Privacy Policy.

1. Purpose of the Privacy Policy

This Privacy Policy explains how Autonomia processes the personal data it collects from you, whether when you sign up for our services, during the provision of those services, while you browse our websites, or when you respond to our surveys.

It covers the following areas:

It also reminds you of your data protection rights and how to exercise them. Additional details may be provided when you sign up for one of our services.

Autonomia is the data controller for your personal data. Autonomia is a brand of the Oui Care Group, whose shared headquarters are located at 85 Boulevard Marie et Alexandre OYON, 72100 LE MANS, France.

2. Affected individuals

The processing described in this policy applies to you as:

  • Customers who have or wish to subscribe to an Autonomia service,
  • A relative or beneficiary of a client,
  • Candidate who has applied for a job opening,
  • Visitor browsing our websites.

3. Data Collected

3.1 Data Types

We collect several categories of personal data about you:

  • Personal information: last name, first name;
  • Contact information: email address, mailing address, phone number;
  • Data related to your lifestyle habits, provided only with your consent, which may include sensitive data as defined in Article 9 of the GDPR;
  • Login and browsing data on our websites;
  • Information provided when applying.

3.2 Data collected via forms

The information required to process your request is marked with an asterisk on the relevant forms.

Form / Context

Data collected

Purpose

Request for information / contact

Last name, first name, email, phone number, message

Processing your request

Signing up for a service

Contact information + lifestyle information

Performance of the Service Agreement

Autonomia Questionnaires

Health and wellness data, personal life

Assessment and personalized follow-up

Application

Resume, cover letter, contact information, work history

Recruitment Management

Site Navigation

Technical and navigation data

Statistics, security, customization

3.3 Data Sources

Your data is collected from:

  • You, through the forms and documents you have completed as part of our services;
  • Automatically, through cookies while you browse;
  • Third-party sources: subsidiaries of the Oui Care Group, business partners, service providers.

4. Purposes and Legal Bases for Processing

The processing activities carried out by Autonomia serve a specific, legitimate, and defined purpose. Each processing activity is based on one of the following legal grounds:

Purpose

Legal basis

Customer Relationship Management

Performance of the Contract

Provision of the service

Performance of the Contract

Response to your inquiries

Pre-contractual measures / legitimate interest

Application Tracking

Pre-contractual measures / legitimate interest

Service Improvement and Development

Legitimate interest

Information about our services

Legitimate interest / consent

Website navigation and statistics

Consent (cookies) / legitimate interest

Processing of sensitive data (Art. 9 GDPR)

Explicit consent (Art. 9(2)(a) of the GDPR)

Compliance with legal obligations

Legal requirement

When processing is based on your consent, you may withdraw it at any time by simply sending a request to contact@autonomia.care.

In accordance with the regulations governing telemarketing, and in particular Law No. 2025-594 of June 30, 2025, Autonomia may contact you by phone following a contact form you have completed, in order to respond to your request or to present its services to you, only Monday through Friday from 10 a.m. to 1 p.m. and from 2 p.m. to 8 p.m., excluding Saturdays, Sundays, and holidays.

5. Recipients of the data

Autonomia may share some of your data with the following recipients:

  • Authorized personnel at Autonomia: to process your requests and ensure the proper delivery of services.
  • The Oui Care Group’s technical service providers and subsidiaries: whose involvement is strictly necessary to achieve the aforementioned purposes. Autonomia ensures that these third parties guarantee the integrity, confidentiality, and security of the data.
  • Business partners: only with your express consent to forward your request to personal service providers.
  • Advertising partners: only with your consent, for the purposes of advertising targeting and profiling (see the Cookies section).
  • Administrative and judicial authorities: when they make a lawful request. Only the information specifically requested by authorized and sworn officials is disclosed.

Your data will not be used for any purpose other than those described in this policy, unless you provide your express and revocable consent.

6. Cookie Management

Cookies are small text files stored on your device when you browse the web. They are used to store information about your visit. You can manage them directly from your browser.

You can find all the information about cookies directly in the cookie consent window on Autonomia websites, as well as on the Cookies and Trackers page.

7. International data transfers

Autonomia generally does not transfer any personal data that has not been anonymized or pseudonymized outside the European Union. 

Otherwise, such transfers are made only if one of the following conditions is met:

  • The European Commission has recognized the recipient country as providing an adequate level of protection;
  • Appropriate safeguards are in place: standard contractual clauses approved by the European Commission, binding corporate rules, or applicable exceptions (explicit consent, performance of a contract, etc.).

8. Data Retention

Your data is retained for a limited period of time, determined based on the purpose of the processing and applicable law:

Data type

Shelf life

Customer data and service contracts

Duration of the contractual relationship + 5 years (statute of limitations)

Sales prospecting data

3 years from the last contact

Application Information (Not Selected)

2 years from the date of the last application

Browsing data and cookies

Up to 13 months (in accordance with CNIL recommendations)

Sensitive personal data (Art. 9 of the GDPR)

The period strictly necessary for the purpose of the processing

Once these periods have expired, the data is permanently deleted or anonymized. It may also be securely archived for as long as required to comply with legal or regulatory obligations (including tax and accounting obligations).

  1. Data Security

Autonomia implements technical and organizational measures tailored to the nature of the data and the associated risks in order to ensure its security and confidentiality. These measures include, in particular:

  • Access to data is strictly limited to personnel authorized by virtue of their duties;
  • Contractual guarantees required of external service providers;
  • Privacy Impact Assessments (PIAs) for high-risk processing operations;
  • Regular reviews of our security practices and policies;
  • Physical and IT security measures: secure access, authentication, backups, antivirus software, and firewalls.

10. Your rights regarding your personal data

In accordance with the French Data Protection Act and the GDPR, you have the following rights:

  • Right to be informed (Articles 12–14 of the GDPR);
  • Right of access (Article 15 of the GDPR) and the right to rectification (Article 16 of the GDPR);
  • Right to erasure (Article 17 of the GDPR);
  • Right to withdraw consent at any time (Article 13(2)(c) of the GDPR);
  • Right to restriction of processing (Article 18 of the GDPR);
  • Right to object to certain processing operations (Article 21 of the GDPR);
  • Right to data portability (Article 20 of the GDPR), for automated processing based on your consent or a contract;
  • Right to lodge a complaint with the CNIL (Article 77 of the GDPR).

To exercise your rights, please submit a request including your contact information (last name, first name, address) by:

  • By email: contact@autonomia.care
  • By mail: Oui Care – Personal Data Protection Department, 85 Boulevard Marie et Alexandre Oyon, P.O. Box 85533, 72055 Le Mans Cedex 2

You may be asked to provide proof of identity to verify your request. For more information about your rights, visit the CNIL website: http://cnil.fr.

11. Changes to this policy

Autonomia reserves the right to modify this privacy policy to ensure it remains in compliance with changes in regulations and its practices.

Last updated: May 5, 2026