▸ Privacy
Privacy policy.
This English translation is provided for convenience only. The French version, available at oratorik.com/confidentialite, is the authoritative text.
General provisions
Data controller
The controller responsible for processing personal data collected through this Site is the BOISSAVY — ORATORIK firm:
ORATORIK – BOISSAVY, SELARL (a French limited-liability professional practice company)
3, rue René Bazin — 75016 Paris
Email: contact@oratorik.com
Purposes of processing
The personal data you provide through this Site is collected for the following purposes:
- Responding to your requests for contact, information, quotes or consultations;
- Managing online appointment bookings;
- Sending you the Oratorik newsletter, if you have subscribed;
- Preparing and retaining accounting and invoicing records;
- Measuring audience and improving the Site’s operation.
Legal bases
These processing operations rely on the following legal bases, in accordance with Article 6 of the GDPR:
- Pre-contractual measures and legitimate interest — responding to requests for contact, information, quotes or consultations, and managing appointments;
- Consent — sending the newsletter (you may withdraw it at any time; every issue contains an unsubscribe link);
- Legal obligation — preparing and retaining accounting and invoicing records;
- Legitimate interest — audience measurement and improvement of the Site’s operation.
Limitation of collection
Only the data strictly necessary for each purpose is collected. No data is collected without your knowledge. No automated profiling is carried out for commercial or advertising purposes.
Data recipients
The data collected is intended for the BOISSAVY — ORATORIK firm. It may be shared with outside service providers (processors within the meaning of Article 28 of the GDPR) solely to enable ORATORIK to carry out its activities. These providers are not permitted to use your data for any other purpose.
The contact form and the online appointment booking tool are recorded and processed by Brevo (www.brevo.com), acting as a processor subject to European Union law. These services are only loaded at your request, by an explicit click on the page concerned.
Transfers outside the European Union
The Site is hosted and distributed by Cloudflare, Inc., a company established in the United States. Any transfers of data outside the European Union are governed by the appropriate safeguards provided for by the GDPR (in particular, standard contractual clauses). Your data is never sold or used to train artificial-intelligence models.
Retention periods
Data is retained for the following periods, unless a longer legal retention period applies:
| Data category | Retention period |
|---|---|
| Newsletter | Until unsubscription |
| Calendar and event data | 6 months |
| Requests for consultation, appointments or quotes | The statutory period if a matter is entrusted to the firm; 1 year in all other cases |
| Invoicing and accounting records | Statutory tax retention period (10 years) |
| Audience measurement (analytics cookies) | 13 months |
Rights of data subjects
In accordance with the General Data Protection Regulation (GDPR) and the loi Informatique et libertés of 6 January 1978, as amended in 2018 (French Data Protection Act), you have the following rights over your personal data:
- Right of access — to obtain confirmation that data concerning you is being processed and to obtain a copy of it.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of your data under the conditions provided by the GDPR.
- Right to restriction of processing — to request the temporary suspension of processing.
- Right to data portability — to receive the data you have provided in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right to object — to object, on grounds relating to your particular situation, to processing based on legitimate interest.
- Post-mortem directives — to set directives regarding the fate of your data after your death.
How to exercise your rights
To exercise any of these rights, send your request together with a copy of proof of identity to:
ORATORIK – Boissavy
3, rue René Bazin
75016 Paris
Or electronically via the contact form:
contact@oratorik.com.
Complaints to the supervisory authority
If you consider that the processing of your personal data does not comply with the GDPR, you may lodge a complaint with the national supervisory authority:
Commission nationale de l’informatique et des libertés (CNIL, France’s data protection authority)
3, place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
www.cnil.fr