AlliX Privacy Policy
I. General
- Purpose and scope
1.1.1. The Privacy Policy concerns exclusively employees of the Users of AlliX’s services, whose Personal Data is processed by AlliX in the context of:
- Services made available or provided by AlliX to Users;
- AlliX business development activities ;
- The operation of Allix’s website www.alliance-allix.com.
1.1.2. If you have any questions regarding AlliX’s processing of your Data, please contact us at :
- by e-mail to: donnees@allix-alliance.com
- by post to 35, boulevard de Sébastopol, 75001 Paris, addressed to the attention of the DPO.
1.1.3. The www.alliance-allix.com website uses cookies. When consent is required, you can manage your consent to the use of cookies from the consent management banner. For further information, please consult our cookies policy. .
- Definitions
The following terms, when their first letter is capitalized, singular or plural, will have the following meaning:
| “AlliX” | Refers to ALLIX, SAS with share capital of 30,000 euros, headquartered at 35, boulevard de Sébastopol, 75001 Paris. |
| “Personal Data” or “Data”. | Refers to any personal data within the meaning of the GDPRGDPR, i.e. any data identifying you directly (surname, first name, email address…) or indirectly (profession, postal address…). In principle, all personal data processed by AlliX in connection with its activities is professional in nature. |
| “Employee” | Any natural person assigned to a User who uses or benefits from AlliX services on behalf of this User.Any natural person employed by a User who uses or benefits from AlliX’s services on behalf of this User. |
| “Privacy Policy” or “Policy | Means this Privacy Policy. |
| “Processing” | Refers to any operation or set of operations applied to Personal Data, including, but not limited to, the collection, recording, organization, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, reconciliation or interconnection, limitation, erasure or destruction of Personal Data. |
| “Processor” | Refers to the person who determines the purposes and means of processing your Personal Data. |
| “GDPRGDPR” | Refers to the European Regulation 2016/679 of April 27, 2016 on the protection of personal data. |
| “Subcontractor” | Refers to any person processing personal data on behalf of AlliX. |
| “Users” | Refers to the Members of Groupe SOCODA, Van Marcke and Richardson as well as any affiliated company on the one hand, and their suppliers on the other hand, who use the AlliX services. |
3.Processing carried out by AlliX
AlliX processes your Personal Data in your capacity as an Employee. You will find below a list of the processing operations carried out.
Not all processing operations apply to all Users. Which processing operations apply will depend on the services subscribed by and the quality of each User.
| Nature of the processing | Data processed | Purpose | Legal basis | Data retention periods |
| Trading on behalf of Users | Business e-mail, last name, first name, company, title, business telephone number | Allow AlliX to negotiate purchase terms on behalf of Users or other similar benefits. | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in carrying out its statutory duties. | 5 years from the last contract concluded between AlliX and the User |
| Allow AlliX to enter into a contract with or on behalf of Users | Business e-mail, last name, first name, company, title, business telephone number, business address, signature | Allow AlliX to enter into a contract with or on behalf of Users | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in carrying out its statutory duties. | 5 years from the last contract concluded between AlliX and the User |
| Execution of other services provided by AlliX to Users (e.g. pooling of resources) | Business e-mail, last name, first name, company, title, business telephone number, business address | Allow AlliX to implement its services and Users to benefit from these services | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in carrying out its statutory duties. | 5 years from the last contract concluded between AlliX and the User |
| Database administration and management | Business e-mail, last name, first name, company, title, business telephone number, business address, business sector | Allow AlliX to administer and manage databases | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in carrying out its statutory duties. | 5 years from the last contract concluded between AlliX and the User |
| Create, validate and/or manage profiles on collaborative data administration software tools | Business e-mail, last name, first name, company, title, validation code, business telephone number, login details | Create a profile, send a code to validate profile creation and/or update profile data | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in providing collaborative software tools. | 5 years from the last contract concluded between AlliX and the User |
| Management of User requests, including contact form | Business e-mail, last name, first name, company, title, business telephone number, nature of your request, content of exchanges, action taken on your request | Allow AlliX to respond to User requests | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in performing the services from which the User benefits / to which the User has subscribed | 5 years from the last contract between AlliX and the User Information provided by the User that is not required to process the request will be deleted. |
| IT management and support for AlliX services | Log in and trace data (identifiers of the account used to log into the service, date and time of login, actions performed, other traces and logs) | Allow AlliX to ensure the safety and smooth operation of its services | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in ensuring the security and proper functioning of its services. | 12 months maximum from the date of access |
| Statistics | Data relating to the use of the service concerned (selected products, tests, advice, etc.) | compile statistics about AlliX’s activities and/or use of AlliX’s services | AlliX’s legitimate interest (art. 6§1.f) of the GDPR) in understanding how its services are used in order to improve them. | This data is anonymized |
| Sending promotional e-mails | E-mail, last name, first name. | Inform, communicate and promote AlliX services | Legitimate interest of AlliX (art. 6§1.f) of the GDPR) to inform its customers about its activities and to communicate about its products and services. | 5 years from the last contract concluded between AlliX and the User |
4. How we obtain and/or share your Personal Data
- Obtaining your Personal Data
Your Personal Data has been obtained directly from you or through your employer, in its capacity as User.
The Privacy Policy is made available to you the first time you interact with us (e.g. hyperlink in a registration form or in the footer of an e-mail).
- Sharing your Personal Data
Your Personal Data may be shared by AlliX with the following recipients:
| Type of recipient | Further information |
| Suppliers | Your Data may be transferred to suppliers when negotiating purchasing conditions or other services. |
| IT and software providers | Your Data may be transferred to IT and software service providers necessary for the operation of AlliX activities (e.g. hosting service providers, suppliers’ data management software publishers, etc.). |
| Other service providers | – Chartered Accountants and Statutory Auditors ; – Lawyers (in the event of complex requests relating to your data or litigation) |
In such cases, only the Personal Data required by the recipients concerned to perform their services is transferred.
- Specific information concerning the transfer of your Personal Data outside the European Economic Area
To the best of our ability, we limit the use of third-party service providers located outside the European Union or the European Economic Area. Nevertheless, the geographical location of some of our IT service providers or business partners may require us to transfer data outside the European Union or the European Economic Area.
In such cases, we ensure that recipients provide an adequate level of protection for your Personal Data, comparable to the relevant legislation and regulations within the European Union, before transferring it to them. T To this end, we may use the European Commission’s standard contractual clauses as a framework for such transfers, where necessary amended to reinforce the level of protection afforded to your Personal Data.
Please also note that some of our service providers and partners may transfer your Personal Data outside the European Union or the European Economic Area in order to perform their services. In such cases, we require that such transfers are carried out in compliance with the applicable data protection legislation.
5. Your rights and how to exercise them
- Your rights
You have the following rights with regard to your Personal Data:
| The rights | Your rights |
| The right to object | You have the right, at any time, to object to the Processing of your Personal Data, where such Processing is carried out on the legal basis of our legitimate interest. When you object to the Processing of your Personal Data : • for advertising purposes, you may object without giving us any reason(s) for your request; • for any other purpose, you must tell us the compelling reason(s) behind your request to exercise your right to object. Your objection to the processing of your Personal Data applies to all subsequent processing. Please be aware that we may continue to send you advertising material after we have received your objection. These mailings are temporary, and some are automatically scheduled in advance. However, this does not mean that we will not implement your right to object. |
| Withdrawing your consent | You have the right at any time to withdraw your consent to the Processing of your Personal Data, where such Processing is carried out on the legal basis of your consent. You may withdraw your consent without giving us any reason(s) for doing so. If you wish to unsubscribe from our newsletter, simply click on the “unsubscribe” field at the bottom of each newsletter page. Withdrawal of your consent to the Processing of your Personal Data applies to all subsequent processing. Please note that we may continue to send you advertising material after receiving your request to withdraw your consent. These mailings are temporary, and some are automatically scheduled in advance. However, this does not mean that we do not exercise your right to withdraw your consent. |
| The right of rectification | You have the right to ask us to correct Personal Data that is incorrect or incomplete. |
| The right of access | You have the right to ask us about the nature and methods of the Processing of your Personal Data that we carry out. You also have the right to obtain a copy of the Personal Data we hold about you. |
| The right to erasure | You have the right to ask us to delete your Personal Data. In this case, we will delete the Personal Data concerned as far as possible. However, please note that such a request cannot affect our right to retain your Personal Data necessary: • to meet our legal obligations. • in the event of a claim and/or dispute relating to your orders, products and/or subscribed services. |
| The right to portability | You have the right to ask us to transfer your Personal Data to you and/or to a third party of your choice, in a format that is technically usable by you or by said third party. |
| The right to limitation | You have the right to ask us to restrict the Processing of your Personal Data, in one of the following cases: • if you dispute the accuracy of your Personal Data or consider that we are processing it in breach of our obligations, but do not wish it to be deleted immediately; in either case, we must suspend the Processing of your Personal Data while we carry out the necessary checks; • when we no longer need the Personal Data but you need it to assert, exercise and/or defend your rights; in this case, we must retain the Personal Data that you require. |
| The right to give instructions | You have the right to give us instructions on what to do with your Personal Data after your death. |
If you believe that we are not processing your Personal Data in accordance with applicable law, you have the right to lodge a complaint with the CNIL(https://www.cnil.fr/fr/plaintes) or any other competent supervisory authority.
- How to exercise your rights
To exercise one of your rights, simply send us your request:
| by e-mail: | at the following address: donnees@allix-alliance.com |
| by post: | to 35, boulevard de Sébastopol, 75001 Paris, directed to the DPO. |
No payment will be required for the exercise of your rights, other than the costs of sending your requests, except in the case of repetitive and manifestly unfounded requests. After receiving your request :
- your Personal Data transmitted on this occasion as well as our subsequent correspondence will be kept in archive form for a period of 5 years from the final processing of your request;
- we may ask you for additional information to confirm your identity; this additional data will be deleted once your identity has been confirmed.
The legal basis for the processing of these Personal Data is Article 6, paragraph 1 f) of the GDPR, namely our legitimate interest. The legitimacy of such processing is to be able to prove that we have processed your request to exercise a right.
- Modifications
This Privacy Policy may be updated from time to time, in particular in response to changes in legislation or AlliX’s activities. The version of this Policy, as made available, is always the one currently in effect. We therefore invite you to consult it regularly.
If necessary, we will inform you by e-mail of any changes to this Policy.
October 17, 2023 version