Privacy Policy & GDPR
Last updated: 26 June 2026. This document applies to spark.orbility.com, operated by OSP HOLDING - ORBILITY.
1. Data Controller
OSP HOLDING FRANCE (hereinafter 'Orbility'), a SASU with share capital of €14,423,000, registered with the RCS of Nanterre under number 838 877 108, with its establishment at 10 Bd Louise Michel, 92230 Gennevilliers, France. Contact: info@orbility.com — +33 1 41 32 71 03.
2. Data Collected and Purposes
We collect the following data: (a) Demo request form — first name, last name, email address, site name: purpose = commercial contact, legal basis = legitimate interest (Art. 6.1.f GDPR). (b) ROI form — first name, last name, email address: purpose = prospect qualification, legal basis = legitimate interest. This data is transmitted to monday.com (see section 5) and retained for 3 years from the last contact.
3. Cookies and Trackers
The site uses the following trackers:
| Tool | Category | Purpose | Legal basis | Duration |
|---|---|---|---|---|
| Google Tag Manager (GTM-TFKBC2NR) | Essential (technical) | Tag manager — loads analytics/marketing scripts after consent | Legitimate interest | Session |
| Google Analytics (via GTM) | Statistics | Anonymised audience measurement (page views, traffic source) | Consent | 13 months |
| Vercel Analytics | Statistics | Performance measurement without third-party cookies (aggregated data) | Legitimate interest | No cookie deposited |
| Marketing tags (via GTM) | Marketing | Campaign tracking (e.g. LinkedIn Insight Tag if enabled in GTM) | Consent | Up to 90 days depending on the tag |
4. Cookie Consent Banner
On your first visit, a banner allows you to accept, refuse or customise non-essential cookies (statistics and marketing). Non-essential cookies are only placed after your explicit consent. You can change your choice at any time via the 'Manage cookies' link in the footer. Your choice is remembered for 12 months.
5. Sub-processors and Data Recipients
Data collected via forms is transmitted to monday.com (monday.com Ltd, 52 Menachem Begin Road, Tel Aviv, Israel — data hosted in the EU via AWS Frankfurt). The site is hosted by Vercel Inc. (United States) — data in transit is encrypted (HTTPS/TLS). No data is sold to third parties.
6. Your GDPR Rights
- •Right of access: obtain a copy of the data we hold about you.
- •Right to rectification: correct inaccurate or incomplete data.
- •Right to erasure ('right to be forgotten'): request deletion of your data.
- •Right to object: object to processing based on legitimate interest.
- •Right to restriction: request temporary suspension of processing.
- •Right to data portability: receive your data in a structured, machine-readable format.
- •Right to lodge a complaint: with the CNIL at www.cnil.fr.
To exercise your rights, contact us at: info@orbility.com
7. Retention Periods
Form leads (demo and ROI): 3 years from the last commercial contact. Browsing data (analytics): maximum 13 months. Cookie consent preferences: 12 months.
8. Data Protection Officer
OSP HOLDING FRANCE is not required to appoint a DPO under Article 37 of the GDPR (no systematic large-scale processing of sensitive data). For any questions relating to your personal data, contact: info@orbility.com.
9. Updates
This policy may be updated to reflect legal or technical changes. The date of the last update is shown at the top of this document.
10. Contact
For any questions regarding this policy:
Orbility by OSP Holding France
10 Bd Louise Michel, 92230 Gennevilliers, France
Website: spark.orbility.com
E-mail : info@orbility.com