Privacy Policy

This privacy policy details the policy of Altens SA (the “Company”) regarding personal data on the altens-wordpress-web.preprod.imcr.dev website (the “Site”). This Policy applies to all information provided by you, or collected by us during your navigation on our Site, in accordance with the regulations in force in France concerning personal data, as derived from Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, known as the “Informatique et Libertés” law, and EU Regulation 2016/679 of May 25, 2018, on data protection, known as “GDPR.”

The purpose of this privacy policy is to inform individuals accessing the services offered on our Site (hereinafter “Users”) about how we collect, use, and share their personal data.

Any modification or update to this privacy policy will be brought to your attention. Your active consent to the new privacy policy will be necessary to continue using the services offered by the Company.

Who is responsible for your personal data?

The data controller, who collects and manages your data, is Altens SAS, a public limited company (Société Anonyme) with a share capital of €50,000.00, registered with the La Rochelle Trade and Companies Register under number 889 212 221, with its registered office at 5 place des Coureauleurs 17000 La Rochelle, represented by Mohamed BENNAMA, President.

What personal data is collected?

We remind you that personal data refers to any information relating to an identified or identifiable natural person, directly or indirectly.

When you browse the Site and use the various services offered by the Company, you consent to us collecting the following categories of data:

Personal Status: Last Name, First Name, Postal Address, Email Address, Phone Number;
Professional Life: Company;
Connection Data: IP Address,

(Hereinafter “Personal Data”).

You undertake to provide updated and valid identifying Personal Data, as required on the Site, and guarantee not to make any false declarations or provide any erroneous information.

How and why is your Personal Data collected?

3.1. Methods of Personal Data Collection

You consent to the Company collecting your Personal Data when you complete the following documents:

Contact form;

3.2. Legal Basis for Data Collection and Processing

Your Personal Data is collected on the following legal bases:

The specific, free, and informed consent of the User (especially for Newsletter subscription);
The fulfillment of a legal obligation incumbent upon the Company;
The performance of a contract concluded between the Company and the User (especially for the execution of the general terms of use/sale);
The legitimate interest of the Company (especially to ensure transaction security)

For what purposes is your Personal Data collected?

4.1. General Information

Mandatory Personal Data is the data strictly necessary for processing or for your requests. In the absence of communication of said data, the User is informed that certain services offered by the Company cannot be provided to them. The mandatory nature of the requested information is indicated to you during collection.

Optional Personal Data collected by the Company is intended to better understand you and improve your browsing experience on the Site.

4.2. List of Purposes

Your Personal Data is collected and processed for the following purposes:

Creation of your User account;
Subscription to our Newsletter;
Contact and assistance;
Recruitment management;
Technical monitoring and site optimization;
Commercial prospecting.

Who has access to your Personal Data?

5.1. Company Personnel

Your Personal Data is intended for persons duly authorized to process it within the Company, including, and depending on the nature of the processing and the type of data, persons in charge of the sales department, customer service, marketing department, administrative department, logistics, and IT.5.2. The Company’s Sub-processors

As part of its activities and the provision of its services, the Company uses sub-processors. These sub-processors:

Process your Personal Data on its behalf and according to its instructions,
Provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures to ensure the security and confidentiality of your data.

In cases where the Company uses sub-processors located in countries offering protection levels not equivalent to the level of personal data protection in the European Union, the Company undertakes to ensure that said transfer is governed by the Data Protection Shield established between the European Union and the United States (“Privacy Shield”) or by the signing of standard contractual clauses established by the European Commission, or by the implementation of internal corporate rules (“BCR”).

How long is your Personal Data retained?

The Company retains your Personal Data for the period strictly necessary to fulfill the purposes for which it is collected and processed, such as managing the commercial relationship or payment.

Beyond this period, your Personal Data may also be archived, involving controlled, limited, and justified access, for the necessary time (i) to comply with the Company’s legal and regulatory obligations, and/or (ii) to allow it to assert a right in court, before being permanently deleted.

How does the Company ensure the security and confidentiality of your personal data?

The Company undertakes to process your Personal Data in a manner that is:

lawful,
fair,
transparent,
for the duration necessary for the processing implemented,
secure.

The Company implements and updates appropriate technical and organizational measures to ensure the security and confidentiality of your Personal Data by preventing it from being distorted, damaged, or communicated to unauthorized third parties.

What are your rights regarding your Personal Data?

You can, upon simple written request, access your Personal Data, request its modification or rectification, or demand to no longer be included in the Company’s database.

Under the right of access, you are authorized, in accordance with Article 15 of the GDPR, to query the Company to obtain (i) communication of your Personal Data in an accessible form, (ii) confirmation that your Personal Data is or is no longer being processed, (ii) communication of the purposes of the processing, the categories of Personal Data processed, and the recipients to whom your Personal Data is communicated, and (iv) the retention period of your Personal Data or the criteria used to determine this period.

In accordance with Article 16 of the GDPR, the right to rectification grants you the right to demand that the Company rectify, complete, or update your Personal Data when it is inaccurate, incomplete, ambiguous, or outdated.

Under the conditions provided for in Article 17 of the GDPR, you have a right to erasure of your Personal Data, allowing you to ask the Company to erase your Personal Data as soon as possible, particularly when it is no longer necessary for the purposes for which it was collected.

You also have a right to restriction of processing of your Personal Data in the cases listed in Article 18 of the GDPR. You can thus request that your personal data be stored only for the purposes of:

verifying the accuracy of the Personal Data you dispute,
serving you in the context of establishing, exercising, or defending your legal rights, even if the company no longer needs it,
verifying whether the legitimate grounds pursued by the data controller override yours in the event that you object to processing based on the Company’s legitimate interest,
satisfying your request to limit the use of your data – rather than erasure – in the event that the processing of your data is unlawful.

Under the circumstances provided for in Article 20 of the GDPR, you have a right to data portability of your Personal Data, allowing you to retrieve from the Company the Personal Data you have provided to it, in a structured, commonly used, and machine-readable format, for the purpose of transmitting it to another data controller.

In accordance with Article 21 of the GDPR, you have the right to object, at any time, to the processing of your Personal Data for commercial prospecting purposes.

To exercise your aforementioned rights of access, rectification, erasure, restriction, portability, and objection, simply send your request by email to the following address: contact@altens.fr

The Company will provide the person exercising one of these rights with information on the measures taken, as soon as possible and in any event within one (1) month of receiving the request. This period may be extended by two (2) months, given the complexity and number of requests.

If the Company does not act on the request, it will inform the person, as soon as possible, and no later than one (1) month from receipt of their request, of the reasons for its inaction and of the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

The exercise of these rights is free of charge. However, in the event of a manifestly unfounded or excessive request, the Company reserves the right (i) to demand payment of fees taking into account administrative costs, or (ii) to refuse to act on such requests.

You can also request the retrieval or deletion of your personal data via a form.

What remedies are available in case of a data breach?

In the event of a breach of your Personal Data likely to pose a risk to your rights and freedoms, the Company will notify the CNIL of the breach as soon as possible, and, if possible, no later than 72 hours after becoming aware of it. The Company will also inform the User as soon as possible in accordance with the provisions of Article 34 of the GDPR.

Without prejudice to any other administrative or judicial remedy, a User who considers that the processing of their Personal Data constitutes a violation of the provisions of the legislation in force may lodge a complaint with a competent supervisory authority such as the Commission Nationale de l’Informatique et des Libertés (CNIL).

Who to ask your questions to?

For any questions concerning the processing of their personal data and the exercise of their rights, Users can contact our dedicated service at the following address: contact@altens.fr