AlloBrain
Request a demo

Privacy policy

Effective as of July 1, 2024

We attach great importance to the protection of your personal data and respect for your privacy. This policy aims to inform you about our practices regarding the collection, processing, and sharing of data you provide to us.

Preamble

We consider your personal data to be confidential information to which we pay particular attention.

Personal data includes all data that allows you to be identified directly or indirectly, including your name, phone number, email address, IP address, as well as any other data communicated directly by you, particularly on our website or generated by your browsing.

In accordance with legal and regulatory obligations, we collect, use, share, and retain this information under enhanced security conditions and for limited periods, proportional to the purposes for which you have communicated them to us.

1. Data collection

You trust us with the processing of your data, and we aim to be transparent about how we collect it.

We collect the data you provide when you use our online services, particularly when you:

  • Browse and consult our site;
  • Request a product demonstration;
  • Subscribe to blog newsletters;
  • Contact us;
  • Fill out an information entry form.

Under no circumstances do we automatically collect visitors’ email addresses without them deliberately communicating it to us.

Furthermore, certain information required when requesting a demonstration is mandatory and is indicated by an asterisk. Their collection is essential for processing your request. Consequently, if you fail to respond, we will not be able to process your request.

2. Nature of data and purposes of data processing

We use your personal data according to the purposes for which you have transmitted them to us, which are based on one or more of the following legal grounds:

  • The execution of services we offer you;
  • Your consent;
  • Our legitimate interests;
  • A legal, regulatory, judicial, or administrative obligation.
Personal dataPurposesLegal bases
Name/Surname
  • Identify you
  • Provide the product or service to the nominally eligible person
  • Improve our services and your customer experience
  • Personalize our communications
  • Conduct statistical analyses
  • Establish a nominative document: an invoice or a guarantee
  • Prepare a quote
  • Execute a contract
  • Legitimate interest, improve our services
Email address
  • Bill you
  • Prepare a quote
  • Identify you
  • Contact you
  • Send you newsletters
  • Present our products to you
  • Execute a contract
  • Consent
  • Legitimate interest
Company name
  • Bill you
  • Prepare a quote
  • Execute a contract
  • Legitimate interest

3. Transmission of personal data to third parties

Your personal data, collected through our services, may be transmitted to third parties within the limits provided by the provisions in force and in accordance with this policy.

3.1 Subcontractors

Your personal data may be transmitted to external service providers who process it on our behalf, according to our instructions.

The transmission of your data to our subcontractors is supervised to ensure the security of your data.

This includes third-party companies providing support services, technology service providers, etc.

3.2 State authorities

In order to comply with legal, regulatory, judicial, or administrative obligations or to respond to requests from administrative and judicial authorities, we may be required to communicate your data to these authorities whenever we are legally obliged to do so.

4. Transfer of personal data outside the European Union

Your personal data is processed and hosted on servers located in the European Union. However, it is possible that occasionally this data may be transferred to a subcontractor whose servers are located in a third country outside the European Union.

In such cases, we will take all necessary measures to ensure the security of your data and compliance with legal and regulatory obligations, particularly by signing standard contractual clauses. We will ensure that they are protected in the same way as if they were used within the European Union.

5. Data retention period

Customers

We retain data for the duration of our commercial relationship and for a maximum of 3 years after the last interaction with the Customer.

Data related to billing operations is retained for 10 years in accordance with our legal obligations.

Prospects

We retain data for a maximum of 3 years after the last interaction with the prospect who has shown interest in our products and/or services.

In addition to the retention period of your data, it will no longer be used to send you commercial solicitations via email beyond a period of three years from your last interaction with us, which means notably either:

  • Your date of last activity (click or connection)
  • Your date of last email activity (opening or click)

6. Rights of data subjects

The use of your data is possible either due to the execution and monitoring of our contractual relationships, or because you have expressly consented to it, and to respond to our legitimate interests or a legal obligation.

However, at any time, you have the right to access, portability, rectification, and erasure of your data or to limit its processing.

You can exercise these rights concerning you under the conditions provided by legal and regulatory provisions by making a request by email to:dpo@allobrain.com

You can also object, for legitimate reasons, to your personal data being processed or stored in our customer files.

Regarding prospecting, you can exercise your right to object to the processing of your data without having to justify a legitimate reason. If you have given us your consent to use your data, for example, to send you newsletters, you can withdraw your consent at any time.

If, for any reason, you consider that our response is not satisfactory, you can file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), responsible for protecting personal data on French territory, via the following link:https://www.cnil.fr/fr/plaintes.

7. IT security

7.1 General principle

We implement all appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data and prevent any potential destruction, loss, alteration, disclosure, intrusion, or unauthorized access to this data, whether accidental or unlawful.

7.2 Management of security breaches

We have implemented a procedure for prevention, management, remediation of security breaches, and notification of personal data breaches, in accordance with legal and regulatory provisions. This procedure allows us to effectively address vulnerabilities and potential personal data breaches.

We are committed to notifying cases of personal data breaches as soon as possible, and no later than 72 hours after becoming aware of them, to the competent supervisory authority, the CNIL, if the breach in question is likely to result in a risk to your rights and freedoms.

We are also committed to notifying you as soon as possible when this breach is likely to result in a high risk to your rights and freedoms. We will also communicate to you the measures taken to address the breach of your data, including measures to mitigate its consequences.

8. Modification of the privacy policy

We may need to modify this policy. If it turns out that these modifications could lead to a reduction in your rights, we will inform you directly through the contact means you have provided to us.

9. Contact

For any questions, you can contact our customer service at:contact@allobrain.com

Furthermore, you can also write to the following address:dpo@allobrain.com which is specifically for handling the following subjects:

  • Filing a complaint regarding the Privacy Policy and confidentiality
  • Questions concerning this Privacy Policy and confidentiality