GDPR

1.PERSONAL DATA

Within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and to the free movement of such data (“General Data Protection Regulation” or “GDPR”), each Party is an independent controller for its own processing operations and must assume its own responsibilities for the compliance of its personal data collection, processing and transfer practices with the applicable regulations.

The information collected by AVALIANCE is the information necessary for the processing and follow-up of the Quote and the Services, including in particular the Client’s identification data (surname, first name, email address, and where applicable, position within the organization), as well as, where applicable, any personal information necessary for the performance of the Services. In this context, the legal basis for this processing is the performance of the contract within the meaning of Article 6(b) of the GDPR when the Client is a natural person, or AVALIANCE’s legitimate interests within the meaning of Article 6(f) of the GDPR when the processing relates to the personal data of the Client’s employees.

AVALIANCE will retain the Client’s and/or its employees’ personal data for the period necessary for the purposes pursued, taking into account in particular (i) the nature and purpose of the processing in question, (ii) the categories of data processed; (iii) the applicable limitation periods, (iv) the applicable contractual provisions, (v) industry standards and (vi) the recommendations of the French National Commission for Information Technology and Civil Liberties (CNIL).

The recipients of this personal data may be AVALIANCE’s service providers, particularly IT service providers. Outside this framework, AVALIANCE may also be required to disclose this personal data in specific circumstances, such as those listed below:

Due to the law, in the context of legal proceedings, litigation or a request from public authorities;
If disclosure is necessary for national security, law enforcement or another matter of public interest;
If disclosure is reasonably necessary to enforce compliance with these General Terms and Conditions or to protect its activities or its Clients;
In the event of restructuring or transfer, AVALIANCE may transfer any personal data it retains to the third party concerned.

In accordance with the regulatory and legal provisions in force, natural persons whose personal data is processed by AVALIANCE in the context of the Services have the right to request from AVALIANCE access to, rectification and/or erasure of their personal data, to request restriction of the processing of their personal data, to object to the processing of their personal data by AVALIANCE, the right to portability of their personal data, and the right to define instructions relating to the storage, erasure and communication of personal data after their death.

To exercise all of these rights, a request must be sent to the postal address: AVALIANCE, 17 Place Beffroy, 92200 NEUILLY-SUR-SEINE; or by email to the following address: dpo.global@avaliance.com.

The data subjects also have the right to lodge a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL).