Information and access to personal data

This document is designed to inform users of the Site https://www.oriaagriculture.com (“the Site”) of how the Company ORIA AGRICULTURE (“We”) uses your personal data (“DCP”). We also explain what your rights are and how to exercise them.

The DCPs concerning users of the Site are:

  • Either collected directly from the user, for example when requesting contact by clicking on the “contact” tab or when submitting a spontaneous application by clicking on the “contact” tab accessible on the site;
  • Either collected indirectly through the use of cookies when users browse the Site.

Minors under 15 years of age are not authorized to use the services of ORIA AGRICULTURE.

  1. Data controller - Who processes your data?

The data controller is the company ORIA AGRICULTURE (SAS).

Address: 642 Chemin de Corcelles 01140 Saint-Étienne-sur-Chalaronne, France

Contact: https://www.oriaagriculture.com/contact or info@oriaagriculture.com

  1. Data Collected – What data do We collect?

  1. Personal data provided directly by the user

Contact” tab : To benefit from the Services offered by ORIA AGRICULTURE and by clicking on the “contact” tab, the user accesses a contact form which, when the fields are completed, allows them to be put in contact with the sales/marketing department of the ORIA AGRICULTURE Company.

The personal data thus collected are as follows:

  • Your name and surname
  • Your company
  • Your address
  • Your phone
  • Your activity (optional)
  • Your email

The direct collection of DCP has the following purposes:

  • To respond to your request in order to manage our commercial offers such as: Providing you with information relating to our products; Assisting you and responding to your requests; Assessing whether we can offer you a product and, if so, under what conditions; Providing products to our corporate customers;
  • To manage our customer/prospect base;
  • To monitor customer relations;
  • To manage unsolicited applications

The legal basis is as follows:

  • The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract ;
  • For commercial prospecting and marketing actions : the person concerned has consented to the processing of their personal data for one or more specific purposes or the processing is necessary for the purposes of the legitimate interests pursued by the data controller, namely informing customers and prospects and promoting Our products and services.

  1. Automatically collected data: indirect collection

When browsing the Site, ORIA AGRICULTURE may automatically collect the following data:

  • The Internet address (URL) of the Website from which the visitor accessed the Site, where applicable, via a hyperlink;
  • The date and time of the visit to the Site as well as its duration and the pages consulted;
  • The domain and server (host) from which the visitor accesses the Internet;
  • The visitor's Internet Protocol (IP) address (not stored outside of the session);
  • The operating system and browser software of the visitor's computer or mobile device/tablet;
  • Navigation, that is to say access to the different sections of the service;

Data collected through the use of cookies. A cookie is a text file placed when you visit a site and stored in a specific space on the hard drive of your computer or mobile device. Cookies are managed by your Internet browser and only the issuer of a cookie can decide to read or modify the information contained therein. A cookie has a limited period of validity. Its placement and storage on your terminal are done in compliance with the applicable legislation and subject to the choices you have expressed.

Cookies have several functions:

  • Allow you to navigate a site or application efficiently, remember your choices and the goods you wish to purchase.
  • Allow us to obtain statistics on the traffic of our site in order to optimize it and detect possible malfunctions.

The cookies placed by ORIA AGRICULTURE, subject to your choices, give us access in particular to:

  • Identifiers of the equipment you use (IP address of your computer, Android ID, Apple ID, etc.),
  • Type of operating system used by your terminal (Microsoft Windows, Apple Os, Linux, Unix, Beos , etc.),
  • Type and version of the browser software used by your terminal (Microsoft Internet Explorer, Apple Safari, Mozilla Firefox, Google Chrome, etc.),
  • Dates and times of connection to our services,
  • Address of the referring web page (“ referrer” ),
  • Browsing data on our services, content viewed.

When browsing the ORIA AGRICULTURE website, you can decide whether or not to allow cookies to be placed on your computer. When you choose not to use cookies, you may be deprived of certain features on the website.

How to disable cookies used on the Site?

Subject to any alteration of the Site's functionality, you may at any time object to the recording of cookies by deactivating them in whole or in part or configure your browser to be informed of the deposit of cookies and to be able to accept them or not (on a case-by-case basis or in whole) according to the instructions below:

  • Explorer Browser: Click the Tools button, then Internet Options. Under the General tab, Browsing History, click Settings. Then click Show Files and select the Cookie(s) you want to disable. Then close the window that contains this list of Cookies and click OK twice to return to the Internet.
  • Firefox browser: Click on the Firefox Menu icon, then on the Tools button, then Options; in the window that appears, choose Privacy and click on Delete Specific Cookies. Select the Cookies you want to disable and then delete them.
  • Safari Browser: Click the Settings button, then Preferences. In the window that appears, choose Privacy/Security, and click Show Cookies. Select the Cookies you want to disable, then click Clear or Clear All.
  • Chrome browser: Click the Google Chrome menu icon, then Settings. At the bottom of the page, click Show advanced settings. In the Privacy section, click Content settings. To disable cookies:
    - select Block all sites from storing data - click Cookies and site data, then hover over the site that created the cookie, and click the X in the right corner, or click Clear all.

The legal basis is as follows:

  • Functional cookies: Processing is necessary for the purposes of the legitimate interests pursued by the controller, namely the operation and security of the Site.
  • Marketing cookies: The data subject has consented to the processing of his or her personal data for one or more specific purposes;

The lifespan of audience measurement trackers is kept for a maximum period of 13 (thirteen) months from their collection. The information collected through these trackers is kept for a maximum period of twenty-five months.

  1. Who can access your personal data?

Our employees. The data is processed internally by persons duly authorized for this purpose and within the limits of their respective attributions.

Authorized third parties. The data may be communicated to duly authorized French and/or foreign authorities, in particular in the context of legal or administrative proceedings (including arbitrators, mediators, relevant ministries, supervisory and control authorities, all public bodies authorized to receive said data, etc.).

Our service providers (“subcontractor”). The categories of recipients are:

  • Our hosting service providers
  • Our IT service providers
  • Our external advice and CAC
  • Our transport providers
  • Our telephone, network, chat and postal mail providers
  • In the event of a merger or acquisition, the acquirer would have access to the data held by the data controller.
  • Judicial commissioners in the context of competitions
  • The mediator in the event of a request for mediation

  1. Data Security

We are committed to ensuring the security of your data by implementing enhanced data protection through the use of physical and logical security measures that comply with the rules of the art and the standards imposed on us.

  1. Transfers of DCP outside the European Economic Area (EEA)

  1. Transfer to countries offering an adequate level of protection. DCPs may be transferred from the European Union to a country that has been recognised as offering an adequate level of protection for personal data protection regulations pursuant to adequacy decisions published by the European Commission without any additional safeguards being required.

  1. Transfers to third countries. In accordance with the provisions of Articles 44 et seq. of the GDPR, any transmission of data outside the European Union:
  • Is based on an adequacy decision; or
  • Is governed by internal corporate rules (“BCR”), standard data protection clauses, a code of conduct or a certification mechanism approved by the CNIL; or
  • Is framed by ad hoc contractual clauses previously authorized by the CNIL; or meets one of the exceptions provided for in article 49 of the GDPR

  1. Data retention

Personal data are kept in a form which permits identification of the persons concerned for a period not exceeding that necessary in relation to the purposes for which they are processed.

Data may be retained further in the following cases where retention is necessary:

  • In exercising the right to freedom of expression and information,
  • In compliance with a legal obligation,
  • In the performance of a mission of public interest or relating to the exercise of official authority vested in the controller,
  • For reasons of public interest in the area of public health,
  • For archival purposes in the public interest,
  • For scientific or historical research purposes or for statistical purposes,
  • Or to the establishment, exercise or defense of legal rights.

The criteria for determining retention periods are as follows:

  • Legal provisions​ Or regulatory 
  • The doctrine and jurisprudence of the control authorities
  • References​ sectoral

The main retention periods applied:

  • Most DCP relating to our customers are kept for the entire duration of the contractual relationship and for 5 (five) years after the end of the contractual relationship.
  • With regard to prospects, the data is kept for a maximum period of 3 (three) years from their collection or from the last contact from the prospect.
  • Regarding data collected as part of an unsolicited application (CV), this data will be kept for a maximum period of 2 (two) years, unless you object.

  1. Individual rights – What are your rights over your personal data?

To find out more about your rights to control your personal data: cnil.fr

We inform you that you can exercise the following rights:

  • Right of access: you can obtain information concerning your personal data as well as a copy of this data;

  • Right of rectification: if you consider that your personal data is inaccurate or incomplete, you can request that this data be modified accordingly;

  • Right to erasure: you can request the erasure of your personal data;

  • Right to restriction of processing: you can request the restriction of the processing of your personal data;

  • Right to withdraw your consent: if you have given your consent for the processing of your personal data, you can withdraw your consent at any time;

  • Right to portability of your data: when this right is applicable, you can request communication of the personal data that you have provided to us, or when technically possible, the transfer of these to a third party;

  • Right to object: you have the right to object to the processing of your personal data for reasons relating to your particular situation.

When data is processed for prospecting purposes, you can object without reason to any commercial prospecting; To find out more about the opposition lists: https://www.cnil.fr/fr/les-listes-dopposition .

Where processing is based on your consent, you have the right to withdraw it at any time.

Except for commercial prospecting, the data controller may refuse if he demonstrates that there are legitimate and compelling reasons for the processing or for the establishment, exercise or defense of legal rights, if a contract binds you, if a legal obligation requires him to process your data, if the processing is necessary to protect the vital interests of the person concerned or another natural person.

Telephone data. The consumer is informed of his right to register on the telephone canvassing opposition list.

  • Right not to be subject to a decision based solely on automated processing (Article 22 GDPR). Where such processing is necessary for entering into, or the performance of, a contract with the data subject or based on consent, you may obtain human intervention on our part, express your point of view and contest the decision.

  • Right to define guidelines regarding the fate of your personal data after your death,

  • Right to lodge a complaint with a supervisory authority (the CNIL in France).

  1. How to exercise your rights?

You can exercise your rights directly with the data controller:

In case of reasonable doubts as to the identity of the natural person making the request referred to above, the data controller may request that additional information be provided to confirm the identity of the data subject.

These rights may be exercised directly with the data controller, who shall provide the data subject with information on the measures taken following a request made as soon as possible and in any event within one month of receipt of the request. If necessary, this period may be extended by two months, taking into account the complexity and number of requests.

To find out more about your rights , visit the CNIL website.

  1. Update

This document may be modified at any time, in particular to take into account developments in the data controller's website, regulations, the doctrine of the supervisory authorities or the implementation of new processing.

Last updated: 01/17/2025