WEBSITE DATA PRIVACY POLICY

Centre Esthétique de l’Océan Indien Ltee is committed to ensuring that the collection and processing of your data is carried out in a lawful, fair and transparent manner, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 1978 as amended.

The collection of personal data of its prospects and customers is limited to what is strictly necessary, in accordance with the principle of data minimization, and indicates the purposes pursued by the collection of this data, whether providing this data is optional or obligatory to manage requests and who may be aware of it.

ARTICLE 1 DEFINITIONS

The Publisher: The person, natural or legal, who publishes the online public communication services, that is to say:
The Indian Ocean Aesthetic Center, whose registered office is located at Morcellement Jhuboo – Avenue des Rougets 22304 TROU AUX BICHES – Mauritius Registered with the Business Registral under No. BRN C080081733

Phone: +230 250 50 50

Contact address: info@cceoi.com

The Site: The entire online site offered is accessible from the following URL:

The User: The person using the Site and the services.

ARTICLE 2 NATURE OF DATA COLLECTED

In connection with the use of the Site to provide information relating to

Hair transplant,

Dental care and surgery

Aesthetic medicine

Plastic and reconstructive surgery,

The Publisher may collect the following categories of data concerning its Users:
Civil status, identity, identification data (surname, first name, email, date of birth, profession, telephone number, etc.)
The Publisher undertakes to keep a written record of all categories of processing activities carried out as the controller of the aforementioned data.

ARTICLE 3 INFORMATION AND USER RIGHTS

The Publisher hereby clearly informs you about the processing of personal data that it implements within the framework of its activity, how the data is collected, used and protected.

Any User has the right to request from the data controller, i.e. the Publisher:

– Access to the personal data provided;
– Rectification or erasure of the data;
– Limitation of processing relating to the person;
– Objection to processing;
– Data portability;

ARTICLE 4 SUBCONTRACTING

The Publisher undertakes to ensure that any subcontractor provides sufficient contractual guarantees regarding the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of the European data protection regulation.

The Publisher may use one or more subcontractors to carry out specific processing activities which will be subject to the terms of this Policy. Any subcontractor will not be authorized to use a subcontractor itself without the prior written authorization of the Publisher.

ARTICLE 5 COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES

Communication to authorities based on legal obligations.

Based on legal obligations, your personal data may be disclosed in accordance with a law, regulation or by virtue of a decision of a competent regulatory or judicial authority.

In general, we undertake to comply with all legal rules that could prevent, limit or regulate the dissemination of information or data and in particular to comply with French Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms and the General Data Protection Regulation (GDPR) of the European Union.

Communication to third parties based on account settings.

Your personal data is strictly confidential and may not be disclosed to third parties, except with express consent obtained through your account settings.

Communication to third parties for commercial solicitation for equivalent products and services
If you have made a request through the contact page of our Site, we may, with our partners and occasionally, keep you informed of our new services and benefits, news and special offers, by email, by post and by telephone regarding products or services similar to the products or services which were the subject of.

ARTICLE 6 PRIOR INFORMATION FOR THE COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES IN THE EVENT OF A MERGER / ABSORPTION

Prior information and opt-out possibility before and after the merger/acquisition.

In the event that we are involved in a merger, acquisition or any other form of asset transfer, we are committed to ensuring the confidentiality of your personal data and to informing you before it is transferred or becomes subject to new privacy rules.

ARTICLE 7 DATA AGGREGATION

Aggregation with non-personal data.

We may publish, disclose and use aggregated information (information about all of our Users or specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or referenced) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.

ARTICLE 8 COLLECTION OF IDENTITY DATA

Registration and prior identification for the provision of the service

Use of the Site requires registration and prior identification. Your personal data (last name, first name, postal address, email, [complete]) are used to fulfill our legal obligations resulting from the services offered.

You will not provide false personal information or create an account for another person without their permission. Your contact information must always be accurate and up-to-date.

ARTICLE 9 COOKIES

Cookie retention period

In accordance with the French CNIL recommendations, the maximum retention period for cookies is 13 months after their first deposit in the User’s terminal, as is the duration of the validity of the User’s consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User’s consent must therefore be renewed at the end of this period.

Purpose of cookies

Cookies may be used for statistical purposes, in particular to optimize the services provided to the User, based on the processing of information concerning the frequency of access, the personalization of pages as well as the operations carried out and the information consulted.

You are informed that the Publisher may place cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of consultation, etc.) that we can read during your subsequent visits.

User’s right to refuse cookies, deactivation resulting in degraded operation of the service

You acknowledge that you have been informed that the Publisher may use cookies, and you authorize it to do so. If you do not want cookies to be used on your device, most browsers allow you to disable cookies through the settings options. However, you are informed that some services may no longer function properly.

Possible association of cookies with personal data to enable the operation of the service

The Publisher may collect browsing information through the use of cookies.

ARTICLE 10 RETENTION OF TECHNICAL DATA

Duration of retention of technical data
Technical data is kept for the period strictly necessary to achieve the purposes referred to above.

ARTICLE 11 PERIOD FOR RETENTION OF PERSONAL DATA [AND ANONYMIZATION]

Data retention for the duration of the contractual relationship

In accordance with Article 6-5° of French Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms, personal data subject to processing are not retained beyond the time necessary for the execution of the obligations defined at the time of conclusion of the contract or the predefined duration of the contractual relationship.
Retention of anonymized data beyond the contractual relationship / after account deletion
We retain personal data for the period strictly necessary to achieve the purposes described in this Policy. Beyond this period, it will be anonymized and kept for exclusively statistical purposes and will not be used for any purpose whatsoever.

Deletion of data after account deletion

Data purging methods are in place to ensure effective deletion of data as soon as the retention or archiving period necessary to achieve the determined or imposed purposes is reached. In accordance with French law n°78-17 of 6 January 1978 relating to information technology, files and freedoms, you also have the right to delete your data, which you can exercise at any time by taking.

ARTICLE 12 ACCOUNT DELETION

Account deletion on request

The User has the possibility to delete his Account at any time, by simple request to the Publisher.

ARTICLE 13 INDICATIONS IN THE EVENT OF A SECURITY BREACH DETECTED BY THE PUBLISHER

User Information in the Event of a Security Breach

We are committed to implementing all appropriate technical and organizational measures through physical and logistical security means in order to guarantee an appropriate level of security with regard to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of your personal data.

In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or of unauthorized access resulting in the realization of the risks identified above, we undertake to:

• Notify you of the incident as soon as possible if this meets a legal requirement;
• Examine the causes of the incident;
• Take necessary measures within reason to reduce the negative effects and damages that may result from said incident

Limitation of liability

Under no circumstances may the commitments defined in the point above relating to notification in the event of a security breach be equated with any recognition of fault or liability for the occurrence of the incident in question.

ARTICLE 14 TRANSFER OF PERSONAL DATA ABROAD

Transfer of data to countries with an equivalent level of protection

The Publisher undertakes to comply with the applicable regulations relating to the transfer of data to foreign countries and in particular in accordance with the following terms:

• The Publisher transfers its Users’ personal data to countries recognized as offering an equivalent level of protection.
• The Publisher transfers its Users’ personal data outside of countries recognized by the CNIL as having a sufficient level of protection.

To find out the list of these countries: https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde.

ARTICLE 15 MODIFICATION OF THE PRIVACY POLICY

In the event of modification of these terms, the Publisher undertakes not to lower the level of confidentiality substantially without prior information of the persons concerned.

ARTICLE 16 DATA PORTABILITY

The Publisher undertakes to offer you the possibility of having all of your data returned to you upon simple request. The User is thus guaranteed better control over their data, and retains the possibility of reusing it. This data must be provided in an open and easily reusable format, directly in the hands of another data controller when this is desired and technically possible.

ARTICLE 17 APPLICABLE LAW AND LANGUAGE

This Privacy Policy is written in French. In the event that it is translated into one or more languages, only the French text shall prevail in the event of a dispute. The invalidity of a clause shall not entail the invalidity of the Privacy Policy. The temporary or permanent non-application of one or more clauses herein by the Publisher shall not constitute a waiver on its part of the other clauses herein, which shall continue to be in effect.

ARTICLE 18 DISPUTES AND JURISDICTION

ANY DISPUTE TO WHICH THE PRIVACY POLICY MAY GIVE RISE, IN PARTICULAR CONCERNING ITS VALIDITY, INTERPRETATION AND EXECUTION, THEIR CONSEQUENCES AND FOLLOW-UPS WILL BE SUBMITTED TO THE COMPETENT COURTS WITHIN THE JURISDICTION OF THE CITY OF PORT-LOUIS, MAURITIUS.