Privacy policy

How we protect and use your Personal Data.

The protection of Personal Data is one of our main concerns. We have drawn up a privacy policy that complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act. The purpose of this policy is to set out:

  • the Controller of Personal Data,
  • how Data is collected and processed,
  • the rights of users and policyholders,
  • the recipients to whom Data is disclosed.

This policy may be updated at any time to ensure compliance with the law.

Definitions

Capitalised terms used in the singular or plural in this Privacy Policy have the meaning defined below.

Personal Data or Data

Personal Data is any information relating to an identified or identifiable natural person. Because it concerns people, they must remain in control of it. A natural person may be identified:

  • directly (for example: first name and last name);
  • indirectly (for example: through a phone number or a licence plate, an identifier such as a social security number, a postal or email address, but also a voice or an image).

A natural person may be identified:

  • from a single piece of data (for example: a name);
  • by cross-referencing a set of data (for example: a woman living at a given address, born on a given day and a member of a given association).

Processing of Personal Data or Processing

Processing of Personal Data is an operation, or set of operations, performed on Personal Data, whatever the method used (collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment).

Processing of Personal Data is not necessarily computerised: paper files are also covered and must be protected under the same conditions.

Processing must have an objective, a Purpose determined before the Data is collected and used.

Article 1. Personal Data processed, Purposes of Processing and Data retention periods

Personal Data is collected for specified, explicit and legitimate purposes.

Orakle Weather guarantees that Personal Data is processed in a way that is adequate, relevant and limited to the Purposes of the Processing.

ProcessingCategory of DataPurpose of processingLegal basisData retention period
Handling requests submitted in the business contact sectionLast name, first name, email address, phone number, company, revenue bracketAnswering user requestsOrakle Weather's legitimate interest in providing answers to users3 years after the last contact date
Handling requests submitted in the individual contact sectionLast name, first name, email address, phone numberAnswering user requestsOrakle Weather's legitimate interest in providing answers to users3 years after the last contact date
Handling requests submitted in the buy weather insurance sectionLast name, first name, email address, phone number, postal address, date and place of birth, start and end date and time of the activity, postal address of the activity, price of the activity, type of activityAnswering user requests, taking out the insurance contract, managing invoicing, pre- and post-contractual customer relations and complaintsPerformance of the insurance contract and Orakle Weather's legitimate interest in providing answers to users5 years after the end of the contractual relationship
Taking out the insurance contractLast name, first name, email address, phone number, postal address, date and place of birth, start and end date and time of the activity, postal address of the activity, price of the activity, type of activityAnswering user requests, performing the insurance contract, managing invoicing, pre- and post-contractual customer relations and complaintsPerformance of the insurance contract5 years after the end of the contractual relationship
Payment of compensation in the event of a claimLast name, first name, IBAN/BIC, account holder name, date and place of birth, postal addressPaying the compensation due under the insurance contract and verifying the identity of the payment beneficiaryPerformance of the insurance contractThe time needed to handle the claim, then 5 years after the end of the contractual relationship, in accordance with accounting obligations
Cookies and trackersIP addressAnswering user requests, performing the insurance contract, managing invoicing, pre- and post-contractual customer relations and complaintsLegitimate interest for strictly necessary cookies, and consent for the othersSee the cookie policy
Tracking emails related to the performance of the insurance contractAggregated and anonymised email open statisticsMeasuring the correct delivery of contractual communications (subscription confirmation, acknowledgement of documents, claims handling, and other exchanges required to perform the contract)Orakle Weather's legitimate interest in ensuring the deliverability of its communicationsLast known open date only, with no individual history

Article 2. Recipients of Personal Data

None of the User's Personal Data is disclosed to third parties, except to Orakle Weather staff or its partners and processors, solely as required to carry out the purposes mentioned above and limited to the information strictly necessary for that purpose.

Bank details are transmitted to Orakle Weather's partner payment institution in order to execute the compensation transfer.

The User's Personal Data is stored either in Orakle Weather's databases or in those of its service providers, which are located in the European Union.

The User's Personal Data is not transferred outside the European Union.

Article 3. Data Protection Officer (DPO)

The Data Protection Officer appointed by Orakle Weather can be contacted at the following address: dpo@orakleweather.com

Article 4. Users' rights

4.1. Right of access, rectification and erasure

The user may consult, update, modify or request the deletion of their Personal Data.

If they have one, the user has the right to request the deletion of their personal account.

4.2. Right to data portability

The user has the right to request the portability of their Personal Data held by Orakle Weather to another operator.

4.3. Right to restriction of, and objection to, the Processing of Personal Data

The user has the right to request the restriction of, or to object to, the Processing of their Personal Data by Orakle Weather, and Orakle Weather may not refuse unless it demonstrates compelling legitimate grounds which override the interests, rights and freedoms of the User.

4.4. Exercising rights

Subject to providing valid proof of identity, the user may exercise their rights by contacting Orakle Weather's Data Protection Officer by email at: dpo@orakleweather.com

So that Orakle Weather can act on the request, the User must provide the following information: their first and last name, and the email address used on the Site or the Application.

Orakle Weather must reply to the User within 30 days.

If, after contacting Orakle Weather, the User believes their rights have not been respected, they may lodge a complaint with a supervisory authority.

The supervisory authority in charge of the processing carried out by Orakle Weather is the French data protection authority (CNIL).

Orakle WeatherDesigned and operated in France
ResourcesNewsroom
CompanyORAKLE WEATHER SAS — 229 rue Saint-Honoré, 75001 ParisInsurance brokerage company registered with ORIAS (orias.fr) under number 24001801
© 2026 Orakle Weather — All rights reserved