The purpose of this document is to inform you of our commitments regarding respect for your privacy and the protection of your personal data.

Who Is the Data Controller?

Owebia is the controller of the personal data it collects.

Owebia is an Entreprise Individuelle (sole proprietorship) registered under number 501 917 074, whose registered office is located at 18 avenue Roger Salengro, 69100 Villeurbanne.

For What Purposes Is Your Personal Data Collected?

We process your personal data for the following purposes:

  • Managing orders, licenses and the customer relationship
    We process personal data to provide our customers with the products and services we offer, and access to their updates.
    Legal basis: performance of a contract.
  • Managing invoices
    We keep invoices and other legal documents for the prescribed period.
    Legal basis: legal obligation.
  • Sending you the notifications you ask for
    New versions of the modules you follow, new modules, modules in beta, promotions: only those you turned on, in the “My notifications” page of your account, on a product page or when ordering. Nothing is turned on without your consent.
    Legal basis: consent, which you can withdraw at any time in the “My notifications” page or through the link in each email.
  • Informing you of changes to the store and to your account
    Occasionally, an email to our customers about what concerns them (for example the announcement of a new site). A marketing email about products or services similar to those bought includes a link to object to it; beyond that, none without your consent.
    Legal basis: legitimate interest.
  • Securing our sites
    Our servers keep technical logs (IP address, pages requested) used to detect and block cyberattacks.
    Legal basis: legitimate interest.

What Personal Data Do We Collect?

For the purposes above, we collect the following data:

  • identity and contact data: last name, first name, email address, company and company identifier, billing address;
  • order data: products bought, domains of the licenses, payments (without your bank details, entered with the payment provider);
  • notification data: modules and topics followed, emails sent (date, objection if any);
  • technical data: IP address and pages requested, in the server logs.

Cookies and Other Trackers

Our sites only use trackers strictly necessary for their operation, which the law exempts from consent: a session cookie, which enables signing in to the customer area and keeps the cart, and, in your browser, your display preferences (light or dark theme, layout of the modules). They use no audience measurement, advertising or social network cookies.

You can configure your browser to delete or block these trackers; signing in to the customer area and the cart then no longer work.

Who Has Access to Your Personal Data?

We take all necessary measures to ensure the security and confidentiality of your personal data. Only authorized persons have access to it, within the limits of their authorizations.

We pass on the data needed for their task:

  • to the payment provider you choose, Mollie or PayPal, for the secure payment of your orders, or to our bank for a bank transfer;
  • to OVHcloud, which hosts our sites and our data in France;
  • to Mailjet, which delivers the emails we send you (order, invoice, account, notifications).

How Long Is Your Personal Data Retained?

We keep your personal data only for as long as strictly necessary for the purposes for which it was collected, or for the period required by regulations:

  • Customer account
    As long as the account is active, since it gives access to the products bought and their updates. An account is active as long as you sign in to it or use its Composer credentials. Without any activity for three years, it is deleted, after a warning email sent at least one month before. You can also delete it yourself at any time.
  • Notifications
    Until you turn them off, and at the latest until the account is deleted, along with the record of the emails sent.
  • Orders and accounting
    10 years from the end of the financial year, including after the account is deleted.
  • Technical logs
    14 days for the web server logs, 12 months for those of the downloads through Composer.

What Are Your Rights Regarding Your Personal Data?

You have the following rights:

  • right of access to your personal data;
  • right to rectification of your personal data if it is incomplete or inaccurate;
  • right to erasure of your personal data;
  • right to restriction of processing;
  • right to object to processing based on our legitimate interest;
  • right to data portability;
  • right to withdraw your consent at any time, without affecting the processing carried out before.

You may also lodge a complaint with the CNIL (the French data protection authority). You will find more information on your rights to control your personal data on its website.

How Can You Exercise Your Rights?

You can exercise some of your rights using the features available in the “Privacy settings” page of your customer account, and manage your notifications in the “My notifications” page.

For any other request, you can contact us by email at contact@owebia.com.