Privacy policy

Data controller

The controller of personal data collected through allyvia.eu and in connection with ALLYVIA’s activities is Marina Petrova, registered in France as an individual entrepreneur (entrepreneur individuel – EI), trading under the name ALLYVIA.

Business address: 30 Boulevard Maréchal Joffre, 21000 Dijon, France
Email: contact@allyvia.eu

Data collected and purposes

ALLYVIA may collect the following personal data:

• Contact form: first name, last name, company, email address, telephone number and message content, to respond to your enquiry.
• Diagnostic assessments / appointments: identity, contact details and information you provide about your business, to prepare for and conduct the appointment.
• Quotations and contracting: identity, company, contact details and information needed to prepare a quotation and enter into a contract.
• Service delivery: contact details, correspondence and documents needed to carry out the agreed work.
• Invoicing: identity, address, company and information needed to issue invoices and comply with applicable accounting and tax obligations.

ALLYVIA collects only the data necessary for the purposes described above.

Legal bases

Depending on the purpose, ALLYVIA processes personal data on the following legal bases:

• Booking a free consultation and requesting a quotation or diagnostic assessment: taking steps at your request before entering into a contract, where you are the prospective contracting party.
• Carrying out a diagnostic assessment or providing a service: performance of a contract, where you are a party to that contract.
• Invoicing and retaining accounting documents: compliance with ALLYVIA’s legal obligations.
• Business-to-business direct marketing: ALLYVIA’s legitimate interest in presenting its services to professionals, subject to applicable legal requirements.
• General enquiries: ALLYVIA’s legitimate interest in responding to enquiries received.
• Communications with representatives and contact persons of existing or prospective business clients: ALLYVIA’s legitimate interest in establishing and maintaining business relationships.
• Handling complaints and retaining necessary supporting evidence: ALLYVIA’s legitimate interest in defending its rights.

Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before its withdrawal.

Mandatory information

Required fields are identified in the relevant forms. Without this information, ALLYVIA may be unable to respond to your enquiry or provide the service. Other information is optional.

Please do not submit sensitive personal data, including health information, through the contact form.

Direct marketing to professionals

ALLYVIA may use your business contact details to present services relevant to your professional activities, based on its legitimate interest in developing its business.

You may object to these communications at any time, free of charge, using the method provided in each message or by emailing contact@allyvia.eu.

Retention periods

Personal data is retained only for as long as necessary for the purposes for which it was collected.

• Prospective client data: up to three years from collection or the last contact initiated by the prospective client, where the data is used for direct marketing.
• Data needed to deliver services: for the duration of the contractual relationship, then archived where retention is necessary to comply with a legal obligation or defend ALLYVIA’s rights.
• Accounting documents and invoices: ten years, in accordance with applicable legal obligations.
• Client data used for direct marketing: throughout the business relationship and for up to three years after it ends.
• Data from cookies and audience measurement tools, where used: for the periods specified in the Cookie Policy.
• Data needed to honour an objection to direct marketing: retained in a dedicated suppression list for at least three years, solely to prevent further marketing communications.

Data Processed on Behalf of Clients

Where ALLYVIA processes personal data on behalf of a client as part of an assignment, the processing is governed by the GDPR data protection addendum agreed with that client and their documented instructions.

Individuals concerned should address their requests to the client acting as data controller. ALLYVIA provides the assistance specified in that addendum.

Recipients

Personal data is accessible to ALLYVIA and the technical service providers needed to operate the website and deliver services.

Depending on the services and tools used, these providers may be involved in:

• website hosting: SNM Support;
• preparing quotations and invoicing: Qonto;
• email and collaboration tools;
• appointment booking;
• video conferencing;
• data storage and organisation;
• audience measurement.

These providers access personal data only to the extent necessary to deliver their services and in accordance with applicable data protection obligations.

Some providers may process data outside the European Economic Area. Where such transfers take place, ALLYVIA ensures that they rely on a mechanism recognised under applicable data protection legislation.

Your rights

Under applicable data protection legislation, and depending on the processing concerned, you may exercise your rights of access, rectification, erasure, restriction of processing, objection and data portability.

Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before its withdrawal.

To exercise your rights or ask a question about the processing of your personal data, you can contact ALLYVIA at:

contact@allyvia.eu

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL).

Security

ALLYVIA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to data is restricted to the individuals and service providers who need it for the purposes described in this policy.