not provided us with your personal data directly, how we obtained it;
- your rights under applicable laws and the possibility of limiting processing;
- the possibility of lodging a complaint with the competent supervisory authority; if we use your personal data for any automatic decision-making and how we proceed.
Right to erase : You have the right to ask us to delete any personal data concerning you.
Right to Limitation : You have the right to ask an organization to temporarily freeze the use of some of your Data, particularly during the examination of your request to exercise another right.
Right of objection : You may at any time object to the use of some of your Data by an organization by stating reasons related to your particular situation.
Right to portability : You may request the communication of part of the Data you have provided us in a machine-readable format but also the transmission of this Data to a third party of your choice.
Right of rectification : You may request the rectification of inaccurate or incomplete information about yourself (e.g. an incorrect address).
Purpose : The purpose refers to the main purpose pursued when processing your Personal Data. Your Personal Data is used for specific, explicit and legitimate purposes.
Group MAAS Octopia: refers to the company Cdiscount and all the companies controlled directly or indirectly bu Cdiscount, within the meaning of article L. 233-3 of the french commercial Code.
Basis of the treatment : To process your Personal Data MAAS Octopia has the following legal bases :
- Contract performance : we process your Personal Data when it is necessary for the performance of the contract concluded with you or for the performance of pre-contractual measures taken at your request. For example, to make the payment, you will be asked for your bank details.
- Compliance with a legal obligation : the processing of your Data may be imposed on us by the legislator. For example, the fight against terrorism
- Our legitimate interest : the processing of your Data may be necessary to pursue our legitimate interest, including ensuring that the sales experience is improved and that our business prospers.
Marketplace : The marketplace is an online platform that connects independent sellers and buyers.
Person concerned : This privacy policy applies to you if you are :
- developer or integrator, i.e. the person who has created an account on the MAAS Octopia Marketplace API Website,
- prospect developer or integrator i.e. not having created an account on the MAAS Octopia Marketplace API Website.
Data controller : this is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of the processing. MAAS Octopiais for the most part responsible for most of these processing operations.
Processing : any operation or set of operations performed or not performed using automated processes and applied to Personal Data, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, matching or interconnection, limitation, deletion or destruction.
Transfer of Personal Data : Any communication, copy or movement of Personal Data intended for processing in a third country