Opens in a new tab

Last updated: 28 September 2026

We respect your privacy. This policy explains what personal data we collect on the oneortho-medical.com website, why, on what legal basis, who we share it with, how long we keep it and how to exercise your rights. It applies in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and the amended French Law No. 78-17 of 6 January 1978, known as the “Informatique et Libertés” law.

1. Data controller

The data controller is ONE ORTHO, a single-shareholder simplified joint-stock company (SASU) registered with the Lyon Trade and Companies Register under number 795 284 355, whose registered office is located at Parc Inopolis, 206 route de Vourles, 69230 Saint-Genis-Laval, France (hereinafter “OneOrtho”, “we”).

For any question about your personal data, you can write to our data protection officer: dpo@oneortho-medical.com.

2. Data collected, purposes and legal bases

Contact and quote request forms

When you write to us through a form on the site, we collect the information you enter: last name, first name, email address, phone number, company, job title and the content of your message or request. Mandatory fields are marked with an asterisk.

  • Purpose: to respond to your request, prepare a quote and follow up on any resulting business relationship.
  • Legal basis: pre-contractual measures taken at your request and, for commercial follow-up, our legitimate interest in developing our business with healthcare professionals and industry.

Newsletter

If you subscribe to our newsletter, we use your email address to send it to you. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link included in each mailing.

Spam protection for forms: Google reCAPTCHA

Our forms are protected by Google’s reCAPTCHA service, which checks that a submission is made by a person and not by a robot. To do so, reCAPTCHA analyzes technical information about your browsing (IP address, browser type, mouse movements, time spent on the page, any Google cookies present) and sends it to Google.

  • Purpose: to secure our forms and prevent automated submissions and abuse.
  • Legal basis: our legitimate interest in protecting the site and our inboxes.
  • The use of reCAPTCHA is subject to Google’s privacy policy and terms of service.

Audience measurement: Google Analytics

With your consent, we use Google Analytics to understand how the site is used: pages viewed, visit duration, navigation paths, device type, approximate geographic origin and traffic source. These statistics help us improve the site’s content and usability. Google Analytics sets cookies (notably _ga and _ga_*) with a lifetime not exceeding 13 months.

  • Legal basis: your consent, collected through the cookie banner on your first visit. Until you have accepted, no Google Analytics cookie is set.
  • You can change your choice at any time from the cookie management link at the bottom of the page.
  • Audience measurement data is kept for 14 months in Google Analytics.

Search performance tracking: Google Search Console

We use Google Search Console to monitor the site’s presence in Google search results (queries, positions, number of clicks and impressions, indexing errors). This service sets no cookie on your device and only sends us aggregated statistical data, which cannot identify you.

Technical browsing data

Like any website, our server records technical logs (IP address, date and time of the request, page requested, browser) needed for the security and proper operation of the site. Legal basis: our legitimate interest in ensuring the security and availability of the site.

3. Cookies

A cookie is a small file placed on your device when you visit a website. The site uses:

  • strictly necessary cookies for its operation and for remembering your cookie choices, which do not require your consent;
  • security cookies related to Google reCAPTCHA on pages containing a form;
  • audience measurement cookies from Google Analytics, set only if you accept them.

You can change your preferences at any time from the cookie management link, or configure your browser to block cookies. Blocking certain cookies may prevent forms from being submitted.

4. Data recipients

Your data is intended for the OneOrtho teams in charge of handling your request. We never sell it to third parties. It may be processed on our behalf and according to our instructions by technical service providers acting as processors: the site’s host and the email delivery provider, as well as Google Ireland Limited for reCAPTCHA and Google Analytics. Finally, it may be disclosed to the authorities when required by law.

5. Transfers outside the European Union

Google’s services may involve a transfer of data to the United States. Google LLC is certified under the EU–US Data Privacy Framework, recognized by the European Commission as providing an adequate level of protection. Transfers are also governed by the European Commission’s standard contractual clauses.

6. Retention periods

  • Contact and quote requests: the time needed to process your request, then 3 years from our last exchange if no business relationship is entered into.
  • Customers: for the entire duration of the contractual relationship, then according to the applicable legal periods (10 years for accounting records).
  • Newsletter: until you unsubscribe.
  • Audience measurement cookies: 13 months maximum; associated statistical data: 14 months.
  • Technical logs: 12 months maximum.

7. Security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access or disclosure: encrypted connection (HTTPS), access restricted to authorized persons only, protection of forms against automated submissions. We contractually require the same level of protection from our processors.

8. Your rights

You have the following rights over your data:

  • right of access and rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object, in particular to direct marketing and to processing based on our legitimate interest;
  • right to portability of the data you have provided to us;
  • right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before;
  • right to set guidelines regarding what happens to your data after your death.

To exercise these rights, write to dpo@oneortho-medical.com, visit our dedicated portal or send a letter to OneOrtho, Parc Inopolis, 206 route de Vourles, 69230 Saint-Genis-Laval, France. We may ask you for proof of identity in case of reasonable doubt. We will respond within one month.

If, after contacting us, you believe that your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France, or at www.cnil.fr.

9. Changes to this policy

We may update this policy, in particular to reflect regulatory changes or new services. The date of the last update appears at the top of this page.