OKO Business is the trade name of the service offered by OKTICS ATZ SL (OKTICS, hereinafter referred to as OKO Business ). Committed to the privacy of our users and in strict compliance with the current European regulations (RGPD) in relation to data processing, we inform you in a detailed and transparent manner about the processing of your personal data.
1 DATA CONTROLLER
The data controller is OKTICS. Our data are as follows:
- Company Name: OKTICS ATZ SL
- TAX ID: B67388603
- Address: C/ Gran Capitán S/N, Campus Nord, Edificio C1, 08034 Barcelona, Spain.
- Phone: +34 93 401 68 57
- E-mail: email@example.com
2 USE OF YOUR DATA
- Purpose and nature of the personal data processed
We only collect and process those personal data that are strictly necessary to offer OKO services, in all its commercial variants. For this reason, we only store and process two types of personal data of our users:
- Identification data: The user himself/herself provides them at the time of registering for the service. These are data that we need to link the user’s account to a specific identity, being the contracting party and, at the same time, the one who expressly consents to the processing of his personal data.
- Images, audio files, videos or notes: Always sent by the user to our servers, these files are stored exclusively so that they can be played on any OKO device when requested by the customer.
In any case, only the user, and never a third party, may decide to play your images, audio files, videos or notes on an OKO device. Likewise, only the customer will have access through their passwords to their files stored on our servers, except for the particularity of the OKO Community service, through which users themselves can share files with other OKO members who have previously been admitted as friends.
- Special categories of data
In no case do we request, store or process personal data classified as special, i.e. those significantly sensitive, which identify the ideology, union affiliation, religion, sexual orientation, beliefs or racial or ethnic origin of the users.
- Duration of treatment
The processing of personal data will continue as long as the user keeps his account active and as long as OKO continues to provide the service.
In the event that the user decides to unsubscribe from the service or revoke the consent given to us for the processing of personal data, we will proceed to delete all identifying data, as well as images, videos and other customer files stored on our servers within a maximum period of 10 days from the date of request.
3 LAWFULNESS OF THE PROCESSING OF YOUR DATA
- User registration
Our legitimacy arises with the express consent of the user to the processing of their personal data that gives us by declaration at the time of registering for the service in our mobile application OKO, having access, prior to consent, to our Legal Basis relating to Data Processing.
This is an essential requirement, since if the user does not give express consent to the processing of their data the system does not allow the registration or the provision of the service by us. In the absence of registration, no personal data of the applicant is stored or processed.
- OKO Community
The OKO community is a service that offers users the possibility to give access to their OKO frame (or any variant with another commercial name) to other users so that they can send all types of files so that they can be played on the device.
Therefore, when a user decides to share a file that can be considered as personal data, he is freely communicating the file with another user, so it must be considered that there is an unequivocal consent by affirmative action for the other user to access and reproduce on his device the shared document.
In any case, sending a file from one user to another through the OKO Community service will end up being stored on our servers, without requiring express consent for it to be part of an action included in the express consent to the processing of personal data given by the user at the time of registration as a user.
Based on legitimate interest
As established by the personal data protection regulations, the processing of your personal data by the data controller or by a third party shall be lawful if it pursues a legitimate interest, provided that such interests do not override the fundamental rights, interests and freedoms of the data subject.
4 COMMUNICATION OF YOUR DATA TO THIRD PARTIES
OKTICS does not share, sell or exchange personal data of its users with third parties.
In the event of deciding to share their data with third parties to improve the service provided, users will be warned, informed and must give their prior consent before such communication of personal data takes place.
The different trade names of the OKO service shall in no case be considered as third parties, as they are all part of a single service offered by OKTICS.
OKO users that the customer has chosen to include in its OKO Community shall not be deemed to be third parties.
- SECURITY MEASURES FOR THE PROCESSING OF YOUR DATA
The personal data of our users is sent and hosted on our servers following the HTTPS security protocol.
In addition, for added security, our servers perform various TLS (also known as SSL) encryption and decryption actions, as well as encrypting all media files with the AES (high security) algorithm to prevent third parties from accessing the personal data you have provided to us.
- YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA AND THE EXERCISE OF THESE RIGHTS
Legally, you have a series of rights related to the protection of your personal data that you may exercise by contacting the following e-mail address: firstname.lastname@example.org.
These rights are as follows:
- Right to revoke consent
You may revoke your consent for us to process your personal data at any time.
- Right of access
You have the right to know if we are processing your personal data. Therefore, you may ask us to confirm whether we are processing personal data concerning you and to have access to such data.
- Right of rectification
You have the right to request that we amend your personal information when it is inaccurate or to request that we provide more information when it is incomplete.
- Right to suppression
You have the right to request that we delete your personal data when it is no longer needed for the purpose for which it was collected or for any other reason.
- Right to limitation of processing
You have the right to request the limitation of the processing of your personal data. Once the limitation has been exercised, we will not be able to process your data, but only keep them.
- Right to portability
You have the right to request that we provide you with your personal data held by us in a structured, commonly used, machine-readable format so that it can be transferred to a new data controller.
- Right of opposition
You have the right to object at any time to the processing of data based on legitimate interest, i.e. not based on consent, law or contract.
5 HOW TO CONTACT US
OKTICS ATZ is the data controller responsible for the processing of data processed under this Policy.
(c) OKTICS ATZ SL. 2023