Privacy Policy

C2SL (hereinafter “we”) is committed to protecting the privacy of visitors to its orila.co site. This policy explains, in full transparency, which data is processed when you use this site, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

2. Data collected on this site

This site is a presentation site. It contains no form, no audience measurement and no advertising or tracking cookie. By browsing it, you do not transmit any personal data to us, and we collect none for commercial purposes.

The site only keeps, in your browser's local storage, a purely technical display preference. This element is not a tracking cookie, is never transmitted to a third party and does not allow you to be identified.

Like any online service, our host processes technical connection data (IP address, browser type) for security and proper operation purposes. This data is not used by us to identify you.

3. When you use the demo or create an account

By clicking on “Try the demo” or creating an account, you access the ORILA application, which constitutes a separate service. The data you enter there (your clients, your contacts, your appointments, etc.) is processed there as part of the performance of the service contract, and governed by the terms presented at the time of registration.

4. Purposes and legal bases

• Display and security of the site — legitimate interest (providing a functional and secure site).
• Technical display preference — proper operation of the service, without tracking.
• Reply to your messages (if you write to us at our contact address) — legitimate interest in replying to you.

No processing for prospecting or profiling purposes is carried out from this site.

5. Recipients and processors

We neither sell nor rent your data. The only processor involved for this site is our host, Cloudflare, Inc., which ensures the delivery and security of the site.

6. Hosting and transfers outside the European Union

The application data (that of your ORILA account) is hosted on an infrastructure located in Europe. The delivery of the showcase site is provided by Cloudflare, a company established in the United States; any transfers of technical data are governed by the Standard Contractual Clauses approved by the European Commission.

7. Retention periods

• Technical browser preference: until you delete it yourself.
• Email exchanges with our contact: the time necessary to handle your request, then limited archiving.
• Technical connection data (host): limited period for security purposes.

8. Your rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

• Right of access to your data
• Right of rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to portability
• Right to withdraw your consent at any time

To exercise these rights, write to us at [email protected]. We reply within one month. You may also lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, 75007 Paris, cnil.fr).

9. Security

We implement appropriate technical and organizational measures: encryption of communications (HTTPS/TLS), restricted access to data, and hosting on a secure infrastructure.

10. Changes

This policy may change, in particular if we add a form or an audience measurement tool (a cookie consent mechanism would then be put in place). The date of the last update appears at the top of this page.