Privacy Policy

Introduction

Our Commitment to Your Privacy

OVR.ONE ("we", "our", "the Company") is committed to protecting your personal data in full compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978 (Loi Informatique et Libertés, as amended).

This Privacy Policy describes how we collect, use, and protect information about visitors to our website ovr.one and individuals who contact us.

Data Controller

Who is responsible for your data?

The data controller is:

• Company: OVR.ONE SAS
• Registered address: Paris, France (EU)
• Email: privacy@ovr.one

Data We Collect

Information you provide directly

When you contact us via our website or by email, we may collect:

• First and last name
• Professional email address
• Company name and role
• Content of your message or inquiry

Information collected automatically

When you browse our website, we may collect technical data through standard server logs:

• IP address (anonymised after 7 days)
• Browser type and version
• Pages visited and duration
• Referring URL

We do not use third-party analytics or tracking services. No cookies are used beyond strictly necessary session data.

Legal Basis & Purpose

Why do we process your data?

We process personal data on the following legal bases:

• Legitimate interest (Art. 6(1)(f) GDPR): to respond to your inquiries and evaluate potential business opportunities.
• Pre-contractual measures (Art. 6(1)(b) GDPR): to provide information requested ahead of a possible engagement.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable French and EU law.

We do not use your data for automated decision-making or profiling.

Data Retention

How long do we keep your data?

• Contact inquiries: 3 years from your last interaction with us.
• Contractual data: 5 years from the end of the contractual relationship, as required by French commercial law.
• Server logs: 12 months maximum, in anonymised form after 7 days.

After these periods, your data is permanently deleted or fully anonymised.

Data Storage & Transfers

Where is your data stored?

All personal data is processed and stored exclusively within the European Union, on infrastructure operated by our European cloud partners (Scaleway, OVHcloud, Hetzner). Your data is never transferred to countries outside the EU/EEA.

We do not sell, rent, or otherwise transmit your personal data to third parties, except where required by law.

Your Rights

Rights under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15): Obtain confirmation of whether we process your data and receive a copy.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your data where applicable.
• Right to restriction (Art. 18): Request that we limit processing of your data.
• Right to data portability (Art. 20): Receive your data in a structured, commonly used format.
• Right to object (Art. 21): Object to processing based on legitimate interest.

To exercise any of these rights, contact us at privacy@ovr.one. We will respond within 30 days.

You also have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) — www.cnil.fr.

Cookies

Our cookie usage

Our website does not use advertising, analytics, or tracking cookies. We use a single session storage entry (ovr-lang) to remember your language preference within your browser session. This is not a cookie and is not transmitted to any server.

Security

How we protect your data

We apply technical and organisational measures appropriate to the sensitivity of the data we process, including TLS encryption for data in transit and strict access controls for data at rest. All infrastructure operates exclusively within EU jurisdictions, outside the scope of extraterritorial laws such as the US Cloud Act.

Changes to This Policy

Updates and notifications

We may update this Privacy Policy to reflect changes in applicable law or our data practices. The date at the top of this page indicates the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact

Get in touch

For any privacy-related question or request, please contact us at:

privacy@ovr.one

OVR.ONE SAS — Paris, EU