Privacy Policy

Preamble

Alarih does everything it can to support its clients and become their partner in success, drawing on its expertise in software engineering, artificial intelligence and cloud architecture.

In line with its values, Alarih places great importance on protecting Personal Data and respecting your privacy.

This Personal Data Protection Policy (hereinafter "the Policy") describes the conditions under which Alarih collects and processes the data gathered on the Site accessible at the following URL: www.alarih.com (hereinafter "the Site").

The Site is intended to present Alarih's services and work. Beyond these features, the Site allows you to learn more about Alarih and to contact it in order to benefit from its services.

In any event, Alarih undertakes to respect the following principles:

* Your data is used only for explicit, legitimate and specified purposes related to the various services and features offered by Alarih;

* Only the Data that is useful for these purposes is collected;

* You are informed clearly and transparently about the purpose for which the Personal Data collected about you is used and about your rights regarding Data protection.

Glossary

For the interpretation and performance of this Privacy Policy, the terms used below are defined as follows:

"Cookies": Refer to trackers that allow access to information stored on a User's terminal equipment;

"Personal Data" or "Data": Refer to any data that makes it possible to identify, directly or indirectly, a natural person, such as name, first name, email, postal address, phone number, etc.;

"Data Subject" / "You": Refers to the identified or identifiable natural person whose Personal Data is processed by Alarih;

"Data Controller": Refers to the person, department or body that determines the purposes and means of processing Personal Data, namely Alarih in this case;

"Processor": Refers to the natural or legal person that processes personal data on behalf of the Data Controller;

"Alarih": Refers to the single-shareholder simplified joint-stock company (SASU), with share capital of EUR 1,000, registered under SIRET number 931 178 495 00012, whose registered office is located at 40 rue de la Tour d'Auvergne, 44200 Nantes, France, and which can be contacted at contact@alarih.com;

"Site": Refers to the website accessible at the following URL: www.alarih.com;

"Processing": Refers to any operation on Personal Data, including in particular recording, collection, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, as well as restriction, erasure or destruction;

"Third Party": Refers to any authorized natural or legal person, public authority, department or body other than the data subject, the data controller, the processor and the persons who, under the direct authority of the data controller or the processor, are authorized to process Personal Data;

"User" – "You": Refers to any natural or legal person accessing and using the services and features offered by the Site and by Alarih;

"Personal Data Breach": Refers to a breach that results, accidentally or unlawfully, in the destruction, loss, alteration, unauthorized disclosure of Personal Data transmitted, stored or otherwise processed, or unauthorized access to such data.

When is your data collected?

Your Personal Data may be collected in the circumstances described below:

When you visit and browse the Site;

When you make a contact request through the "Contact us" sections;

When you place an order with Alarih;

During exchanges and/or contact between Alarih and the User.

On what legal grounds is your data collected?

In accordance with applicable regulations and its values, Alarih collects and processes Personal Data under the following conditions:

When the User gives free, specific and informed consent to the processing of their Data;

When it is necessary for the performance of a contract or in the context of business relations;

When Alarih's legitimate interests justify processing the User's Data.

Failure to provide the Data required in the collection forms on the Site, as well as any subsequent withdrawal of your consent, will prevent Alarih from following up on your contact request.

For what purposes is your data processed?

The Personal Data collected and processed by Alarih is processed for specified, explicit and legitimate purposes, which may vary depending on the context of collection, namely for the following purposes:

Providing content and services on the Site (session cookies);

Internal measurement of Site traffic and usage, for improvement purposes;

Handling requests submitted through the forms on the Site;

Handling job applications submitted through the form on the Site (Other request);

Managing contractual relationships;

Handling requests submitted through the forms on the Site;

Commercial prospecting.

Who are the recipients of your data?

The information collected and processed may be shared with the following recipients:

Alarih staff authorized to process Personal Data;

Alarih's processors, in particular the Site's hosting provider.

These third parties with whom the User's Data may be shared are limited (by law and by contract) in their ability to use your Personal Data, restricted to the purposes specifically identified by Alarih.

Alarih makes its best efforts to ensure that these third parties are subject to confidentiality and security obligations consistent with this Privacy Policy.

Alarih only allows Processors to process Personal Data in accordance with its instructions.

Except where required by law, Alarih does not share, sell or rent any Personal Data about you without notifying you and/or obtaining your consent.

Is your data transferred outside the European Union?

Alarih prioritizes hosting and processing Personal Data within the European Union (EU) and the European Economic Area (EEA).

Where processing involves a transfer of Data to a country outside the EU/EEA, in particular through certain technical providers, Alarih ensures that such transfer is governed by appropriate safeguards within the meaning of Regulation (EU) 2016/679 (GDPR).

These safeguards may take the form of an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs) approved by the Commission, or any other mechanism recognized by applicable regulations.

The User may obtain a copy of the safeguards in place, or information about their availability, by sending a request to contact@alarih.com.

How long is your data kept?

Personal Data is kept for no longer than necessary for the purposes for which it is collected and processed.

Data relating to contact requests and prospects is kept for the duration of the exchanges, then archived or deleted within three (3) years from the last contact, unless otherwise required by law.

Data necessary for the performance of a contractual relationship is kept for the entire duration of the contract, then archived in accordance with applicable legal limitation periods.

Data related to accounting and tax obligations is kept for the period required by applicable law.

At the end of these periods, the Data is irreversibly deleted or anonymized.

How is your data secured?

Alarih implements appropriate technical and organizational measures to preserve the confidentiality, integrity and availability of Personal Data, and to protect it against any destruction, loss, alteration or unauthorized access.

These measures include, in particular, encryption of communications, restricting access to authorized personnel only, and selecting processors that provide sufficient guarantees regarding data protection.

In the event of a Personal Data breach likely to result in a high risk to your rights and freedoms, Alarih undertakes to inform you and to notify the competent supervisory authority, under the conditions and within the timeframes set out by applicable regulations.

Users located outside the European Union

The Site and Alarih's products may be accessible worldwide.

Regardless of the User's place of residence, Alarih strives to apply a level of Data protection consistent with the GDPR, which it considers a benchmark standard.

Depending on the User's country of residence, additional or specific rights may apply under local data protection legislation. The User may exercise these rights by contacting Alarih at contact@alarih.com.

User rights

In accordance with the regulations on the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with their request, the user must provide: their first name and last name as well as their email address and, where relevant, their account, personal space or subscriber number.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.

A. OVERVIEW OF THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

a. Right of access, rectification and erasure

The user may access, update, modify or request the deletion of the data concerning them, following the procedure set out below:

The user must send an email to the personal data controller, specifying the subject of their request, to the contact address indicated above (contact@alarih.com).

If they have one, the user has the right to request the deletion of their personal space, following the procedure below:

The user must send an email to the data controller, specifying their personal space number. The data deletion request will be processed within 10 business days.

b. Right to data portability

The user has the right to request the portability of their personal data held by the site to another site, following the procedure below:

The user must submit a request for the portability of their personal data to the data controller by sending an email to the address provided above.

c. Right to restriction of and objection to data processing

The user has the right to request the restriction of, or to object to, the processing of their data by the site, which the site may not refuse, except by demonstrating the existence of legitimate and compelling grounds that may override the interests, rights and freedoms of the user.

In order to request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure below:

The user must submit a request to restrict the processing of their personal data to the data controller by sending an email to the address provided above.

d. Right not to be subject to a decision based solely on automated processing

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing where that decision produces legal effects concerning them or significantly affects them in a similar way.

e. Right to determine the fate of data after death

The user is reminded that they may set out what should happen to their collected and processed data in the event of their death, in accordance with Law No. 2016-1321 of 7 October 2016.

f. Right to lodge a complaint with the competent supervisory authority

Should the data controller decide not to respond to the user's request, and the user wishes to challenge that decision, or if they believe that any of the rights listed above has been infringed, they are entitled to refer the matter to the CNIL (the French Data Protection Authority, https://www.cnil.fr) or any competent court.

B. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal guardian will be required for personal data to be collected and processed.

The site publisher reserves the right to verify by any means that the user is over 15 years old, or that they have obtained the consent of a legal guardian before browsing the site.

Can the Privacy Policy be modified?

Alarih may modify this Privacy Policy, in particular in the event of changes to the regulations on the processing of Personal Data.

In the event of a minor change to this Policy, Alarih will inform you by means of a text message on the Site's home page.

Should the changes made be substantial, you will receive an email informing you and seeking your informed consent.

Accordingly, the user is invited to consult this privacy policy regularly in order to stay informed of the latest changes made to it.

Please note that this privacy policy was last updated on: 15/06/2026.