Data Protection (GDPR)

1. Identification

Company: SASU OPTINOC — Capital €1,000
Siret: 850 573 932 — VAT: FR38 850573932
Address: 10 allée Louis Breguet, 94310 Orly
DPO: info@optinoc.com

2. Personal data and GDPR

In accordance with GDPR and the French Data Protection Act, OPTINOC is committed to protecting its customers' personal data. Data is kept for a maximum of 5 years.

Your rights

Right to access your personal data
Right of rectification
Right to erasure (right to be forgotten)
Right to portability
Right to restrict processing

To exercise your rights: info@optinoc.com

3. Security measures

HTTPS/TLS communication
Sensitive data encryption
Role-based access control
Regular data backup
Secure card payment via Stripe PCI/DSS

4. Sub-processors

Stripe (United States) — Payment
Railway Inc. (United States) — Hosting
Cloudflare (United States) — CDN and storage
DHL (Germany) — Shipping
FedEx (United States) — Shipping

5. Breach notification

Under GDPR articles 33 and 34, in case of personal data breach, OPTINOC will notify the CNIL within 72 hours and inform the affected persons if the risk is high.

6. Cookies

Technical cookies required for operation (session, language preferences). Analytical cookies (with consent). Duration: 13 months maximum.

You can configure your preferences in your browser settings.

7. DPO contact

Data Protection Officer: info@optinoc.com

Postal address: OPTINOC, 10 Allée Louis Bréguet, 94310 Orly.

Last updated: April 2026