Privacy policy
Last updated: August 22, 2026
This privacy policy aims to inform users of the Ostelo website about how their personal data is collected, used and protected.
The ostelo.fr website and the Ostelo solution are published and operated by BIVOAK, a simplified joint-stock company (SAS) with a share capital of €100, registered with the Manosque Trade and Companies Register under number 104 638 374, whose registered office is located at ZA Les Bastides Blanches, 12 rue du Dauphiné, 04220 Sainte-Tulle, France.
BIVOAK acts as the data controller for personal data collected through the website.
1. Personal data collected
When using the Ostelo website, personal data may be collected when you:
- fill in a contact form;
- request a demonstration of the Ostelo solution;
- contact our team by e-mail;
- communicate with our team as part of a sales enquiry.
Depending on your request, the data collected may include:
- first and last name;
- professional e-mail address;
- phone number;
- establishment or company;
- professional role;
- the content of your request or message.
Certain technical data necessary for the operation and security of the website may also be processed.
2. Purposes of processing
The personal data collected may be used to:
- respond to contact requests;
- process and organise demonstration requests;
- provide information about Ostelo and its services;
- follow up on commercial exchanges;
- manage relationships with our customers and partners;
- ensure the operation and security of the website;
- comply with the legal and regulatory obligations applicable to BIVOAK.
Data is not used for purposes incompatible with those for which it was collected.
3. Legal bases
Depending on the nature of the processing, BIVOAK processes personal data on one of the following legal bases:
- consent, where required;
- the performance of pre-contractual measures, in particular when a person requests information or a demonstration;
- the performance of a contract, as part of relationships with our customers and partners;
- the legitimate interest of BIVOAK, in particular to follow up professional relationships and ensure the security of its services;
- compliance with a legal or regulatory obligation.
4. Data recipients
The personal data collected is intended for authorised persons within BIVOAK.
It may also be processed by technical service providers acting on behalf of BIVOAK where necessary for the operation of the website and associated services, in particular in the areas of hosting, infrastructure, e-mail or technical services.
These providers may only process data within the scope of the services entrusted to them.
BIVOAK does not sell or rent its users' personal data to third parties.
5. Retention period
Personal data is kept only for the duration necessary for the purposes for which it was collected.
Data relating to prospects may be kept for a maximum of 3 years from the last contact initiated by the prospect, subject to applicable legal obligations.
Data relating to customers is kept for the duration of the contractual relationship and then, where necessary, archived for the periods imposed by legal, accounting and tax obligations or necessary for the establishment, exercise or defence of legal claims.
At the end of the applicable periods, data is deleted or anonymised.
6. Service providers and data transfers
BIVOAK may use various technical service providers to operate its services.
Where these providers process personal data on behalf of BIVOAK, they act as processors within the meaning of the General Data Protection Regulation (GDPR).
BIVOAK ensures that it uses providers offering appropriate guarantees regarding data protection and security.
Where certain data may be transferred outside the European Economic Area, BIVOAK ensures that such transfers rely on a mechanism recognised by applicable regulations and are accompanied, where necessary, by appropriate safeguards.
7. Security
BIVOAK implements appropriate technical and organisational measures to protect personal data against, in particular:
- unauthorised access;
- disclosure;
- modification;
- loss;
- accidental or unlawful destruction.
These measures are adapted to the nature of the data processed and the risks associated with the processing.
8. Your rights
In accordance with the General Data Protection Regulation (GDPR) and applicable French legislation, you have, subject to the conditions provided by the regulations, the following rights:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability where applicable;
- right to withdraw your consent at any time where processing is based on it.
You may also define directives regarding the fate of your personal data after your death, in accordance with French legislation.
9. Exercising your rights
To exercise your rights or for any question relating to the processing of your personal data:
In order to protect your personal data, proof of identity may be requested where there is reasonable doubt about the identity of the person making the request.
BIVOAK responds to requests within the timeframes provided by applicable regulations.
10. Complaint to the CNIL
If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL).
11. Cookies and trackers
Information about cookies and other trackers used on the website is presented on the Cookie management page.
Where a cookie or tracker requires the user's prior consent, it may only be placed after such consent has been obtained, in accordance with applicable regulations.
12. Changes to this policy
BIVOAK reserves the right to modify this privacy policy, in particular to take into account changes to the website, its services or regulations.
The date shown at the top of this page corresponds to the latest update of the policy.