Privacy

This Personal Data and Content Policy, and related Data Privacy Notices specific to Services as the case may be, both supplementing the ALE International Data Privacy Policy to the extent relevant to the Services (together: “Policy”), provides information on why and how Your Personal Data (as defined below) and Content is managed by ALE International and its affiliates (“ALE”, “We” or “Us”) to deliver the Services to You.

In case of discrepancy between this Personal Data and Content Policy and ALE International Data Privacy Policy, this Personal Data and Content Policy shall prevail.

This Policy forms an integral part of the General Terms of Use – ALE International Subscription Offers for the Services.

Your company decided to subscribe to Subscription Services as a Business Partner or as an End-Customer through an ALE reseller (“Business Partner”) and you are a registered user of the Subscription Services. In this context, you and Your Company choose to entrust us with Your Personal Data and Content, and to authorize us to collect, access, use, process, retain or disclose them according to this Policy.

Doing so, You and/or Your company, and the Business Partner are the ones who determine at Your own initiative the purposes and the means for processing Your Personal Data and Content, acting then as a data controller.

As a sub processor of Your Personal Data received from your usage of Services, We recognize and respect your legal rights and expectations in relation to privacy and protection of such data.

What is “Personal Data”?

Personal Data means information relating to an identified or identifiable natural person such as you, or information that is used to identify directly or indirectly such a natural person. Some examples of Personal Data are name, e-mail address, phone number, or information relating to your usage of Services.

These Personal Data are split into 2 categories:

• Account Personal Data: data relating to You which are provided by You, Your administrator or the Business Partner
• Service Personal Data: data relating to Your usage of a Service

Your administrator and Your Business Partner have access to some of Your Personal Data, but not to Your Content, through Business Store. More details may be found in the Data Privacy Notice for Business Store.

What do we mean by Business Partner, Service Provider and Third Parties?

A Business Partner is an authorized reseller accredited by ALE International for the distribution of Subscription Services to companies such as yours.

A Service Provider is any legal entity that delivers services to or on behalf of ALE International or an affiliate. Service Providers may access Your Personal Data and Content to provide the Services to You. More details may be found in the Data Privacy Notice for the Services.

A Third Party is any natural or legal person, or any other body other than You, Your Company, the Business Partner, Service Providers, or Us.

Our commitments to you

Transparency

When we do make it available for the corresponding Service, each Data Privacy Notice will further describe where, why and by whom Your Personal Data are being collected, used, retained, transmitted or otherwise processed.

Choices & consent

We will inform you of the choices you may have relating the processing of Your Personal Data and, when required, will ask you for your consent.

Data access

You have the right to access to Your Personal Data to review, update, correct or delete it.

• Account Personal Data: You will have the right to review Your Account Personal Data and make corrections or updates where applicable, and also to withdraw your consent, by requesting the closure of Your Subscription Service account to your administrator or Business Partner.
• Service Personal Data: As the information stored in this specific category reports Your past usage of the Subscription Service, You may not change those data. However, You may report unauthorized usage of your account to your administrator or Business Partner.

To access Your Personal Data, log-in to Your Business Store account at https://store-qa.al-enterprise.com/ and go to Your Profile.

For any question you may have on Your Personal Data, You may contact Your Business Partner who will provide you with all necessary information.

Proportionality

Only Personal Data relevant and useful for the purpose of delivering the Services to you, as described in each Data Privacy Notice, are collected. We will use such Personal Data only for the purpose(s) for which the data were collected, or for additional lawful and legitimate purposes for which consent has been obtained, when required.

Personal Data will be retained as long as necessary to fulfill the purpose(s) and according to the retention period(s) permitted by the applicable law.

Sharing information

We will share Your Personal Data only with the Business Partner and with Service Providers to carry out the Subscription Services to You. We may share Your Personal Data among affiliates of ALE International. We do not voluntarily disclose Your Personal Data or Content to Third Parties unless required by law, or under order from regulation Authorities.

Data protection

We use industry standard security protocols to protect Your Personal Data and Content in transit to and from Internet. This is commonly referred to as transport layer security protocol (“TLS”). However, Internet data transmissions, whether wired or wireless, cannot be guaranteed to be 100% secure, and as a result, We cannot ensure the security of information You, Your administrator or Your company’s Business Partner transmit to Us, beyond what is afforded by the aforementioned technology: in transmitting information, there is inherently a level of risk that You acknowledge You take.

Once we receive Your Personal Data and Content, we take commercially reasonable precautions to protect them on our servers, using a combination of administrative, physical and logical security safeguards:

• Physical access to our data centers is strictly controlled, such as through electronic access control, or validation by human security personnel
• Our networks are protected by security equipment and access control policies, such as through the use of firewalls or functionally equivalent technology
• Our security program is periodically reviewed to determine whether additional or different security measures are required to respond to new security risks
• We only provide information to employees and contractors who have a legitimate business need for such privileges, and revoke immediately this privilege when an employee and/or contractor no longer has a business need
• Access to Your Personal Data, through Business Store, is granted based on need to know / need to do as further described in the Data Privacy Notice for Business Store

In the event, we have actual knowledge of a security system breach; we use commercially reasonable measures to contain such security breach and to prevent any further security breaches.

Data quality

We provide You, Your administrator and Your company’s Business Partner with access to Your Personal Data and the means to amend it, to ensure that the Personal Data we process is complete and relevant for the purpose(s) described in each Data Privacy Notice.

Cookies

Notification of changes

We may change from time to time this Policy. We will post the updated versions online with its applicable effective date.

Your acknowledgement

By subscribing to or using Services, You expressly consent to ALE International and its affiliates managing Your Personal Data and Content in accordance with this Policy. You acknowledge that you understand and accept the purpose for which Your Personal Data and Content are being collected, how it will be used, including possible export outside the European Economic Area, and how to contact the organization that is collecting and using Your Personal Data in order to exercise your access rights.

• Data Privacy Notice – Business Store

Edition: February 2016