Privacy Notice
Last revised: July 31, 2024
Introduction
This Privacy Notice explains (i) what personal data we (Valtech SE and its affiliates operating in their offices (collectively referred to below as “ Valtech”, “we”)) process about you, (ii) how we process it and for what purposes. It also gives (iii) information on the rights you have in relation to the processing of your personal data and (iv) an overview of the main processing activities we do in relation to your personal data that may be processed by Valtech.
Processing activities regarding Valtech’s employees and job applicants are not within the scope of this notice. The privacy notice for recruitment can be found at - https://careers.valtech.com/privacy-policy.
Arising a conflict between the English and other language versions of this Privacy Notice, the English version shall prevail.
This Privacy Notice may be amended from time to time to take into account changes in applicable laws or in the way we handle your personal data.
The General Data Protection Regulation (“GDPR”) is considered to be the global leading standard where it comes to privacy regulation. Valtech has decided to abide by the GDPR standard in all the countries where it carries business with possible additional measures depending on applicable local laws, such as the UK Data Protection Act 2018 (“UK DPA”), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”), and the Canadian Privacy Act and the Quebec Act Respecting the Protection of Personal Information in the Private Sector (the two latter hereinafter referred to as the “Canadian Laws”; and all collectively, the “Other Applicable Laws”).
Information about Valtech
Valtech SE is the leading company of the Valtech group, registered in the Grand Duchy of Luxembourg, under the Trade and Companies Register number B238451, having its registered office at 18 rue Erasme, L-1468 Luxembourg, Grand Duchy of Luxembourg and having offices in Paris registered in the Paris Trade and Companies Register under number B 389 665 167, based at 38 rue des Jeûneurs, 75002 Paris - France. Any contact or notices shall be addressed as described in the “Contact us” section below.
A list of our legal entities can be found at https://www.valtech.com/list-of-valtech-operational-entities/, each being possibly a “Controller” according to GDPR if it processes your personal data.
Where may your Personal Data come from
We may collect or obtain your personal data:
-
When you interact with Valtech website(s)
-
As part of email/other digital correspondence or subscriptions
-
Via Telephone calls or other verbal communications
-
Via Paper communications
-
When you visit our offices
-
When you enquire about or buy products or services from us
-
When you provide products or services to us
-
As part of trade or other events such as conferences or exhibitions
-
From third parties or business partners who we purchase, license or otherwise receive data from
-
Via Social media
-
From publicly available sources either on or offline
-
When undertaking “Know Your Customer” and/or sanction checks
-
From contractors, shareholders, affiliates, subsidiaries and newly acquired businesses, members of the board of directors, public authorities, previous employers, and educational/membership institutions.
The provision of personal data may be required to access whitepapers, participate to events, or enter in contracts. The refusal to provide personal data may result in you being unable to access services, information or events.
What Personal Data we may collect
We may collect and process the following categories of personal data about you:
-
Contact information, such as first name, last name, email address, telephone number and other contact information,
-
Professional information, such as job title and/or seniority levels, company name, industry sector, country of location, information relevant to the work, service or other relationship we may have with you, business contact details, bank and financial details, communication and correspondence,
-
Technical data, i.e., information generated by you visiting our website or engaging with us on social media (including, but not limited to, IP addresses, interactions with emails/website, social handles or usernames),
-
Your thoughts and opinions when you offer feedback on our business or service or when you take part in forums or other,
-
Audio and visual recordings or photographs when you take part in recorded meetings, events or forums, and
-
Details relating to sanction or Know Your Customer checks.
We typically do not seek sensitive information (e.g., data relating to race or ethnic origin, religious beliefs, criminal record, physical or mental health or sexual orientation) from you, and you are prohibited from posting or sending such data, except:
-
if such sensitive information is requested by local law, or
-
from time to time, in specific circumstances, for dietary or accessibility requirements when attending events, forums or meetings.
How we may use your Personal Data
In compliance with GDPR and Other Applicable Laws, we may process your personal data:
-
because you have given your consent to the processing of your personal data;
-
to perform a contract to which you or your employer are party or in order to take steps at your request prior to entering into a contract;
-
to comply with a legal obligation to which we are subject;
-
when the processing is necessary for the purposes of the legitimate interests pursued by us or a third party (e.g. partners, service providers), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, unless the country law does not accept legitimate interest as a legal ground; Our legitimate interests include but aren't limited to administration, growth and promotion of our business.
Please note that Valtech does not sell personal information.
Why we may need your Personal Data
Depending on how you interact with us, we may process your personal data in connection with our services or for other business purposes to:
-
Manage our relationship and administer our business as a part of an agreement with you or your organisation,
-
administer any accounts or profiles related to you or your organisation, which may include registration, subscription, purchase, billing events, and/or payments,
-
answer your questions and requests or comply with your instructions or to fulfil other, specified purposes for which you have given your consent,
-
enable you to access to certain restricted part of our websites,
-
enable you to download specific documentation (e.g. Whitepapers),
-
enable you to attend a live or hosted event or a webinar,
-
enable us to manage and secure our website or service including compile aggregate statistics regarding the use of the websites,
-
for marketing or research purposes and development purposes for new content, services and/or products aiming at improving, testing, and enhancing features of current services,
-
send you offers and promotional materials or communications regarding our services that we feel may be of interest to you,
-
perform matched audience with third-party social media (i.e., LinkedIn, Facebook and Instagram) to share our content with you through them,
-
provide you with personalized advertising,
-
manage the forums to which you may take part,
-
conduct satisfaction surveys and gather feedback on our services,
-
comply with the law and legal obligations,
-
respond to a request or order from a court, regulator, or authority when required by law,
-
exercise our rights and protect our own and others’ rights and/or property;
How we may share or disclose your Personal Data
Your data may be shared with the following categories of recipients:
-
other Valtech entities (see https://www.valtech.com/list-of-valtech-operational-entities/),
-
business partners (e.g. to provide, sell or improve products/services or to host events),
-
service providers (e.g. to pass your requests to them or for data security and storage services),
-
social media or other markets/advertising providers,
-
any organisation who seeks to invest in or purchase our businesses, and/or
-
third parties where we believe that such disclosure is reasonably necessary to comply with an applicable law or regulation or if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is lawful, necessary or appropriate.
International Transfers
Valtech is a global organisation having separate legal entities in many parts of the world and relying on an international infrastructure which usually results in global data flows. These flows may include countries around the world in which we have offices, access or host systems or where we conduct business, including countries located outside the European Economic Area.
Accordingly, we may share your personal data with other Valtech entities, for which we have appropriate legal documentation in place, including safeguards.
On a case-by-case basis, we may also share your personal data with third parties. When relying on such third parties located outside the European Economic Area, we make sure to enter into the appropriate safeguards, such as:
-
EU Standard Contractual Clauses,
-
UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses,
-
Ensuring the third party is certified to the Data Transfer Framework, and/or
-
Similar clauses as may be required under Other Applicable Laws.
Security of Personal Data
The security of your personal data is our priority. Taking into account the nature, scope, context, and purposes of each data processing, as well as the risks of varying likelihood and severity for your rights and freedoms, we implement all appropriate technical and organisational measures and policies to ensure the protection of your personal data and prevent any accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed by Valtech.
Rights on your Personal Data
Data privacy laws around the globe may give you rights regarding your personal data. These rights may vary according to location and applicable law. However, they generally include the following:
-
The right of access which allows you to access and receive a copy of the personal data we hold on you,
-
the right to rectification which allows you to correct information we hold on you,
-
the right to request erasure of your personal data,
-
the right to restrict or object to the processing of your personal data in certain circumstances,
-
where available, the right to data portability which allows you to obtain and reuse your personal data for your own purposes across different services,
-
the right to limit the disclosure of data, request deindexation, opt out of sales or cross context behavioural advertising,
-
the right to withdraw your consent at any time when the processing of your personal data is based on the collection of your consent, notably by clicking on the unsubscription link contained in communications sent by Valtech and generated in response to your registration on Valtech websites.
You can exercise these rights at any time by writing to Valtech’s relevant local Data Protection Manager and/or to the Data Protection Officer as listed in the “Contact us” section below.
Please note that Valtech does not sell personal information. However, if you wish to formally exercise your right to opt-out, please follow the process described below.
There can be circumstances whereby Valtech has grounds to refuse your request, such as a right not being in your local legislation or the right being requested is not an absolute one. Should this occur, we will explain the reasons why your request was refused.
In accordance with applicable data protection regulation, if you have any concerns about our use of your personal data, you also have the right to lodge a complaint with a supervisory authority. However, we request that you contact us in the first instance so we can discuss and find a prompt resolution to any potential concerns you may have in relation to Valtech’s privacy and data protection practices.
Retention of Personal Data
Your personal data are retained by us for the time strictly necessary to fulfil the purposes it was collected for and in accordance with the applicable data protection regulation or timelines recommended by supervisory authorities and/or to comply with our legal or contractual obligations.
Criteria we use to determine our retention periods include:
-
Your last interaction with us, especially in relation to marketing,
-
Whether the Personal Data is relevant and useful to the provision of our services,
-
To satisfy financial or auditing requirements, limitation statues and relevant regulations or standards, and
-
In accordance with country or sector specific laws.
When the relevant above criteria are met, your personal information will be permanently deleted, unless the personal data is being archived for research purposes or for the sole purpose of allowing their provision to the judicial authorities. In addition, we may anonymise your data for the purpose of producing statistical studies.
Changes to our Privacy Notice
We may modify or amend this Privacy Notice from time to time at our discretion. When we make changes to this Notice, we will amend the revision date at the top of this page. We encourage you to refer to this Privacy Notice often to get the latest information about our personal information practices.
Children's Privacy Protection
We understand the importance of protecting children's privacy in the interactive online world. This Website is not designed for or intentionally targeted at children 16 years of age or younger. It is not our policy to intentionally collect or maintain information about anyone under the age of 16. Therefore, if you are under 16, please do not attempt to register for the Services or send any personal data about yourself to us.
Contact us
Any questions, comments, or concerns you may have regarding Valtech practices and compliance with local data privacy laws, our Privacy Notice or regarding Valtech web presence may be directed to our Group Data Protection Officer, Alexandra de la Martinière, in writing at Valtech SE, 38 rue des Jeûneurs, 75002 Paris, France or at GL.privacy@valtech.com.
Valtech Representative in the EU is Valtech SE, having its office at office at Luxembourg, 18 rue Erasme, L-1468 Luxembourg. Any notices should be sent to Valtech SE, 38 rue des Jeûneurs, 75002 Paris, France and can also be contacted at GL.privacy@valtech.com
Valtech Representative in the UK is Valtech Limited, having its office at The Spitfire Building, 71 Collier Street, London, England, N1 9BE and can be contacted at GL.privacy@valtech.com
In addition you can also contact Valtech as data controller of your personal data by writing an email or post to the concerned Valtech’s Data Protection Manager or Officer indicated below:
|
COUNTRY |
EMAIL ADDRESS OF DATA PROTECTION MANAGER/OFFICER |
|
Argentina |
|
|
Brazil |
Designated individual responsible for personal information: Bruno Souza Pinto - OAB 431.001 BR.privacy@valtech.comValtech Brasil Tecnologia Digital Ltda. R Cristovao Nunes Pires, 86, Andar 7 Bloco suden edif Carl Hoepcke, 88.010-120, Centro, Florianópolis, Santa Catarina, Brazil. |
|
Bulgaria |
|
|
Canada |
Designated individual responsible for personal information: Marc André Audet, Information Security Expert Valtech Canada inc. |
|
China |
|
|
Denmark |
|
|
France |
|
|
Germany |
|
|
|
|
|
India |
|
|
Mexico |
|
|
Netherlands |
|
|
North Macedonia |
|
|
Poland |
|
|
Portugal |
|
|
Romania |
|
|
Singapore |
|
|
Switzerland |
|
|
Sweden |
|
|
United Kingdom |
|
|
Ukraine |
|
|
United Arab Emirates |
|
|
United States of America |
|
|
VALTECH GROUP |