Privacy Policy

PREAMBLE

Alstef Group (hereinafter "Alstef Group") places great importance on protecting your personal data.

As such, Alstef Group respects your privacy and ensures that the personal data it collects is processed in accordance with the applicable legal framework in France regarding personal data protection, notably the General Data Protection Regulation No. 2016/679 (hereinafter "GDPR") and Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (hereinafter "Data Protection Act").

This personal data protection policy (hereinafter the "Policy") aims to inform customers and/or prospects, natural persons (hereinafter "you", "your", the "User") about how Alstef Group collects, manages, and processes your personal data in connection with the use of the Alstef Group website ([www.alstefgroup.com], described in the General Terms of Use (General Terms of Use - Alstef Group), and the rights you have regarding your data.

 

1. Who is the data controller?

The data controller is the entity that determines the purposes and means of processing your personal data.

Therefore, the data controller for your personal data is:

Alstef Group, a simplified joint-stock company with a capital of €84,417,957, having its registered office at 104 boulevard de la Salle, 45760 Boigny-sur-Bionne, registered with the Orléans Trade and Companies Register under number 835 128 802 (hereinafter "Alstef Group" or "we" / "our").

 

2. What personal data do we collect?

We may collect personal data about you when you provide it to us using the website [www.alstefgroup.com] (hereinafter the "Site"), notably the contact form or the "Careers" section, or by filling out the alert form or the documentation download form on the Site, but also indirectly through the use of cookies and trackers placed or read on your device. In this case, we invite you to refer to our Cookie Policy (EU) - Alstef Group.

The personal data we may collect is as follows:

• Identification and contact data: information that allows us to identify you and contact you directly, such as your title, name, first name, email and postal address, phone number, geographical region.
• Navigation data on the Site: information that allows us to generate statistics and analyze usage traffic for our internal needs, such as your IP address.
• Professional data: information that allows us to review your application or contact you in the context of the recruitment process, such as name, first name, email address, phone number, CV, cover letter, interests, training courses, degrees obtained, skills, qualifications, date and place of birth.

Some of this information may be combined with data collected using cookies and other trackers present on your device from our Site.

For more information, we invite you to consult our Cookie Policy (EU) - Alstef Group.

Please note that, in some cases, the communication of your personal data is mandatory, otherwise we will not be able to provide you with the requested services and/or information.

(For example, if you wish to send us a request through our contact form available on our website, you must provide your name, first name, phone number, email and postal address so that we can respond to your request).

In any case, we strive to collect only personal data that is strictly necessary for the purpose of processing, in accordance with the principle of minimization. 

3. For what purposes do we use your data? On what legal basis?

We process your personal data for the following purposes:

• Responding to any request or question you may submit to us through the contact form on our website or by contacting us directly by phone or email. In this case, the legal basis for processing is legitimate interest;
• Processing your applications submitted via the "Careers" section of the Site, assessing your ability to occupy a proposed position, measuring your professional skills, and, if applicable, contacting you by phone or email following your application. The legal basis for this processing is, depending on the case, legitimate interest or contract performance (pre-contractual measures) depending on whether the candidate is subsequently recruited or not;
• Contacting you for commercial prospecting purposes to present our services or those of our potential partners, or to enrich and enhance our customer/prospect database. The legal basis for this processing is legitimate interest;
• Improving the performance of our website. The legal basis for processing is legitimate interest;
• Complying with our legal and regulatory obligations, such as responding to your requests to exercise your rights or processing alerts received via the alert system. In this case, the legal basis for processing is legal obligation;
• If applicable, exercising or defending our rights in court. The legal basis for processing is legitimate interest.

4. How long do we keep your data?

Alstef Group retains your personal data for the duration strictly necessary for the purposes for which they were collected and, in any case, in accordance with the applicable regulations:

Purpose	Duration
Commercial prospection	We retain your personal data necessary for commercial prospecting for a maximum of 3 years from the date of collection or the last interaction with you (unless you object in the meantime).
Processing your requests to exercise your rights	Your data is retained for the duration necessary to process the request and then for 5 years from the last interaction, for evidentiary purposes.
Litigation management	We retain the personal data necessary for litigation for the duration of the litigation (i.e., as long as it is active) until all avenues of appeal are exhausted.
Whistleblowing	We retain the data necessary for processing alerts for 2 months from the closure of verification operations or until the end of the statute of limitations in case of disciplinary or litigation procedures, then they are anonymized.
Processing job applications	We retain personal data for the duration necessary to complete the recruitment process. At the end of the recruitment process, (i) the personal data of selected candidates are integrated into their administrative file and retained for the duration of the employment relationship and five (5) years after the end of the employment relationship; (ii) the personal data of non-selected candidates are retained, with their consent, for a maximum period of two (2) years from their last contact with Alstef Group, in order to consider the possibility of offering them other positions that may match their profile. In the absence of consent, the personal data of non-selected candidates will be retained for three (3) months.

  At the end of the retention periods and applicable prescription periods, the data is deleted or anonymized.

5. To whom is your data transmitted?

Within Alstef Group, your personal data is transmitted to internal departments that need access to it for the mentioned purposes. In other words, only authorized persons can access and/or process your personal data.

Some data may be sent to third parties:

• Alstef Group's service providers and subcontractors (e.g., hosting provider, communication/marketing agency, etc.);
• Partners with whom Alstef Group collaborates to offer products or services;
• Our advisors, auditors, accountants in the context of their missions;
• Competent authorities, at their request as authorized third parties, in the context of administrative or judicial procedures, investigations or controls, information requests, or to comply with legal obligations.

6. Is your data transferred outside the European Union?

Alstef Group strives to keep your personal data within the European Union. However, we may be required to share your data with Alstef Group subsidiaries, as well as certain services we use, which may involve potential transfers. Concerned about the security and confidentiality of your data, we inform you that when your data is transferred outside the EU, we ensure that the transfer is made to:

• Either a country recognized by the European Commission as ensuring an adequate level of protection;
• Or to a country not offering adequate protection but whose transfer is permitted, particularly by being governed by the European Commission's standard contractual clauses, which the CNIL has recognized as guaranteeing a sufficient level of privacy protection and fundamental rights.

7. What are your rights regarding your personal data?

In accordance with the applicable regulations, you have rights regarding your personal data:

• Right of access: You have the right to know if we hold personal data about you, obtain a copy of the data we hold about you, and information about the processing;
• Right to rectification: You have the right to obtain the rectification of data about you if they are inaccurate or need to be updated;
• Right to erasure: You can request the deletion of your personal data, unless they are necessary for the performance of the contract, compliance with a legal obligation, or the establishment, exercise, or defense of legal rights;
• Right to object: You can object to the processing of your personal data when it is based on Alstef Group's legitimate interest (e.g., commercial prospecting);
• Right to withdraw: If the processing of your personal data is based on your consent, you can withdraw it at any time;
• Right to restriction of processing: You have the right to ask us to temporarily freeze the use of your data if you dispute the accuracy of your personal data;
• Right to data portability: If the processing is based on your consent or the performance of the contract, you can recover all the data from processing carried out using automated processes. These data will be provided to you in a standard and operable format, and you can ask us to transmit them to another data controller.
• Right to lodge a complaint: You can lodge a complaint with the CNIL in France if you have noticed a breach related to the processing of your personal data.

8. How to exercise your rights regarding your personal data?

To exercise your rights, you can contact our Data Protection Officer at the following contact details:

• By postal mail to the following address: Alstef Group – Data Protection Officer, 104 boulevard de la Salle, 45760 Boigny-sur-Bionne – France
• By email to: [dpo@alstefgroup.com](mailto:dpo@alstefgroup.com)

We invite you to clearly specify the subject of your request when you contact us to facilitate its processing.

We will respond within thirty (30) days from the date of receipt of your request, except for complex requests (in this case, the period is extended by an additional 2 months).

In case of doubt about your identity, we may ask you for a copy of your identity document.

If we do not respond satisfactorily to your request, you can lodge a complaint with the National Commission for Data Protection and Liberties by mail at 3 Place de Fontenoy, TSA 80175, 75334 Paris Cedex 07, online (Complaints | CNIL) or by phone at +33 (0)1 53 73 22 22.

9. How do we protect your data?

Alstef Group places great importance on the security of personal data.

It has implemented technical, logical, and organizational measures adapted to the sensitivity level of personal data to ensure the integrity, availability, confidentiality, and security of the data and protect them against theft, unauthorized access, use, and modification, such as encryption of communications.

Nevertheless, the security and confidentiality of personal data depend on everyone's good practices, so the User is invited to remain vigilant on the matter.

10. External links

Our website may contain links to third-party websites and/or applications. The operators of these sites may collect or share information about their visitors. This information will be used by these operators in accordance with their personal data protection policy, which may differ from ours.

You are invited to read these policies and refer directly to these third parties if you have questions about their practices.

11. Changes to this Data Protection Policy

We may modify, update, and/or replace this Data Protection Policy, notably in case of changes in the applicable regulations regarding personal data protection. We recommend that you regularly consult this Policy to be aware of its latest version.

Update date: 01/01/2026