ALTERNATE RESOLUTIONS WEBSITE PRIVACY POLICY

ALTERNATE RESOLUTIONS, creator of the https://alternateresolutions.com/ website, attaches great importance to respecting your privacy, and we are committed to building strong, lasting relationships with you, the legal professionals.

The protection of your personal data and IT security are of paramount importance to us.

That's why we've put our Privacy Policy at your disposal, to inform you as fully as possible about the processing of your personal data.

Who is ALTERNATE RESOLUTIONS?

Convinced of the need to simplify and facilitate amicable legal proceedings, ALTERNATE RESOLUTIONS has created an online amicable dispute resolution platform for mediators, arbitrators and conciliators.

This solution has been designed by mediators who are experts in amicable dispute resolution, to be simple and to offer tools in the form of a single subscription.

We are committed to helping you manage disputes from a distance.

We have set up secure video-conferencing to facilitate your meetings, and an electronic signature so that the parties can sign their deeds online.

Our solution also lets you manage your files and invoicing in a dedicated area.

We've even included a calendar to organize your appointments.

What's more, our solution is equally suited to the self-employed, small and large companies and associations.

We want to be your partner in dispute resolution.

What is the purpose of our Privacy Policy?

This Privacy Policy applies to personal data collected when you use our website https://alternateresolutions.com/ (hereinafter referred to as the “Site”).

This Privacy Policy complies with the French Data Protection Act of January 6, 1978 and all amendments thereto, as well as EU Regulation 2016/ 679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD).

Our Privacy Policy is supplemented by a Cookie Management Policy.

How do we apply the General Data Protection Regulation (GDPR)?

Regulation EU 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data is also known as the General Data Protection Regulation (GDPR). It came into force in France on May 25, 2018.

It brings changes to French legislation, in particular to Law no. 78-17 of January 6, 1978, on information technology, files and freedoms, also known as the Loi Informatique et libertés.

The aim of this regulation is to protect the privacy and security of personal data for people living within the European Union.

This is why ALTERNATE RESOLUTIONS strictly complies with the RGPD by having organizational procedures and methods adapted to the protection of your personal data.

ALTERNATE RESOLUTIONS makes it a point of honor to ensure the security of your personal data.

In fact, personal data is defined as any information concerning a person, i.e. any information that enables that person to be identified directly or indirectly as a natural person.

Preserving the secrecy of your information is a priority for ALTERNATE RESOLUTIONS.

The RGPD was created so that data subjects can have better control over their personal data by strengthening their rights, make actors processing personal data (data controllers and processors) more accountable, and finally establish regulation of said data through enhanced cooperation between national data protection authorities within the European Union.

Entities involved in collecting, hosting, processing and analyzing personal data have been assigned new organizational, technical and legal responsibilities.

ALTERNATE RESOLUTIONS has surrounded itself with technical and legal partners recognized in their respective fields, to ensure optimal and professional use of our solution.

For example, ALTERNATE RESOLUTIONS has appointed a Data Protection Officer (DPO) at the Commission Nationale de l'Informatique et des Libertés (CNIL).

ALTERNATE RESOLUTIONS' internal RGPD referent then followed the CNIL and ANSSI MOOCs.

These online training courses aim to understand how to comply with the new regulatory obligations in terms of IT security and cover organizational, technical, and legal aspects.

ALTERNATE RESOLUTIONS will offer an RGPD Annex to its employees, indicating the existence of requests to exercise rights and good practices in teleworking.

In addition, ALTERNATE RESOLUTIONS will initiate a graduated approach to compliance with its partners by offering a sub-processing RGPD Annex.

ALTERNATE RESOLUTIONS is also equipped with IT advisors and anti-virus software.

All ALTERNATE RESOLUTIONS servers are located in France.

A procedure for responding to requests for the exercise of rights will be put in place in order to best meet your needs.

Who is the data controller?

The controller of the https://alternateresolutions.com/ website is Mr Matthias PONIATOWSKI, President of ALTERNATE RESOLUTIONS, located at 38 rue de Berri, 75008 Paris.

What personal data is collected when using our website?

We collect your personal data when you communicate them directly to us or when you use our Site.

Personal data provided by our users

We collect your personal data when you contact us and when you create an account on our Site.

We only process personal data that is useful and limited to what is strictly necessary to achieve the purpose for which it was collected. All such data is processed according to purposes determined in accordance with the RGPD.

Thus, we process different categories of data collected:

• Information relating to your account: we need information to create your customer account. We collect your e-mail address and password. This information is used to contact you if necessary. If you wish, you can also tell us the zip code and town in which you operate, so that this information is available to all users;
• Information communicated in our “Contact us” section: you can also provide us with information when you contact our customer service department, such as your name, e-mail address and any other personal information you may communicate to us in the body of your message;
• Newsletter subscription: if you choose to subscribe to our newsletter, we will collect your e-mail address;
• Data collected for recruitment purposes.

Personal data collected automatically

We also collect certain information automatically when you use our Site:

• Personal data relating to your connections: we collect all the personal data that browsers, mobile devices and servers transmit to us, such as browser type, IP address, unique device identifiers, language choices, date and time of access, operating system and mobile network information, terminal model. We collect this connection information when you use our Site. This data is necessary for the optimal display and operation of our website;
• Information from cookies and other technologies: a cookie is a set of information that a site stores on a visitor's computer and that the visitor's browser provides to the site each time the visitor returns. Web beacons are small blocks of code found on sites and e-mails. We use cookies and other technologies, such as web beacons, to help us identify and track user connections, understand how our Site is used, and track and understand the effectiveness of an e-mail campaign;
• Navigation data (searches, number of visits, date of last visit, etc.): this data is useful for proposing our various subscriptions.

In any event, if our partners or our company intend to further process your personal data for a purpose other than that specified above, you will be informed in advance.

What are the purposes for which your personal data is collected?

ALTERNATE RESOLUTIONS ensures that it processes your personal data in compliance with the RGPD and for specified purposes.

Data processing sources

ALTERNATE RESOLUTIONS only collects and uses data about you for specific purposes that are limited to what is necessary.

Thus, the processing we carry out is based on :

• The execution of a contractual commitment, such as the creation of your customer account;
• Compliance with a legal obligation;
• The existence of a legitimate interest;
• Obtaining your consent, for example before placing cookies or other tracking devices.

Purposes of processing

We use your personal data under the conditions and for the purposes listed below:

• Manage your customer account: the creation of this account is compulsory and allows you to access the amicable dispute resolution platform;
• To communicate with you: We may send you emails or text messages for the following purposes:
• Follow-up on requests sent via the “Contact us” section: to send you a reply to your request;
• Managing your customer account: confirming creation or closure, changing passwords;
• Offer you our subscriptions if you have subscribed to our newsletter or if you have not refused to receive these offers.

To provide you with a quality service:

• We analyze, notably on the basis of statistics, the information/services/offers consulted/consumed, in order to allow their evolution/adaptation as well as to facilitate your navigation;
• We process any suggestions for improvements and anomalies reported.

Limited access to your personal data

ALTERNATE RESOLUTIONS shares your personal data in specific and limited circumstances. We have put in place appropriate safeguards to protect your privacy.

We share your personal data with the following parties:

• Our employees;
• Our external service providers: we may share your personal data with our service providers to provide you with our Services, such as companies in charge of managing our website, our information systems, our platform, etc. For example, BetterB, Scaleway, YouSign, etc.;
• Our business partners: we may also share your personal data with our business partners if necessary;
• Police, judicial or administrative authorities: we may disclose your personal data when legally obliged to do so, such as in the event of a judicial requisition, but in compliance with professional secrecy.

No personal information collected is published, exchanged, transferred or given to third parties, unless a right to information has been granted and consent has been obtained.

Similarly, we are opposed on principle to any resale of personal information.

Please note that no data contained within the platform accessible via your customer account is disclosed to unauthorized third parties.

Storage life

The data we collect is kept only for as long as is strictly necessary:

• To create a customer account;
• To comply with legal and regulatory requirements, in particular for the management of disputes;
• To offer personalized services.

We therefore retain data as follows:

• Identification data: 4 years from the last visit to our website;
• Customer account data: 4 years after account closure;
• Prospect data: 1 year after the last connection to our website or the last opening of our newsletter;
• Connection logs: 1 year after each connection;
• Cookies: 13 months maximum from the date they are deposited on your computer, terminal or application.

Some of this data may be archived for evidentiary purposes or in compliance with legal obligations.

Data security

We take various measures to ensure the security of your personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction.

In particular:

• As soon as we receive your personal data, we apply strict procedures and security measures in order to prevent any unauthorized access. Access to personal databases is strictly reserved to persons authorized to access them in the course of their duties;
• We contractually require our subcontractors to respect the security and confidentiality of your personal data;
• We use Avast antivirus software;
• We have an SSL certificate for our servers, all of which are located in France;
• We store our data in several different locations;
• We encrypt your data;
• We comply with HDS and Data Center standards;
• We have a digital safe.

Data transfer

In principle, we store your personal data within the European Union. However, we may transfer your personal data to some of our subcontractors, partners and textile workshops located outside the European Union for the purposes mentioned above.

Where the country to which your personal data is transferred does not present an adequate level of protection in accordance with the recommendations of the CNIL, we take appropriate measures to ensure that the recipients of your personal data will protect it adequately in accordance with this Policy and the principles of the RGPD via CCTs or BCRs.

For example, data transfers take place when we collaborate with the following entities:

• Advertising analysis: Google Analytics.
• Social networks: Facebook, Twitter, LinkedIn.

Exercising your rights

In accordance with applicable regulations on the protection of personal data, you may at any time:

• Request access to your personal data;
• Request rectification or deletion of your personal data;
• Request a right to limitation;
• object to our use and processing of your personal data;
• Ask us to restrict the use and processing of your personal data;
• Withdraw your consent;
• Request the portability of your personal data;
• Click on the unsubscribe link in our newsletter;
• Click on the cookies banner.

Finally, you can inform us of your instructions regarding the retention, deletion and communication of your personal data in the event of your death.

In the absence of such instructions or of a statement to the contrary in such instructions, the heirs of the person concerned may, after his or her death and by producing a death certificate, exercise the said rights in respect of his or her personal data.

The heirs may request the closure of the deceased's user accounts, object to the continuation of the processing of personal data concerning him or her, or request that such data be updated.

In addition, users of our platform are required to comply with the provisions of the French Data Protection Act and the RGPD, in particular by refraining from any collection or misuse of the personal data they access.

We would like to inform you that the exercise of these rights is not absolute and may be limited where appropriate.

If you wish to contact us regarding any of these rights, please write to us at :

ALTERNATE RESOLUTIONS – DPO
38 rue de Berri
75008 Paris, France.

Or by e-mail at the following address DPO@alternateresolutions.com

We will send you a reply within at least one month of receiving your request.

To process your request, you may be asked to provide a copy of a signed identity document.

In the event of an unsatisfactory response from us, you may lodge a complaint with the CNIL. However, we invite you to contact us at the above address beforehand in order to find an amicable solution.

Any modification by us of this Privacy Policy will be updated on our website. You are invited to consult this Privacy Policy regularly in order to take note of any updates or modifications. If any provision of this Policy is found to be invalid or unlawful, it shall be deemed unwritten, but this shall not affect the validity of the remaining provisions of this Policy.

Our Privacy Policy was last updated on November 29, 2022.