Skip to content

Privacy policy

1. OUR COMMITMENT TO PERSONAL DATA PROTECTION

  1. We respect your privacy and your choices.
  2. We ensure that data protection and security issues are at the heart of everything we do.
  3. We will only send you commercial communications if you have requested them or accepted our privacy policy in our contact forms. You may change your mind at any time.
  4. We will not share or sell your data.
  5. We are committed to securing and protecting your personal data. This means that we only work with trusted partners.
  6. We are committed to being open and transparent about how we use your data.
  7. We will not use your personal data in ways that we have not previously disclosed to you.
  8. We respect your rights and constantly strive to satisfy your requests as far as possible, while respecting our own legal and operational responsibilities.

When you provide us with personal data or when we collect personal data about you, we undertake to use it in accordance with this Policy.

By providing us with your information, you confirm that you have read this Privacy Policy, which is designed to help you understand the type of personal data we collect (hereinafter “your personal data”), why we collect it, and what we do with it. References to personal data in this Privacy Policy include any information that directly or indirectly identifies you.

You understand that this Privacy Policy applies in conjunction with other policies and procedures and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and other data protection legislation.

If you have any questions or concerns about your personal data, please contact us at dpo@oneortho-medical.com.

2. WHO WE ARE

OneOrtho is a company specializing in the development of innovative digital surgical solutions and the 3D printing of intraoperative medical devices, responding to the specific needs of each patient.
We place ethics, commitment, innovation and quality at the heart of our services and manufacturing processes, in order to guarantee reliable, tailor-made solutions for our customers.

OneOrtho is responsible for the personal data you provide to us. The terms “OneOrtho”, “we”, “us” or “our” used herein refer to OneOrtho. In accordance with applicable regulations on the protection of personal data, OneOrtho is the “data controller”.

ONE ORTHO, a one-person simplified joint stock company (société par actions simplifiée unipersonnelle), with registered offices at Parc Inopolis, 206 route de Vourles, 69230 Saint-Genis-Laval, is registered with the Lyon Trade and Companies Register under number 795 284 355,

OneOrtho website: https://www.oneortho-medical.com.

3. WHAT IS PERSONAL DATA?

Personal data” refers to any information that may identify you directly (e.g., your name) or indirectly (e.g., through pseudonymized data such as a unique identifier). This means that personal data includes information such as postal/email addresses, cell phone numbers, user names, profile photos, personal preferences and purchasing habits, user-generated content, financial data and information relating to your beauty/well-being. Personal data may also include unique numerical identifiers such as the IP address of your computer or the MAC address of your mobile device, as well as cookies.

4. WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?

OneOrtho will generally only collect your personal data that is necessary to maintain our relationship as a contact and (potential) customer. Depending on our exact current and future relationship, OneOrtho may collect, use and process the following types of personal data: contact information, such as your last name, first name, e-mail address, telephone number and postal address for billing, delivery and information purposes.

We may collect personal data from you, or receive it from you, via our website, contact forms, applications, OneOrtho product pages, social networks or any other means. In some cases, you provide us with personal data directly (e.g. when you create an account, when you contact us). In other cases, we collect such data (e.g., by using cookies to understand how you use our websites/applications).

When we collect data, we mark mandatory fields with an asterisk. Some of the data we request is essential for the following reasons:

  • The performance of the contract we have entered into with you (e.g. to deliver products or to manage your payment details when you purchase software licenses from us);
  • To provide the service you have requested (e.g., to send you a newsletter you have subscribed to);
  • OneOrtho’s legitimate interests (e.g., when we send you marketing e-mails about products similar to those you have already purchased from us or send you commercial communications you have requested);
  • Compliance with legal obligations (e.g. invoicing).

Failure to complete the fields marked with an asterisk may affect our ability to offer you products and services.

5. WHO CAN ACCESS YOUR PERSONAL DATA?

Under no circumstances will OneOrtho sell your personal data to third parties.

To the extent relevant and necessary for the purposes of the processing activity, we may disclose your personal data to third party recipients with a need to know (e.g. financial institutions, to verify your means of payment and because it is necessary for the performance of the contract or postal/delivery services for the delivery of products).

In any event, OneOrtho limits access to and transfer of your personal data to trusted third-party recipients, demonstrating a sufficient level of data protection. We always make every effort to ensure that all third parties with whom we work maintain the confidentiality and security of your data.

OneOrtho remains responsible for data processing, and the third-party recipients concerned act as data processors.

We may also communicate your personal data to third parties:

  • If we proceed with the sale of a business or assets, in which case we may disclose your personal data to the prospective purchaser of such business or assets. If OneOrtho or any part of its assets is acquired by a third party, the personal data held concerning its customers and linked to these assets is one of the transferred assets. Where applicable, in the latter case, the acquirer will act as the new data controller and its personal data protection policy will govern the processing of your personal data;
  • If we are obliged to disclose or share your personal data in order to comply with a legal obligation ;
  • If we have your consent ;
  • Or if the law allows it.

6. WHERE DO WE STORE YOUR PERSONAL DATA AND FOR HOW LONG?

The data we collect from you is stored in Europe, but depending on the needs of the process, may be transferred to a country outside the European Economic Area (the “EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our service providers.

OneOrtho transfers personal data outside the EEA only in a secure manner and in compliance with applicable legislation. As some countries may not have laws governing the use and transfer of personal data, we undertake to take all necessary steps to ensure that third parties comply with the terms of this Policy.

We retain your personal data only for as long as is necessary to fulfil the purpose for which we hold the data, to meet your needs or to comply with our legal obligations.

However, depending on the type of personal data processed and the purposes of processing, the actual retention period may vary significantly. In addition, sector-specific laws and regulations apply and set minimum retention periods for personal data.

We may retain certain personal data in order to comply with our legal or regulatory obligations, to enable us to exercise our rights (e.g. to bring an action before any court) or for statistical purposes.

Except where we need to retain your personal data for statistical purposes, to establish, exercise or defend a legal claim or to the extent that we are legally required to retain a copy of your personal data, OneOrtho shall effectively delete or permanently anonymize your personal data once the original purpose of processing has been fulfilled and further retention of your personal data is no longer necessary.

The effective retention period applicable to your personal data will vary depending on whether we process your personal data as part of a contractual relationship or on the basis of your explicit consent; whether we process personal data in our legitimate interest, or whether OneOrtho is legally obliged to retain personal data for a specific period of time or to comply with specific legal requirements.

To establish how long we keep your data, we apply the following criteria:

  • If you purchase products and services, we store your personal data for the duration of our contractual relationship;
  • If you contact us to make a request, we will keep your personal data for as long as is necessary to process your request;
  • If you create an account, we keep your personal data until you ask us to delete it or after a period of inactivity (no active interaction with the brand) defined in accordance with local regulations and instructions;
  • If you have consented to receive commercial prospecting messages, we keep your personal data until you unsubscribe or until you ask us to delete them;
  • If cookies are placed on your computer, we store your data only for the time necessary to achieve their purpose (e.g. session identification cookies) and for any period defined in accordance with local regulations and instructions.

    When we no longer need to use your personal data, we delete it from our systems and files or anonymize it so that it can no longer be used to identify you.

7. IS THE SECURITY OF MY PERSONAL DATA GUARANTEED?

OneOrtho attaches great importance to the protection of your personal data, and takes all reasonable precautions to this end. We contractually require trusted third parties who handle your personal data on our behalf to do the same.

We constantly do our utmost to protect your personal data. As soon as we receive your data, we apply strict procedures and security measures to prevent unauthorized access.

8. YOUR RIGHTS AS A DATA SUBJECT

Although OneOrtho is technically responsible for data processing, ultimate control of your personal data rests with you at all times, provided that you supply us with proof of your actual identity (in order to respond to your request, we may require proof of identity).

You have the following rights:

The right to be informed

You have the right to clear, transparent, understandable and easily accessible information about how we use your personal data and about your rights. This is why we provide you with the information in this Policy.

The right of access

You have the right to access the personal data we hold about you in a commonly used format and to obtain information concerning the processing of this data.
Requests that are manifestly unfounded, excessive or repeated may not be answered.
To exercise your right of access, please contact us using the details in the “CONTACT” section below.

The right of rectification

You have the right to demand that your personal data be rectified if it is inaccurate or out of date and/or be completed if it is incomplete.
To exercise your right to rectification, please contact us using the details below.

Right to erasure/right to be forgotten

In certain cases, you have the right to have your personal data erased or deleted. This is not an absolute right, as we may be obliged to retain your personal data for legal or legitimate reasons.
If you would like us to delete your data, please contact us using the details below.

The right to object to commercial prospecting

You can unsubscribe or object to receiving our commercial prospecting messages at any time. Simply click on the “unsubscribe” link in any e-mail or communication we send you. You can also contact us using the details below.

The right to object to data processing based on legitimate interests

You may at any time object to the processing of your data where the processing is based on legitimate interest. If you wish to exercise your right to object, please contact us using the details below.

The right to withdraw consent at any time for data processing based on consent

You may withdraw your consent to the processing of your data if such processing is based on consent. Withdrawal of consent does not affect the lawfulness of the processing based on consent carried out prior to the withdrawal of consent. If you wish to withdraw your consent, please contact us using the details below.

The right to restrict processing

You have the right to request the restriction of the processing we carry out on data relating to you.
This right means that the processing of data relating to you that we carry out is limited for the time necessary to verify the accuracy in our systems, so that we can retain this data, but not use or process it.
This right applies in specific circumstances provided for by the General Data Protection Regulation, namely:

  • the accuracy of the personal data is contested by the data subject (i.e. you), for a period of time allowing the data controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject (i.e. you) objects to their erasure and demands instead that their use be restricted;
  • the data controller (i.e. OneOrtho) no longer requires the personal data for the purposes of processing, but the data is still necessary for the data subject to establish, exercise or defend legal claims;
  • the data subject (i.e. you) has objected to the processing based on the legitimate interests pursued by the controller during the verification as to whether the legitimate grounds pursued by the controller prevail over those of the data subject.

If you would like us to limit the processing, please contact us using the details below.

The right to data portability

To the extent technically possible, you may request that OneOrtho export the personal data we currently hold in a structured, commonly used and machine-readable format and transfer your personal data to another company of your choice.

The right to deactivate Cookies

You have the right to disable Cookies.
Internet browsers are usually set to accept Cookies by default, but you can easily change this by modifying your browser settings.
Many Cookies are used to improve the usability and operation of websites/applications, so disabling Cookies may prevent you from using certain parts of this site.

If you wish to restrict or block all cookies that are deposited by our websites/applications (which may prevent you from using certain parts of the site), you can do so by going to your browser settings. Your browser’s Help function will tell you how to do this. For further information, please consult the following link: https: //www.aboutcookies.org/

9.DATA PROTECTION OFFICER

For further information about the processing of your personal data and your rights, please contact us by e-mail at dpo@oneortho-medical.com. If you are not satisfied with the way we have handled your request, you have the right to request the restriction of the processing of your personal data and to lodge an appeal with the supervisory authority responsible for the protection of personal data in your country of residence.

10. CONTACT

If you have any questions or comments about the way in which we process and use your personal data, please contact our DPO at the following e-mail address dpo@oneortho-medical.com or write to us at the following address OneOrtho, Parc Inopolis – 206 route de Vourles, 69230 Saint-Genis-Laval.
If you wish to exercise any of your rights mentioned above (access, modification, deletion of your personal data), please go to our dedicated area: https: //oneortho.atlassian.net/servicedesk/customer/portal/8