Privacy Policy

Introduction

OTOY BOOKING is committed to protecting the privacy of users of its website and platform. This privacy policy describes the types of personal data we collect, how we use it, and the measures we take to protect it, in accordance with the General Data Protection Regulation (GDPR).

Data Controller

The data controller is:
OTOY BOOKING — Patxi Hiribarren
488 CHEM D AGUERRIA, 64500 ST JEAN DE LUZ
Email: contact@otoy-booking.com

Data Collected

We may collect the following data:

• Identification data: last name, first name, email address, phone number
• Professional data: company name, type of activity
• Browsing data: IP address, browser type, pages visited, visit duration
• Payment data: processed exclusively by our service provider Stripe; we do not store any banking data

Purposes of Processing

The collected data is used to:

• Provide and manage online booking services
• Process contact and demonstration requests
• Send booking confirmations and invoices
• Improve our services and user experience
• Comply with our legal and regulatory obligations

Legal Basis for Processing

The processing of your data is based on:

• Performance of a contract (provision of the booking service)
• Your consent (contact form, newsletter)
• Our legitimate interest (service improvement, security)
• Compliance with legal obligations

Data Retention Period

Personal data is retained for the period necessary to fulfill the purposes for which it was collected, and for a maximum of:

• Customer data: duration of the contractual relationship + 3 years
• Prospecting data: 3 years from the last contact
• Browsing data: 13 months

Data Sharing

Your data is never sold to third parties. It may be shared with:

• Stripe: for secure payment processing
• Hosting provider: for the technical hosting of the platform
• Technical service providers: for sending transactional emails

Data Security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, secure authentication, restricted data access, regular backups, and continuous monitoring.

Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise these rights, you can contact us at: contact@otoy-booking.com. We are committed to responding within 30 days.

You may also file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority.

Cookies

The website uses cookies that are strictly necessary for the operation of the service. No advertising or third-party tracking cookies are used. You can configure your browser to refuse cookies.

Modifications

OTOY BOOKING reserves the right to modify this privacy policy at any time. Users will be notified of any substantial changes.