Privacy policy
Last update: June 09, 2025
1. Preamble
This Privacy and Personal Information Collection Policy (hereinafter the "Policy") describes the way in which the professional website https://www.octoplus-consulting.com (hereinafter the "Site") collects, uses, stores and protects the personal data of professional representatives, partners or prospects (B2B) who consult it or interact with its services. It complies with Regulation (EU) 2016/679 "RGPD" and French law no. 78-17 of January 6, 1978 as amended. The practices described are based on CNIL recommendations, EDPB guidelines and applicable legal provisions.
2. Scope of application
The Policy applies to all personal data processing carried out by Octoplus Consulting as part of:
- management of web portal accounts and user areas,
- B2B marketing actions (newsletter, invitations, editorial content),
- continuous improvement of services via statistical analysis of visitor numbers.
It does not cover internal processing for human resources or supplier relations, which are covered by separate notices available on request.
3. Definitions
- Personal data: any information relating to an identified or identifiable natural person (the "Prospect" or "User").
- Processing: operation applied to data (collection, recording, storage, etc.).
- Data controller: entity that determines the purposes and means of data processing.
- Subcontractor: legal entity processing data on behalf of the Controller.
- Cookie: text file deposited on the User's terminal equipment during browsing.
These terms reproduce those of the RGPD (art. 4) and the relevant CNIL guidelines.
4. Identity of the data controller
Octoplus Consulting SAS
- SIRET: 503 102 303 00032
- Head office: 143 avenue de Kéradennec, 29000 Quimper, France
- General contact:contact@octoplus-consulting.com
Octoplus Consulting acts as Data Controller and remains your contact for any questions relating to your data.
No Data Protection Officer (DPO) is required within the meaning of Article 37 RGPD given the nature and volume of processing. Nevertheless, any request may be addressed to the above address.
5. Personal data collected
The following data may be collected via the Site's secure online form or any other means:
| Category | Details |
|---|---|
| Identification | Last name, first name |
| Professional details | E-mail address, telephone number |
| Professional information | Function or position |
No sensitive data within the meaning of Article 9 RGPD is requested. The provision of this information is necessary to benefit from the services offered. Mandatory fields are clearly indicated at the time of collection.
6. Purposes and legal basis for processing
| Purpose | Legal basis (art. 6 RGPD) | Detailed description |
|---|---|---|
| Management of accounts / users | Contract performance or legitimate interest | Creation and administration of personalized access to the web portal and technical resources required to offer services. |
| B2B marketing actions (newsletter, invitations, white papers) | Consent (opt-in) | Occasional dispatch of sector-specific information, technical content or invitations to events. Withdrawal of consent is possible at any time via the unsubscribe link or by contacting Octoplus Consulting. |
| Continuous improvement of services | Legitimate interest | Compilation of anonymized statistics from audience measurement cookies in order to optimize Site ergonomics and adapt content to visitors' expectations. |
7. Retention periods
In accordance with the principle of limiting retention (art. 5.1-e RGPD), Octoplus Consulting applies the following rules:
- Identification and contact data: 5 years after the last active contact (click on a newsletter link, response to an e-mail or account connection).
- Connection traces and technical logs: 12 months maximum.
- Consent-exempt audience measurement cookies: 13 months.
At the end of each period, data is either deleted or irreversibly anonymized to form non-identifying aggregate data.
10. Data security
Octoplus consulting implements technical and organizational measures proportionate to the risks:
- TLS 1.3 encryption of communications between the User's terminal and the servers.
- Rigorous management of access rights (strong authentication, authorization control).
- Encrypted backups and regular restore tests.
- Database access logging and monitoring.
- Periodic code reviews and vulnerability tests.
- Internal security incident management procedure and notification to CNIL within 72 hours if necessary.
11. Rights of data subjects
In accordance with Articles 15 to 22 RGPD, each person has the following rights:
- Access: obtain confirmation that data concerning him or her is being processed and receive a copy.
- Rectification: to have inaccurate or incomplete data corrected.
- Erasure ("right to be forgotten"): obtain the deletion of data under the conditions of Article 17 RGPD.
- Limitation: request the temporary suspension of processing.
- Opposition: object at any time to processing based on legitimate interest, including prospecting.
- Portability: receive data provided in a structured format or have it transmitted to a third party.
12. Procedure for exercising rights
All requests should be sent:
- by e-mail to contact@octoplus-consulting.com
- or by registered mail to the above address.
We undertake to respond within a maximum of one (1) month, extendable by two (2) months in case of complexity. In the absence of a satisfactory response, the User may lodge a complaint with the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 - France) or via the dedicated teleservice.
13. Modification of the present policy
Octoplus consulting reserves the right to update the Policy to reflect legal, technical or organizational developments. Modifications will take effect as soon as they are published on the Site; the User is invited to consult it regularly.
14. Link to Legal Notice
For additional information regarding the legal framework and company details, please refer to our Legal Notice section.