Privacy Policy

This Privacy Policy informs you about how Éditions Odile Jacob may collect, receive, and process your personal data when you visit the website www.odilejacobpublishing.com.

The term “personal data” refers to any information that can directly or indirectly identify the user accessing the Website (hereinafter “the User”), such as a name, email address, identifier, or location data (hereinafter “Personal Data”).

This Privacy Policy may be updated at any time. Modifications take effect upon publication on the Website and become binding on Users from the date of their first connection to the Website following the update.

This Privacy Policy complies with European and French regulations on data protection and privacy, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978, as amended by Act No. 2004-575 of 21 June 2004 (“Law for Confidence in the Digital Economy”).

1. Data Controller and Data Protection Officer

Éditions Odile Jacob, whose registered office is located at 3, Rue Auguste Comte – 75006 Paris, France, and registered with the Paris Trade and Companies Register under number B 333 520 575, is the Data Controller for the Personal Data collected through the Website.

For any questions regarding this Privacy Policy or the protection of your Personal Data, you may contact our Data Protection Officer (DPO) by email at: dpo@odilejacob.fr.

2. Personal Data Collected

2.1 Newsletter Subscription

When you subscribe to our newsletter, we collect your email address with your explicit consent (via a checkbox). You may unsubscribe at any time using the link provided in each email. Unsubscription takes effect immediately.

2.2 Creation of a User Account

To create an account and manage your purchases, we collect the following information:

• First name, last name, email address, and password
• Date of birth (mandatory), gender, profession, and interests (optional)
• Billing and delivery addresses
• Payment details – These are collected and stored exclusively by our service provider Paybox (Verifone). Your payment data is processed solely by Paybox (Verifone), which is certified under the international PCI DSS standard. Paybox acts as a data processor under the GDPR and implements all necessary security measures to protect your payment data. This information is used exclusively to process your payments and is never stored by Éditions Odile Jacob. Paybox/Verifone undertakes to ensure the confidentiality, security, and integrity of these data, not to use them for other purposes, and to notify Éditions Odile Jacob of any security incident that may affect the processed data.

2.3 Browsing and Cookies

When you browse the Website, cookies or trackers may be placed on your device (see Section 4).

2.4 Contact Form

When you use the contact form, we collect your email address (and, where applicable, your first and last names and any additional information you choose to include in your message). These data are used solely to respond to your inquiry and are retained for a maximum of three (3) years after the last contact, unless a legal obligation requires otherwise.

3. Legal Bases for Processing

Depending on the type of data collected, we rely on the following legal bases:

• Your consent: newsletter subscription, marketing/analytics cookies
• Performance of a contract: creation and management of your account, processing of your orders
• Legal obligation: retention of invoices
• Legitimate interest: cookies strictly necessary for the proper functioning of the Website

4. Cookies and Trackers

4.1 Definition

A cookie is a small text file stored on your device when you visit a website. These trackers automatically collect certain technical browsing data, such as:

• Date and time of visits
• Pages viewed and clicks made
• Search terms used on the Website
• IP address and device identifier
• Browser type and operating system

These data are collected passively during browsing, as opposed to information you voluntarily provide (e.g., your email address when subscribing to the newsletter or using the contact form).

4.2 Types of Cookies Used

• Strictly necessary technical cookies: ensure the Website’s basic functionality (shopping cart, session, security).
• Functional cookies: essential for providing and operating the requested features. They personalize the Website experience by securely remembering login information (e.g., cookie consent).
• Audience measurement cookies: used to analyze website traffic and usage (e.g., Google Analytics).
• Advertising and social media cookies: used to personalize content and provide advertisements tailored to your interests on our Website or third-party sites.
  • Meta Pixel (Facebook/Instagram): enables tracking of user navigation, measuring ad campaign effectiveness, and displaying personalized ads on Facebook and Instagram.
  • Google Ads / Google Ads Remarketing: online advertising service from Google that helps us display personalized ads when you search on Google or visit websites using Google Ads. These cookies measure campaign effectiveness and allow retargeting of users who have already visited our Website.

4.3 Consent

We comply with the CNIL (French Data Protection Authority) guidelines and recommendations dated 17 September 2020 on the use of cookies and trackers:

• No non-essential cookies are set without your consent.
• On your first visit, a banner allows you to accept, refuse, or customize your choices. Refusing is as simple as accepting.
• You can modify your preferences at any time via the “Manage my cookies” link at the bottom of the page.
• Your choice (acceptance or refusal) is retained for a maximum of six (6) months, after which you will be asked again.
• We keep proof of your consent in accordance with CNIL requirements.

4.4 Retention Period

The retention period for cookies is specified in Section 7, “Retention of Personal Data.”

4.5 Main Cookies Used

5. Data Recipients

The collected data are intended exclusively for Éditions Odile Jacob, including the marketing, sales, customer relations, administrative, logistics, and IT departments, as well as our IT subcontractor Idianet. They may be transmitted to technical service providers (hosting, payment, email delivery) to ensure service performance, in compliance with applicable regulations. No data are sold to third parties.

6. Data Transfers Outside the European Union

Certain partners of Éditions Odile Jacob, such as Google and Meta, may transfer data to the United States, where the collected information is hosted. These transfers are governed by the European Commission’s Standard Contractual Clauses and, since 2023, by the EU – US Data Privacy Framework.

7. Retention of Personal Data

• Newsletter data: retained for three (3) years after the last interaction. If you unsubscribe, your email address is immediately removed from the mailing list and retained only in a suppression list to ensure that you no longer receive communications from us. This is kept only for as long as necessary to manage the opt-out.
• User account data: retained while the account is active, then for three (3) years after the last login.
• Billing data: retained for ten (10) years (legal requirement).
• Analytics and advertising cookies: retained for up to 13 months.
• Strictly necessary technical cookies: retained for the session duration or as required for the service.
• Cookie consent records: retained for six (6) months, after which consent is requested again.

The retention periods are determined in accordance with CNIL recommendations, including Simplified Standard NS-048 relating to customer – prospect files and online sales.

8. Your Rights

You may configure your browser to accept all cookies, be notified of their placement, or refuse them altogether.

You can also change your mind and modify your preferences regarding cookies at any time directly on our Site by clicking here

In accordance with European and national data protection regulations, including the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679), you have the following rights:

• Right of access, rectification, and erasure of your data
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw your consent at any time

A link to unsubscribe is included at the bottom of every communication we send.

To exercise your rights, please contact our DPO at the following address: dpo@odilejacob.fr.

9. Data Security

We implement appropriate technical and organizational measures to protect your data (encryption, backups, access control). These data are hosted in France by Idianet.

10. Governing Law and Jurisdiction

This Privacy Policy is governed by French law.

In the event of a dispute relating to the processing of Personal Data in connection with the use of the Website, Users and the Data Controller agree to seek an amicable resolution in good faith before taking further action. Failing that, the User may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or refer the matter to the competent courts.

The applicable version of this Privacy Policy is the one published on the Website at the time of your visit.

This Privacy Policy was last updated on 06 October 2025.