Privacy Policy
At Alforis Finance, privacy and data security are essential. This policy describes our GDPR (EU 2016/679) commitments applied to our B2B Third-Party Marketing (TPM) activities.
Controller
Alforis Finance, SAS – 15 rue de la Bourse, 75002 Paris – France. DPO: [email protected]
Hosting: dedicated server administered and operated by Alforis Finance (France, EU).
Processing purposes
- Inbound requests and B2B lead qualification.
- Meeting scheduling and professional follow-up.
- Institutional prospecting and business relations.
- Security, logging and service continuity.
- Audience measurement and product improvement (aggregated stats).
Legal bases
- Consent (e.g., non-essential cookies, voluntary sign-ups).
- Pre-contractual/contract performance (organising meetings, exchanges).
- Legitimate interests (B2B development, security, fraud prevention).
- Legal obligations (accounting, compliance).
Recipients & processors
Restricted access to authorised Alforis staff. Processors bound by GDPR Article 28 clauses:
- Hosting: Alforis Finance (France, EU).
- CRM / pipeline (EU tool or SCCs).
- Transactional email / newsletters (EU or SCCs).
- Analytics (aggregated, IP truncated where possible).
A detailed processor list is available upon request.
Retention
We retain data only as necessary:
- B2B prospects: 24 months after last active contact.
- Clients/partners: term of contract then statutory archiving (up to 10 years).
- Legal/accounting records: per applicable law.
- Technical logs: 6–12 months unless longer is required for security.
Security
Technical and organisational measures:
- Access controls, MFA/SSH, least-privilege.
- Encryption in transit (TLS) and at rest where relevant.
- Logging, monitoring and encrypted backups.
- Contractual clauses with processors, compliance audits.
Cookies & trackers
We use technical (essential) and analytics cookies (consent-based where required).
- Technical: authentication, performance, security.
- Analytics: audience measurement, continuous improvement (IP truncation when possible).
- Preferences: language, consent choices.
Manage your preferences via the cookie banner.
International transfers
No transfers outside the EU by default. If needed, we rely on:
- European Commission adequacy decisions.
- Standard Contractual Clauses (SCCs) with supplementary measures.
- Explicit consent as a last resort when required.
Your rights
You have rights of access, rectification, erasure, objection, portability and restriction.
- Access: obtain a copy and information.
- Rectification: fix inaccurate data.
- Erasure: in cases provided by GDPR.
- Objection: notably to direct marketing.
- Portability: receive your data in a structured format.
- Restriction: temporary freeze of processing.
Exercise your rights: [email protected] (reply within 30 days).
Complaints
You may contact the French Data Protection Authority (CNIL – www.cnil.fr) if you believe your rights are not respected.
Minors
Our site and services target professional audiences. We do not knowingly collect data relating to minors.
Updates
This policy may be updated to reflect changes in our processing or the law. The last update date appears in the footer.