OOTI’s mission is to help architecture firms manage their business seamlessly to allow them to be more productive and successful. Central to this mission is our commitment to be transparent about the data we collect about you, how it is used and with whom it is shared.This Privacy Policy applies when you use our Services (described below). We offer our users choices about the data we collect, use and share as described in this Privacy Policy, Cookie Policy, and Data Protection & Commitment to GDPR.OOTI ("we" or "us") is committed to protecting your privacy. This Privacy Notice (“Notice”) describes how OOTI processes Personal Data in its capacity as a controller (i.e. OOTI decides what Personal Data is collected and what it is used for) or processor (i.e. OOTI only processes the data as per the controller's instructions), as the case may be. It also describes your choices regarding use, access and correction of your Personal Data.

A) Personal Data we collect and process for our own purposes: Collected DataWhen you visit our Websites or participate in OOTI events,

OOTI may collect information, which may include Personal Data, from Individuals as set forth below (collectively referred to as “Collected Data”). For the purposes of General Data Protection Regulation (GDPR), OOTI shall be the controller for the Collected Data – this means that OOTI decides what Collected Data is processed and why.

ANY QUESTIONS?

If you have questions or complaints regarding our privacy notice or practices, please contact us at [email protected]

WHAT PERSONAL DATA DOES OOTI COLLECT AND WHY?

A) Personal Data we collect and process for our own purposes: Collected Data

1) Sign-up, billing and Account information.
When you subscribe and sign-up to any of our Service(s), we may collect your (i) contact information such as name, e-mail address, mailing address, IP address, geographic location, or phone number of the Account admin; (ii) billing information, such as credit card number and billing address; (iii) name and e-mail address when Account admin/Agent(s) provide feedback from within the Service(s); and (iv) unique identifiers, such as username, account number or password.Subject to this Notice and the Terms, we will use such data, including without limitation, to (i) provide you the Service(s); (ii) send you communication from the Service(s); (iii) assess needs of your business to determine or suggest suitable Service(s); (iv) send you requested information about the Service(s); (v) respond to customer service requests, questions and concerns; (vi) administer your Account; (vii) send you promotional and marketing communications (where you have requested us to do so); and (viii) facilitate your transactions with other users when you use our Service(s).

2) OOTI Careers.
When you apply for an open position by populating the application form, we may collect your (i) contact information, such as name, email address, mailing address, phone number, links to your social networking profiles; and (ii) any other information contained in the resume that you submit to us.Subject to this Notice, we will use such data to evaluate you for the open position that you have applied for or any position that we consider you suitable for at the time you submit your resume or at any later date. Unless you notify us otherwise by an e-mail to [email protected], we will retain such data for a period of 1 year for archival purposes. If you wish to update the data you provided to us, you may do so by contacting us at [email protected] the purposes of evaluating you for an open position, you understand that we may internally rate you based on parsing of your resume and your information. If you do not wish to be rated by us, please do not provide us your information.

3) Events.
When you attend an event conducted by OOTI, including webinars or seminars, we may collect your contact information such as name, e-mail address, designation and company name.Subject to this Notice, we will use such data, including without limitation, to (i) assess needs of your business to determine or suggest suitable Service(s); (ii) send you requested information about the Service(s); (iii) send you promotional and marketing communications (where you have requested us to do so); and (iv) respond to your questions and concerns.

4) Referrals via Distributors.
To help refer our Service, Customers can provide us with contacts within the Service. We may collect contact information such as name, e-mail address, mailing address, or phone number of such contact from our Customer. By providing us this information about third parties, you warrant you have complied with all necessary legal requirements to provide us with this information, including obtaining all necessary consents and providing the third party with a copy of this Notice.If you have been referred by our Customer, then, subject to this Notice, we will use such data, including without limitation, to (i) assess needs of your business to determine or suggest suitable Service(s); (ii) send you promotional and marketing communications (where you have requested us to do so); and (iii) respond to your questions and concerns.
‍
5) Program Registrations.
When you register for any of our programs through a registration form on our Websites, we may collect information such as name, e-mail address, company name and website URL, company details, location and contact information. Subject to this Notice, we will use such data, including without limitation, to (i) facilitate your use of the program portal for which you have registered; (ii) send you communication from within the Service(s); (iii) send you requested information about our Service(s); (iv) respond to your requests, questions and concerns; and (v) send you promotional and marketing communications (where you have requested us to do so).‍

‍
6) Public forums and newsletters.
When you visit our publicly accessible community forums and blogs, you should be aware that any information you provide in these areas may be read, collected, and used by others who access them. Further, we may collect your (i) contact information such as name, e-mail address, mailing address, or phone number; (ii) information about your business, such as company name, company size, business type; and (iii) a short bio about you to identify you as the author of the post. When you actively subscribe to our newsletters, we collect your e-mail address to share our newsletters with you.Subject to this Notice, we will use such data, including without limitation, to (i) assess needs of your business to determine or suggest suitable Service(s); (ii) send you requested information about the Service(s); (iii) send you promotional and marketing communications (where you have requested us to do so); and (iv) respond to your questions and concerns.

7) Clear Gifs and Log Files.
We and our third party advertising partners use technologies such as web beacons in analyzing trends, administering the website, tracking users’ movements around the site, and gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis.As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We link this automatically collected data to other data we collect about you.Please see our Cookies Policy for further information about our use of Cookies and similar technologies.

8) Analytics.
Apart from the aforementioned information collected by us, we automatically receive and record certain Personal Data of yours when You visit our Websites. This includes device model, IP address, the type of browser being used, usage pattern through cookies and browser settings, query logs and product usage logs. We also collect clicks, scrolls, conversion and drop-off on our Websites and Service(s) to render user journey at real-time. Subject to this Notice, we will use such data, including without limitation, to (i) assess needs of your business to determine or suggest suitable Service(s); (ii) send you requested information about the Service(s); (iii) respond to customer service requests, questions and concerns; and (iv) for analytical purposes.You authorize OOTI and its service providers to perform analytics on such Collected Data, to (i) improve, enhance, support and operate the Websites; and (ii) compile statistical reports and record insights into usage patterns. You acknowledge that OOTI uses Collected Data, as the case may be, for the aforementioned purposes.
‍
9) Testimonials.
We may post your testimonials/comments/reviews on our Websites which may contain your Personal Data. Prior to posting the testimonial, we will obtain your consent to post your name along with the testimonial. If you want your testimonial removed, please contact us at [email protected]
‍
10) Marketing communications.
We may use your e-mail address, collected as part of Collected Data, to send our newsletters and/or marketing communications about our products and services. Where you have so requested, we will also send you marketing communications about our third party partners. If you no longer wish to receive these communications, you can opt out by following the instructions contained in the e-mails you receive or by contacting us at [email protected]

If you are a visitor from the European Economic Area, our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it.However, we will normally collect Personal Data from you only where we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests or rely upon your consent where we are legally required to do so and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Data from you or may otherwise need the Personal Data to protect your vital interests or those of another person.If we ask you to provide Personal Data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Data is mandatory or not (as well as of the possible consequences if you do not provide your Personal Data).
‍
Similarly, if we collect and use your Personal Data in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Data, please contact us using the contact details provided below.

B) Data we process on your behalf: Service DataWeonly process Service Data as per our Customer's instructions.
We only process Service Data as per our Customer's instructions. For purposes of the GDPR and the Swiss Federal Act on Data Protection, we are the processor and not the controller of the Service Data. Service Data, as defined in the Terms, means all electronic data, text, messages or other materials, including Personal Data of Users and End-Users, submitted to the Service(s) by our Customers through Customer’s Account in connection with Customer’s use of the Service(s), including data collected under “Other Information” and “Mobile Applications” below. Our EEA or Switzerland based Customers are the “controllers” of that data and are responsible for compliance with the applicable data protection law. We work with our Customers to help them provide notice to their customers concerning the purpose for which Personal Data is processed by OOTI.

If you are our Customer from EEA or Switzerland, then in your role as a controller, you are authorizing, on behalf of you and your authorized agents and End-Users, and representing that you have the authority to provide such authorization to the processing and transfer of Personal Data in and to the United States and other countries which may have different privacy laws from your or their country of residence. We will take all steps reasonably necessary to ensure that the Service Data is treated securely and in accordance with this Notice.We do not own, control or direct the use of Service Data, and in fact we are largely unaware of what information is being stored on our platform and only access such information as reasonably necessary to provide the Service(s) (including to respond to support requests), as otherwise authorized by Customers or as required by law. Unless we explicitly agree otherwise in writing, you will not process sensitive personal data (such as health data) on our platform.

As the controller, it shall be your responsibility to inform the End-Users about the processing, and, where required, obtain necessary consent or authorization for any Personal Data that is collected as part of the Service Data through your use of the Service(s). As the processors of Personal Data on behalf of our Customers, we follow Customer’s instructions with respect to the Service Data to the extent consistent with the functionality of our Service(s). In doing so, we implement technical, physical and administrative measures against unauthorized processing of such information and against loss, destruction of, or damage to, Personal Data.

Other information ...

Where an User or End-User uses the Service(s), we automatically receive and record certain information of such user. This information includes device model, IP address, the type of browser being used, usage pattern through cookies and browser settings, query logs and product usage logs (collectively referred to as “Other Information”). If you are a customer of OOTI, please note that you will have the option to opt out of tracking certain events from within OOTI.
‍‍

Mobile Applications ...
When you download, install and use our Mobile Applications, we automatically collect information on the type of device you use, operating system version, and the device identifier (or “UDID”).
Subject to this Notice, we will use such data to (i) provide and manage Mobile Application; (ii) if you have opted in to receiving push notifications, send you push notifications from time-to-time in order to update you about any events or promotions that we may be running and/or update you about new features to our Service(s); (iii) send you promotional and marketing communications (where you have requested us to do so). If you no longer wish to receive these types of communications, you may turn them off at the device level.
Improving and enhancing our Service(s).
You expressly authorize us and the service providers we use to process the Service Data in our systems to (i) provide, improve, enhance, support and operate the Service(s) and its availability; (ii) develop new products and services; and (iii) compile statistical reports and record insights into usage patterns.

SHARING OF PERSONAL DATA

Except as outlined in this Notice and the Terms, Personal Data contained in Collected Data and Service Data will never be sold to or shared with other companies or organizations for commercial purposes. We process Personal Data in the United States and the European Economic Area (“EEA”) and in other countries through third parties that we may use. You may refer to the page here for more information on hosting options. Third parties with whom Collected Data is shared may include third-party payment processors who process your credit card and other payment information for OOTI but are otherwise not permitted to store, retain or use such information. Third parties that we utilize to assist in providing the Service(s) with whom Service Data may be shared are listed here (“Sub-Processors”). Further, we may transfer Personal Data to our Group Companies for the purposes identified in the Terms and this Notice. All such transfers are covered by the service agreements with the relevant recipients and we have taken appropriate safeguards to ensure that your Personal Data will remain protected in accordance with this Privacy Notice. Further details can be provided upon request.
Subject to the Terms and this Notice, we and our Group Companies shall have the right to access Customer’s Account and to process Service Data solely to the extent necessary to provide, enhance and improve the Service(s), including, without limitation, in response to Customer’s support requests. Our Sub-Processors will only be given access to Customer’s Account and Service Data as is reasonably necessary to provide the Service(s) and will be subject to confidentiality obligations in their service agreements.

‍

‍Privacy Shield Compliance

OOTI participates in and has certified its compliance with the EU-U.S. and Swiss-US Privacy Shield Framework. OOTI is committed to subjecting all Personal Data received from European Union (EU) member countries and Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List [https://www.privacyshield.gov/list].

‍
OOTI is responsible for the Personal Data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. OOTI complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, and Switzerland including the onward transfer liability provisions. OOTI further commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.
With respect to Personal Data received or transferred pursuant to the Privacy Shield Framework, OOTI is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, OOTI and/or its Group Companies may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

HOW DOES OOTI KEEP PERSONAL DATA SECURE?
‍
We use appropriate technical and organizational measures to protect the Personal Data that we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your Personal Data.

EEA SPECIFIC RIGHTS

If you seek access to, or wish to correct, update, modify or delete Personal Data (hereinafter referred to as a “Request”) which is part of the Service Data and processed by us on behalf of our Customer, you should direct your query to our Customer i.e, the controller. If you are a Customer of our Service(s) and wish to raise a Request on behalf of your Users and End-Users in connection with Service Data, you may raise a ticket on the support portal of the relevant Service. Please note that if a Customer has subscribed to more than one Service, a Request on a particular Service support portal is specific to that Service only and separate Requests need to be raised across other relevant Service support portals.

OTHER COMMUNICATIONS
If you are our Customer, we will send you announcements related to the Service(s) on occasions when it is necessary to do so. For instance, if our Service(s) is temporarily suspended for maintenance, we might send you an e-mail. Generally, you may not opt-out of communications which are not promotional in nature. If you do not wish to receive them, you may deactivate your Account.

RETENTION OF PERSONAL DATA
If you wish to request that we no longer use your Collected Data, please contact us at [email protected] as otherwise set forth below, Personal Data contained in the Service Data is retained and deleted in accordance with the Terms.
If you are a Customer of our Service, and if you have raised a Request for deletion of a User, please note that, for business continuity purposes, deleting the User does not delete business-specific organization-owned data created and contributed to by the User including without limitation, knowledgebase articles, notes, forum topics/comments, support calls, surveys, automation and dispatcher rules, canned responses, ticket templates, contacts, companies, tags, conversations in the tickets, etc. The deleted User’s Personal Data will then be anonymized within the Service.
Notwithstanding the foregoing, we will retain Collected Data and Service Data as necessary to comply with our legal obligations, for litigation/defense purposes, maintain accurate financial and other records, resolve disputes, and enforce our agreements.

LINKS TO THIRD PARTY SITES
Our Websites contain links to other websites that are not owned or controlled by OOTI. Please be aware that we are not responsible for the privacy practices of such other websites or third parties. We encourage you to be aware when you leave our Websites and to read the privacy policies of each and every website that collects Personal Data.
‍

CHILDREN'S PERSONAL DATA
OOTI does not knowingly collect any Personal Data from children under the age of 16. If you are under the age of 16, please do not submit any Personal Data through our Websites or Service(s). We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Notice by instructing their children never to provide Personal Data through our Service(s) or Websites without their permission. If you have reason to believe that a child under the age of 16 has provided Personal Data to us through our Websites or Service(s), please contact us and we will endeavor to delete that information and terminate the child's account from our databases.

AMENDMENTS
Amendments to this Notice will be posted to this URL and will be effective when posted. If we make any material changes, we will notify you by means of a notice on this Website prior to the change becoming effective and if you are our Customer, via e-mail (specified in your Account). Provided we will not be notifying you if we amend the Notice to make addition, deletions or modifications to the list of cookies from time to time to keep the list of cookies current and accurate. You should frequently visit this Notice to check for amendments. Your continued use of our Websites or the Service(s) following the posting of any amendment, modification, or change to this Notice shall constitute your acceptance of the amendments to this Notice. You can choose to discontinue use of the Websites or Service(s), if you do not accept the terms of this Notice, or any modified version of this Notice.

LEGAL DISCLOSURE
We, including our Group Companies reserve the right to disclose your personal data contained in Collected Data and Service Data as required by applicable law, in response to lawful requests by public authorities, including meeting national security or law enforcement requirements and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or other legal process served on us. Collected Data and Service Data will also be shared between our Group Companies for the activities permitted under the Terms and this Notice.
In the event OOTI goes through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, Customer’s Account, Collected Data and Service Data will likely be among the assets transferred. A prominent notice will be displayed on our Websites to intimate you of any such change in ownership or control and Customers will be notified via an e-mail from [email protected]

CONTACTING OOTI
If you have any questions about this privacy notice or your dealings with the OOTI, you can contact us at [email protected] or via postal mail at OOTI 15 Rue Jeanne Braconnier, Meudon, Ile-de-France 92360, France.

May 15, 2018, 8 a.m.