Privacy Policy

Last updated August 21, 2025

  1. DEFINITIONS

Capitalized terms refer to the following definitions:

The “Company” or “we” refers to the company LE QUATRIÈME OEIL EURL with a capital of €30,000, whose registered office is located at 32 Allée de la Robertsau, 6700 Strasbourg, registered with the Strasbourg Trade and Companies Register (RCS) B 941973372 whose intra-Community VAT number is FR19941973372

The “Site” means the website accessible from the URL links www.lequatriemeoeil.fr and any subsites thereof

“You” refers to the persons concerned by the Processing carried out on the Site (users, prospects, customers, etc.).

“Policy” means this Privacy Policy.

“Data” corresponds to any information about an identified or identifiable natural person (the “data subject“) directly or indirectly, in particular by reference to an identifier (name, identification number, location data, online identifier, etc.) or to one or more elements specific to its identity.

“Processing” corresponds to any operation applied to Data (collection, recording, organization, conservation, adaptation, communication by transmission, dissemination, erasure, etc.).

A “Controller” is one who, alone or jointly with others, determines the purposes and means of the processing and a “Processor” is one who processes the Data on behalf of the Controller. On the Site, unless otherwise stated, we are responsible for processing the Data.

A “Recipient” is the natural or legal person, public authority, department or any other body that receives communication of personal data, whether or not it is a third party.

The “Regulation” refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”); as well as French Law No. 78-17 of 6 January 1978 on data processing, files, and freedoms;  the rules applicable to commercial prospecting provided for by the French Postal and Telecommunications Code, and more generally the laws and regulations applicable to the Data Processing we carry out.

  1. SHOWCASE SITE AND COMMERCIAL PROSPECTING

The Site presents the activities of our Company and various forms (contact, blog, etc.). By completing the forms and communicating with us via the Site, you provide us with the following categories of information:

  • Identity data: civility/gender; surname; first name;
  • Contact data and correspondence: email address; postal address (address, postal code, city); telephone number; In case of request for services, the nature of your request and the content of your request.
  • Reviews and contributions data: pseudonym, date of the review, content of the review, product or service concerned, if applicable profile photo attached to the review; The Company may enrich its Site by collecting and republishing the reviews and contributions issued in relation to its offers by its customers on other sites (including social networks) when these contributions are freely accessible to the public;
  • Data necessary to carry out loyalty, prospecting, study, survey, product test and promotion actions;
  • Data collected through actions to exercise the rights enshrined in the Regulations.

In accordance with our legitimate interest, and where appropriate when it is necessary for the execution of pre-contractual measures taken at your request or a contract, we carry out processing on the aforementioned Data for the following purposes:

  • Presentation of the Company’s services;
  • Management, processing and follow-up of requests and exchanges with the Company, via the Site (if necessary, by offering you a call reservation tool, etc.);
  • Managing the relationship with prospects;
  • Managing people’s opinions on the Company’s products, services or content;
  • Prospecting and/or sending information, managing technical prospecting operations, prospecting, polling;

The data used for commercial prospecting management purposes is kept for a maximum of three years from the last active contact from the prospect or client, and before in case of withdrawal of your consent to receive messages from us. The Data of the testimonials and contributions are kept for the duration of access to the public of the testimonial on the Site.

In accordance with our legal obligations, identity and contact data will also be subject to Processing for the following purposes:

  • Updating of its prospecting files by the body in charge of managing the list of those opposed to telephone canvassing, in application of the provisions of the French Consumer Code
  • Management of requests for right of access, rectification, and opposition, and more generally of the rights described in the Policy.
  1. DELIVERY OF DIGITAL CONTENT

The legal basis for the Processing aimed at the supply of digital content is contractual and, if not provided for in the CGPS, meets our legitimate interest. For this purpose, we will process the following Data:

  • Identity and contact data

The Site from which the contents are accessible may include technical devices that make it possible to track the use of the Site (account of the logged-in user, IP address, type of application used, various logs of connection and use to the User account, etc.). The Data from these devices may be used in the context of the fight against counterfeiting, and/or to identify and/or prevent possible illegal or non-compliant use of the Site and/or violation of the applicable GTCPS.

  1. SOCIAL MEDIA AND THIRD-PARTY SITES

Exchanges on social networks. We may contact you or answer your questions via social media, if you first contact us through this channel. You are informed that the use of social networks involves the processing of personal data by the providers of these networks (see their privacy policy).

Public information. The information about you that you have transmitted to us may be enriched for commercial, prospecting, communication, solicitation or marketing purposes, by means of other sources of information such as social networks. This includes so-called “public” information or information that we may have access to as an administrator of a page or group. The legal basis for this processing is our legitimate interest as a service provider.

  1. EXERCISE OF YOUR RIGHTS

For any request to exercise the aforementioned rights or for more information, you can contact the Company at the address: kole@lequatriemeoeil.fr (contact person: William Kole Wright) or by post to the address of the registered office of the Company (LE QUATRIÈME OEIL, 32 Allée de la Robertsau, 67000 Strasbourg).

In accordance with the regulations, you have the following rights over your Data:

  • Right of access to your Data, including the right to request a copy, and to the information provided in this privacy policy (Art. 15 GDPR). When the legal basis for the data processing is our legitimate interest, you have the possibility to request information relating to the balancing we have carried out between the interests of our customers and those of the Company prior to this processing.
  • Right to rectification (Art. 16 GDPR) and to update your data that we have.
  • Right to erasure of your Data (Art. 17 GDPR) when the data is no longer needed by us, you have withdrawn your consent to its Processing (if it was based on our consent) or you object to Processing based on our legitimate interest or processing carried out for prospecting purposes or profiling purposes related to prospecting.
  • Right to withdraw your consent at any time (Art. 13-2c GDPR) for all data processing based on the legal basis of your consent. In addition, in terms of commercial prospecting, you have the option to unsubscribe at any time from our mailing lists by clicking on the unsubscribe link in our communications or by contacting us to stop receiving solicitation messages.
  • Right to restriction of Processing, which, unless there are compelling reasons, can only be implemented with your consent (Art. 18 GDPR) when:
  • You dispute the accuracy of the data, for the time necessary for their verification,
  • If the data processing is unlawful but you object to the erasure of the data and choose instead the limitation of the processing,
  • When we no longer need the data, but it is still necessary for you to establish, exercise, or defend your rights in court.
  • When you have objected to the processing based on our legitimate interest, for the time necessary to balance our respective interests.
  • Right to portability of Data directly provided by the data subject when they are subject to automated processing based on your consent or on a contract (Art. 20 GDPR). This right means that you have the possibility to request the communication of this data in a structured, commonly used and machine-readable format so that it can be communicated to another controller.
  • Right to object (Art. 21 GDPR) to the processing of your data when this Processing has our legitimate interest as its legal basis.
  • Right to determine the fate of your Data after your death (Art. 40-1 of Law 78-17 of 6 January 1978) and to choose a trusted third party to whom the Company must entrust it.

You can also get more information on the CNIL website (in French).

In the event of a request to exercise, the Company reserves the right to ask you to specify your request and to provide proof of identity (which will be kept for one year in the event of exercise of the right of access or rectification and three years in the event of exercise of the right of opposition). If our response does not bring you full satisfaction, you can always lodge a complaint with the supervisory and personal data protection authority to which you belong (in France, the CNIL).

  1. DATA CONSERVATION

Engagements. Means of effective deletion of the Data are put in place as soon as the retention or archiving period necessary for the fulfillment of the purposes determined or imposed is reached, in particular after deletion of your account with our Company or at the end of the contract with our Company.

Minimization. In any case, the Data that is the subject of a Processing is not kept beyond the time necessary for the performance of the obligations defined at the time of the conclusion of the contract, or required by the legislation in effect. Beyond that, they may be anonymized and kept for statistical purposes, in particular in an aggregated form.

Litigation. Similarly, we may archive information demonstrating the performance of our contractual obligations until the expiry of the limitation/foreclosure periods applicable to legal actions, for the proper defense of our interests before the courts in the event of subsequent litigation. This concerns in particular, but not exclusively, the periods provided for by the Commercial Code, the Civil Code and the Consumer Code.

  1. RECIPIENTS

Engagements. We are committed to ensuring that any data recipient presents sufficient and appropriate contractual guarantees to respect your rights, so that the processing meets the requirements of the GDPR when this regulation applies (in particular with regard to subcontracting). Based on our legal obligations, your Data may be disclosed pursuant to a law, regulation, or a decision of a competent regulatory or judicial authority.

The information you provide us is for internal use by authorized persons, it is strictly confidential and may not be disclosed to third parties, except under the conditions provided for by the Regulations in the event of express agreement or if you have decided to make it public.

Subcontracting. Our external service providers (e.g. suppliers, carriers, etc.) may, as part of the processing described above, be recipients of personal data when this is necessary for the performance of their mission.

Transfer outside the EU. We undertake to ensure compliance with the applicable regulations relating to data transfers to countries outside the European Union and in particular in the following ways:

  • We will transfer the data of visitors, prospects and customers to countries recognized as offering an adequate level of protection;
  • When the destination country does not have an adequate level of protection, we supervise the flows with transfer tools that comply with the regulations.

Aggregation of non-personal data. We may publish, disclose, and use aggregated information (information relating to site users, prospects, customers, etc.) that we combine so that no natural person is individually identifiable. This processing is carried out in accordance with our legitimate interest for statistical purposes, industry and market analysis, presentation of our activities, promotional and advertising purposes, and other commercial purposes.

  1. DIGITAL SECURITY

Engagements. We are committed to implementing the appropriate technical and organizational measures through physical and logistical security means to limit the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of your personal data.

Warnings. We encourage you to be cautious about what you decide to make public on the internet. With regard to personal data including your private life made public at your initiative or inferred via your contributions, comments and positions of any kind on the Site, or social networks on groups and/or conversations with other users of the Site.

Https protocol. The URL of the Site is accompanied by a closed padlock or a key appears at the bottom right of your browser indicating the existence of the Https security protocol, applicable to the storage of data in particular. This means that you are in a safe browsing area, especially when your credit card number is requested.

Data breach. In the event that an event leads to the realization of the risks of unauthorized modification, disappearance or access to the Data, we undertake to:

  • Examine the causes of the incident;
  • Take the necessary measures to limit the negative effects and harm that may result from said incident;
  • Notify the competent authority and/or data subjects of the incident as soon as possible when this meets a legal requirement.

Under no circumstances may the commitments defined in the point above be assimilated to any acknowledgment of fault or responsibility for the occurrence of this incident.

  1. COOKIE INFORMATION

Presentation: Cookies and trackers (hereinafter “cookies”) refer to cookies and more generally, any file – deposited during the consultation of a website or a mobile application, the installation or use of software in the user’s terminal equipment – whose purpose is to read or write information in this equipment. Cookies allow us to collect Site Consultation Data (IP address, Internet service provider, hardware configuration, software configuration, browser type and language, etc.).

Cookies may be deposited by the Company or by third party companies without your consent when they are strictly necessary for the operation of the site or to facilitate communication to the public online, for example when they are intended for authentication, to remember the contents of a shopping cart, to generate traffic statistics, or to limit free access to a sample of content requested by users.

Duration: The maximum retention period of cookies is 13 months after their first deposit in your terminal, and this period is not extended at each visit.

Consent to the presence of cookies: You are informed of the presence of non-strictly necessary cookies by an information banner on the Site. With the exception of use cases not subject to consent, cookies and tracers will only be deposited on your terminal with your express consent. You may be asked periodically to reiterate your consent, to ensure that it is still valid.

Cookie settings: You always have the option to change your preferences through your browser settings (Firefox with enhanced tracking protection; Firefox with cookie deletion; Chrome,  Opera; Microsoft Edge). You can also configure your device’s browser to enable the “Do Not Track” option, which will indicate to the sites visited, advertising agencies or applications that you do not want to be “tracked.” This feature is available for the following browsers: Firefox; Internet Explorer; Safari; Opera; Microsoft Edge.

In case of refusal of cookies not essential to the functioning of the Site: Some features of the Site such as video players or interactive content use services offered by third parties and deposit cookies allowing them to identify your consultation of the content. In case of refusal of the deposit of these cookies, the personalization features will not be able to work and the contents that will be offered to you (in particular the suggestions of videos or advertisements) will still be present but will be unrelated to your interests.

Types of cookies: In addition to cookies whose exclusive purpose is to allow or facilitate communication via our Site or cookies strictly necessary for the provision of the Site or Service to which you have subscribed, we use cookies and tracers for the following purposes:

Non-personalized advertising and audience measurement: The Company and third-party companies use tracers for the purpose of measuring the audience of advertising on the Site without profiling you, in order to optimize the Site according to statistics on its traffic and the browsing of Internet users. This is the following third party: Google Analytics.

  1. General

Mandatory or optional. On the Site, you are informed of the mandatory nature of the answers by the presence of an asterisk or any other type of note. In the event of an incomplete application (for example: online registration or order, request for information, etc.), the Company reserves the right to request additional information or to exclude by any technical means the possibility of validating the form concerned.

Hyperlinks. The Site may provide links to other sites, applications and services than its own, which may be operated by third party companies. We are not responsible for the processing of personal data carried out by these third-party sites, or sites pointing to the Site, the user of which is invited to consult the personal data protection policies for more information. The Policy is applicable only to the activities of the Company, which cannot be held responsible for the breaches of a third party’s obligations regarding the protection of personal data.

Scope. The Policy is not exhaustive of all processing, and we reserve the right to complete it by any means.

Language. The Policy is written in French. In the event that it is translated into one or more languages, only the French text will prevail in the event of a dispute.

Non-waiver. The temporary or permanent non-application of one or more clauses hereof shall not constitute a waiver of the other clauses hereof which continue to produce their effects.

Changes – Updates. We reserve the right to modify this privacy policy. Data subjects will be notified when this is provided for by the applicable regulations. The update date is indicated in the header, and we invite you to consult it regularly.