Privacy policy

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly known as the General Data Protection Regulation (GDPR), sets out the legal framework applicable to all processing of personal data.

Within this framework, ALFRED FORMATION sets out the procedures by which it complies with this regulation. Indeed, as part of its core business – the provision of vocational training for companies – ALFRED FORMATION is required to collect and process personal data.

Data controller

ALFRED FORMATION

10 Rue du Bigarreau – 68260 Kingersheim (France)

Email : contact@alfred-formation.fr

The personal data collected is used for the following purposes:

• To identify our clients’ training needs by telephone.
• To support and advise our clients in selecting training courses suited to their needs.
• To prepare funding applications and draw up training agreements to be submitted to the client’s OPCO.
• To have clients sign the funding applications and agreements, together with our general terms and conditions of sale and our privacy policy.
• To conduct a telephone assessment of the client by the trainer in order to clarify training needs and set session dates.
• Organise and monitor the training courses.
• Conduct satisfaction surveys within one or two months of the end of the training course.

The personal data processed by ALFRED FORMATION is collected directly from the data subjects via the following channels:

• Telephone interviews with clients or prospective clients.
• Forms and contractual documents (training agreements, funding applications).
• Written correspondence (email, post).
• Data transmitted by OPCOs as part of funding applications.

• Identification data of client representatives: surname, first name, telephone number, email address, tradesman’s licence where applicable.
• Data relating to trainees: surname, first name, date of birth and job title.
• Financial data: trainees’ payslips, required by certain OPCOs. This data is not retained by ALFRED FORMATION beyond the processing of the application.

The data collected is intended for ALFRED FORMATION, the trainers involved in the relevant training programme, and the relevant organisations responsible for meeting the client’s needs (OPCOs, funding bodies). It is not disclosed to any unauthorised third parties.

In addition to the processing activities related to training described above, the alfred-formation.fr website collects data in the following cases, and only when you provide it voluntarily.

• Data: name, email address, telephone number, company, type of request, subject and content of the message.
• Purpose: to respond to your enquiry and follow it up for commercial purposes.
• Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR).

Messages are stored in the website’s administration area, accessible only to authorised personnel, and a notification is sent by email to ALFRED FORMATION.

• Data: in addition to the fields above, any attachments you submit (CV, cover letter, portfolio), limited to 3 files of 5 MB each in PDF, Word, JPEG or PNG format.
• Purpose: to assess your application.
• Legal basis: pre-contractual measures.

These files can only be accessed by administrators logged into the site’s administration panel.

• Data: your company’s SIRET number. This is public company data, not personal data within the meaning of the GDPR.
• Processing: this number is sent to the government’s public ‘Company Search’ API (recherche-entreprises.api.gouv.fr) in order to identify your skills provider. The result (company name, town, collective agreement, OPCO) is recorded as a callback request so that an adviser can contact you.
• Legal basis: legitimate interest in processing your request.

• Contact and call-back requests: 3 years from the date of the last exchange.
• Unsuccessful applications: 2 years from the date of the last contact, unless you request deletion.
• Server log files: maximum 12 months.

The website does not set any audience measurement, advertising or social media cookies, and does not use any third-party trackers. No consent banner is therefore required. The only technical data processed are server log files (IP address, date, page viewed), which are necessary for the security and troubleshooting of the website.

Data collected via the website is hosted by OVHcloud SAS within the European Union and is not transferred outside the EU.

ALFRED FORMATION makes every effort to comply with the regulations in force when collecting and processing personal data, both internally and with its partners, in terms of both IT and organisational measures: protection of servers and databases, management of internal procedures, management of access rights, and provision of information to data subjects.

In accordance with the GDPR, all customers and contacts have the following rights regarding their personal data:

• Right to consent and to withdraw consent.
• Right of access.
• Right to rectification.
• Right to erasure (right to be forgotten).
• Right to restriction of processing.
• Right to data portability.
• Right to object.

These rights may be exercised in writing, provided that the request:

• Is made by the data subject themselves,
• Is accompanied by a copy of a valid identity document,
• Or is sent from the email address provided in the file.

Contact details for exercising your rights:

ALFRED FORMATION - 10 Rue du Bigarreau - 68260 Kingersheim (France)

Email : contact@alfred-formation.fr

The request must clearly specify the purpose and nature of the right you wish to exercise, in accordance with the GDPR regulations. For security reasons, ALFRED FORMATION will verify your identity before disclosing any information concerning you.

Please note that this right is strictly individual and may only be exercised by the data subject in respect of their own data. The right of access must not be exercised abusively or repeatedly for the sole purpose of disrupting the service concerned.

Any request for an additional copy of the data may be subject to a charge to cover the corresponding cost. Data provided electronically will be supplied in a commonly used electronic format, unless otherwise requested.

Any person has the right to withdraw their consent at any time. ALFRED FORMATION undertakes to comply strictly with this request as soon as possible.

ALFRED FORMATION informs its clients and contacts that it may engage subcontractors in the processing of their personal data. ALFRED FORMATION reserves the right to carry out audits of its subcontractors to ensure compliance with the provisions of the GDPR.

ALFRED FORMATION defines and implements appropriate technical and organisational measures to protect data against any destruction, loss, alteration or unauthorised disclosure, whether accidental or unlawful. These measures include, in particular:

• An information systems security policy.
• Management of user identities and access authorisations.
• Backup and archiving measures.
• Business continuity measures in the event of an incident.
• Regular security audits.

In the event of a personal data breach, ALFRED FORMATION undertakes to notify the CNIL in accordance with the conditions and timeframes set out in the GDPR. If such a breach is likely to result in a high risk to the rights and freedoms of data subjects, ALFRED FORMATION undertakes to inform the affected customers and contacts as soon as possible and to provide them with all necessary information and recommendations.

ALFRED FORMATION has appointed a Data Protection Officer (DPO), whose contact details are as follows:

ALFRED FORMATION

10 Rue du Bigarreau - 68260 Kingersheim (France)

Tel.: 03 74 28 53 58

Email : contact@alfred-formation.fr

Any new processing of personal data will be referred to the DPO in advance. Customers and contacts may contact the DPO with any queries regarding the processing of their data. A response will be provided within a reasonable timeframe, taking into account the nature of the request.

ALFRED FORMATION undertakes to maintain an up-to-date record listing all processing activities carried out in its capacity as data controller. This record is made available to the supervisory authority upon first request, to enable verification of the compliance of processing operations with the regulations in force.

Any data subject affected by the processing of personal data carried out by ALFRED FORMATION has the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) if they consider that such processing does not comply with current European regulations.

CNIL – Complaints Department

3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07

cnil.fr