Privacy policy
Afineo Solutions pays particular attention to the protection of personal data.
This policy explains which data may be processed when you browse the www.afineo.com website, contact Afineo Solutions, request a demonstration or submit an application.
1. Data controller
The controller of the processing carried out through the site is:
Afineo Solutions SARL
13 B Route des Bois
Parc Le Montaly
38500 Voiron
France
For any question about your personal data, or to exercise your rights, you can contact Afineo Solutions:
- at the email address: rgpd{at}afineo.com;
- or by post at the address given above, for the attention of the GDPR officer.
2. Browsing and site security
As you browse, certain technical information may be processed in order to ensure the operation and the security of the site.
This information may include:
- the IP address;
- the date and time of connection;
- the type of browser and device used;
- the operating system;
- the pages requested;
- the events and technical logs needed to secure the site.
This processing rests on the legitimate interest of Afineo Solutions in ensuring the security, the availability and the proper operation of its site.
Technical logs are kept for a limited period, proportionate to their security purpose.
3. Contact forms
When you use a contact form, Afineo Solutions processes the information needed to answer your request.
Depending on the fields of the form, this information may include:
- your last name and first name;
- your work email address;
- your work phone number;
- your job title;
- the name of your company;
- the subject and the content of your message;
- any other information you choose to provide.
This data is used to answer your request and to follow up on the exchanges.
Depending on the subject of the request, the processing rests on the performance of pre-contractual measures taken at your request, or on the legitimate interest of Afineo Solutions in answering the professional enquiries addressed to it.
The information is accessible to the authorized people within Afineo Solutions who are concerned by the request.
It is kept for as long as is necessary to handle the request. Where it is of commercial interest, it may then be kept for a maximum of three years from the last active contact.
4. Demonstration requests
When you request a demonstration of the Afineo platform, the information provided is used to:
- analyze your request and your professional context;
- get back to you;
- organize the demonstration;
- answer your questions;
- follow up on the commercial relationship.
The processing rests on the performance of pre-contractual measures taken at your request and, for the follow-up of the commercial relationship, on the legitimate interest of Afineo Solutions.
The data is kept for the duration of the exchanges, then for a maximum of three years from the last active contact, unless a contract is signed or a legal obligation justifies a longer retention.
5. Downloading documents and resources
When access to a guide, a brochure, a white paper or another resource requires a form to be filled in, the data provided is used to give you the requested content and, where relevant, to follow up on your request.
Downloading a resource does not automatically sign you up to a newsletter.
The data is kept for as long as is necessary to send the content and follow up on the request. Where it is of commercial interest, it may be kept for a maximum of three years from the last active contact.
6. Newsletter
Afineo Solutions does not currently offer any newsletter sign-up service on its site.
No newsletter subscriber database is currently kept and no newsletter campaign is sent.
7. Applications and recruitment
When you answer a job offer published by Afineo Solutions, or send a spontaneous application, the information provided is processed in order to review your application and manage the recruitment process.
The data processed may include:
- your last name and first name;
- your contact details;
- your curriculum vitae;
- your cover letter or message;
- your qualifications, skills and professional experience;
- your availability;
- the information exchanged during the recruitment process;
- any other information you voluntarily choose to provide.
The processing of the data needed to review your application rests on the performance of pre-contractual measures taken at your request.
This information is accessible only to the authorized people within Afineo Solutions taking part in the recruitment and, where applicable, to the providers involved in that process.
If your application is successful, the information needed to manage the employment relationship is added to your employee file.
If your application is not successful, it may be kept for a maximum of two years from the last contact in order to offer you other opportunities, provided that you are informed of this and given the possibility to object.
8. Audience measurement with Google Analytics
Subject to your consent, Afineo Solutions uses Google Analytics in order to measure site traffic and better understand how its content is used.
The information processed may include:
- the pages viewed;
- the duration and the path of browsing;
- the source of the visit;
- interactions with certain content;
- technical information about the browser and the device;
- the IP address, depending on how the service is configured.
Google Analytics must only be activated after your consent. You can refuse or withdraw your consent at any time from the site’s cookie management tool.
9. YouTube videos
Some pages of the site may embed videos hosted by YouTube.
Displaying a video may lead to technical information being sent to YouTube, in particular the visitor’s IP address, and to trackers being placed or read.
Where your consent is required, the video and the associated YouTube services are only loaded after you have accepted.
10. Recipients and providers
The data is accessible only to the members of Afineo Solutions staff who need it as part of their duties.
Afineo Solutions may also use technical providers acting on its behalf, in particular for:
- hosting the site;
- its maintenance and its security;
- form management;
- business email;
- audience measurement;
- recruitment, when a provider is involved in that process.
These providers are required to comply with obligations of confidentiality, security and personal data protection.
11. Transfers outside the European Economic Area
Certain services provided by international companies, in particular Google or YouTube, may involve access to or a transfer of data outside the European Economic Area.
In that case, Afineo Solutions makes sure that the transfer rests on a mechanism recognized by the applicable regulation and is framed by appropriate safeguards.
12. Security
Afineo Solutions implements appropriate technical and organizational measures in order to protect personal data against unauthorized access, loss, disclosure, alteration or destruction.
Depending on the processing concerned, these measures include:
- limiting access to authorized people only;
- the use of individual accounts;
- strong authentication for sensitive access;
- securing exchanges;
- system backups;
- updating and monitoring technical components;
- logging security events;
- confidentiality commitments.
13. Your rights
Under the conditions provided for by the regulation, you can exercise the following rights:
- access the data concerning you;
- request its rectification;
- request its erasure;
- request the restriction of its processing;
- object to certain processing;
- withdraw your consent at any time where processing rests on it;
- request the portability of your data where the legal conditions are met;
- set instructions regarding what happens to your data after your death.
To exercise your rights, you can write to rgpd{at}afineo.com or send a letter to:
Afineo Solutions
For the attention of the GDPR officer
13 B Route des Bois
Parc Le Montaly
38500 Voiron
France
In order to protect your data, additional information may be requested where it is necessary to verify your identity.
You can also lodge a complaint with the Commission nationale de l’informatique et des libertés, the CNIL, the French data protection authority.
14. Updates to this policy
This policy may be modified in order to take account of legal, regulatory, technical or organizational developments.
The date of the last update is shown at the top of this page.