Updated: 28/10/25
ALCYCONIE attaches great importance to compliance with the regulations relating to the protection of personal data and in particular the General Data Protection Regulation (EU Regulation 2016/679 of the European Parliament known as “GDPR”) and the Data Protection Act (Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms).
In this context, this privacy policy will allow you to understand what personal data about you is collected by ALCYCONIE and for what purpose it is used.
Who is the data controller?
This privacy policy is intended to provide a framework for the processing of personal data that ALCYCONIE carries out in its capacity as data controller, insofar as it determines the purposes and methods thereof. ALCYCONIE is a simplified joint-stock company, whose registered office is located at 18, Avenue Jean Jaurès – 35400 SAINT-MALO, registered with the Saint-Malo Trade and Companies Register under number 842 656 308, represented by Mrs. Stéphanie Ledoux, acting as President, duly authorized for this purpose.
Who is the Data Protection Officer?
ALCYCONIE has appointed a Data Protection Officer in the person of RAYAN LE CALLOCH. It is the internal guarantor of the compliance of ALCYCONIA’s activities in terms of personal data processing. It has the necessary resources to carry out its role, in compliance with the obligations and best practices that ALCYCONIE must implement in terms of personal data protection. It is also your main contact for any questions relating to your personal data and for the exercise of your rights recognised by the GDPR.
Rayan LE CALLOCH can be contacted either:
- Via the following email address:
dpo@alcyconie.com
- Via the GDPR request form accessible at the following address, specifying that your request concerns your personal data:
https://alcyconie.com/contact/
- Via the following postal address:
SAS ALCYCONIA
18 AVENUE JEAN-JAURES
35400 SAINT-MALO
FRANCE
Why does Alcyconie use your personal data?
Processing of personal data in the context of commercial prospecting :
1. On what basis can Alcyconie contact you without your prior consent?
When you are a professional already in contact with Alcyconia, we may send you commercial communications without having to obtain your prior consent, provided that these messages relate to services similar to those already provided.
Legal basis for processing personal data : Legitimate interest (Article 6.1.f of the GDPR)
Why is your data being used?
We use your data to:
- To offer you services similar to those you have already requested,
- Facilitate the conversion of prospects into customers,
- Invite you to professional events (conferences, webinars, etc.),
- To inform you about our news, our activities and our new services.
2. What if you have never been a customer or in a relationship with Alcyconia?
In this case, we may send you marketing communications without your consent as our communication will be related to your profession. You will find in each of our communications a way to unsubscribe from them. In this case, we will not send you commercial communications without your explicit consent.
Legal basis for processing personal data : legitimate interest (Article L.34-5 of the Postal and Electronic Communications Code)
We will use your data to:
- To provide you with our services;
- To keep you informed of our offers, news or events;
Manage your participation in these events.
What data is collected?
| Data processed | Data retention period |
| Identity data : surname, first name, business email address, business phone number | 3 years from the last contact or the end of the business relationship |
| Economic and financial data : name of the company/organization, function | 3 years from the last contact or the end of the business relationship |
| Information about your presence or absence from an event | 3 years from the last contact or the end of the business relationship |
| Data relating to the monitoring of the commercial relationship : support proposal, services or subscriptions subscribed to, order form, invoices, written exchanges | 3 years from the last contact or the end of the business relationship |
Who can access your data?
Only explicitly authorised persons within Alcyconia can access your personal data. These are:
- Members of our internal teams who need this data to respond to or contact you,
- Our subcontractors and service providers (hosting, email management, CRM), bound by contractual commitments,
- Where appropriate, internal control or audit services.
Where is your data stored?
Your data is hosted in Europe. Alcyconia does everything necessary to prevent any data transfer outside the European Union. In the event of exceptions, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decision, etc.).
What are your rights regarding your data?
As a data subject, you have the rights provided for in the General Data Protection Regulation (GDPR). You may exercise the following rights at any time:
| Possible rights | Details |
| Right of access | To be aware of the personal data processed. The first copy of your personal data is provided to you free of charge. A reasonable fee, based on administrative costs, may be charged for any request for an additional copy, in accordance with Article 15 § 3 of the GDPR. |
| Right to rectification | Correcting inaccurate, erroneous or incomplete data It is also possible to define general and specific guidelines relating to the fate of personal data after your death. If necessary, the heirs of a deceased person may demand that the death of their loved one be taken into consideration and/or that the necessary updates be made. |
| Right to data restriction | Possibility of requesting the limitation of the processing of this data, unless it can be demonstrated that there are legitimate and compelling reasons that may override the interests and rights and freedoms of the data subjects |
| Right to object and withdraw | Object to the processing of personal data or withdraw consent to such processing. |
Processing of personal data in connection with the use of the website :
What data is collected and why?
When you browse our website, Alcyconie may process certain personal data about you, on two distinct legal bases:
Processing of personal data based on legitimate interest, the purpose of which is the proper functioning and security of the website.
We collect certain data to:
- Preparing, publishing and maintaining the content available on our site;
- Manage the technical infrastructure with our hosting provider and our service providers;
- Monitor and secure the site against possible intrusions or errors;
- Produce anonymized audience statistics for the purpose of improving the site.
Processing of personal data based on your consent, the purposes of which are:
- Measuring the site’s audience and performance;
- Personalization of your browsing experience;
- Personalization of your browsing experience;
- Embedding certain content (e.g., videos or share buttons from third-party services).
No non-essential cookies will be placed without your consent. You can manage your preferences at any time via our consent banner or by clicking on the “Set cookies” link.
The following personal data is collected:
| Data processed | Data retention period |
| Traffic data: IP address, connection logs | The data is anonymised and does not allow the present or future identification of the data subject |
| Personal data collected through cookies | 13 months, renewable after consent given by the visitor |
Who can access your data?
Only explicitly authorised persons within Alcyconia can access your personal data. These are:
- Members of our internal teams who need this data to respond to or contact you,
- Our subcontractors and trusted service providers (hosting, email management, CRM), bound by strict contractual commitments,
- Where appropriate, internal control or audit services.
Where is your data stored?
Your data is hosted in Europe. Alcyconia does everything necessary to prevent any data transfer outside the European Union. In the event of exceptions, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decision, etc.).
What are your rights regarding your data?
As a data subject, you have the rights provided for in the General Data Protection Regulation (GDPR). You may exercise the following rights at any time:
| Possible rights | Details |
| Right of access | Allows any visitor to the website with Alcyconie to confirm the possession of data concerning him/her, the copy of this data, certain information relating to the characteristics of the processing The first copy of your personal data is provided to you free of charge. A reasonable fee, based on administrative costs, may be charged for any request for an additional copy, in accordance with Article 15 § 3 of the GDPR. Documents containing third-party data may not be disclosed. |
| Right to rectification | Correcting inaccurate, erroneous or incomplete data It is also possible to define general and specific guidelines relating to the fate of personal data after your death. If necessary, the heirs of a deceased person may demand that the death of their loved one be taken into consideration and/or that the necessary updates be made. |
| Right to data restriction | Possibility of requesting the limitation of the processing of this data, unless it can be demonstrated that there are legitimate and compelling reasons that may override the interests and rights and freedoms of the data subjects |
| Right to object and withdraw | Object to the processing of personal data or withdraw consent to such processing. |
| Right to portability | Allows you to retrieve part of your data in a machine-readable format. You are free to store this portable data elsewhere or easily transmit it from one system to another, for reuse for other purposes. This right only applies to data processed on the basis of your consent in connection with the website, and not to data processed on the basis of legitimate interest |
| Right to erasure | Possibility to request the erasure of your personal data concerning you in the event of withdrawal of consent or processing on the legal basis of legitimate interest where overriding grounds for processing are not in conflict |
| Right to object and withdraw | In the event of withdrawal of consent where the legal basis for processing is consent. When you object to the processing of your data and there are no overriding legitimate grounds for continuing the processing where the legal basis for processing is legitimate interest. |
Processing of personal data in connection with the use of forms on the website:
What happens when you contact us via the GDPR request form?
When you contact us via the website (GDPR request form), the legal basis for the processing of personal data is consent.
If you contact us via the form available on our website (e.g. to ask a question about compliance or data security or to exercise your rights), we use your data only to:
- Review your application,
- Respond to your request,
- Contact you if necessary as part of this exchange.
Your data will not be used for any other purpose without your consent.
What happens when you apply for a job on our site via the application form?
This point is discussed later in “Processing of personal data as part of our recruitment process”
What happens when you contact us via the alert form to report an incident or crisis situation?
When you contact us via the website (alert form), the legal basis for the processing of personal data is consent.
When you contact us to report an incident or situation, we use your data to:
- Receive and qualify the reported incident, with a view to triggering an appropriate response.
- Ensuring the operational management of the crisis
- Contact you again to handle the incident
What happens when you contact us via the contact form?
When you contact us via the website (contact form), the legal basis for the processing of personal data is consent.
If you contact us via the form available on our website (e.g. to ask a question, obtain information about our services or request us for a business need), we only use your data to:
- Analyze your request
- Respond to your request,
- Contact you if necessary as part of this exchange.
Your data will not be used for direct marketing purposes without your consent.
The following are collected, for each form used:
| Data processed | Data retention period |
| Identity data : Surname, first name, email address, telephone number | Data kept for the duration of the response to your request |
| All information related to the request : any personal data that you decide to include in your message and/or in any attachments that you insert in the form | Data kept for the duration of the response to your request |
Who can access your data?
Only explicitly authorised persons within Alcyconia can access your personal data. These are:
- Members of our internal teams who need this data to respond to or contact you,
- Our subcontractors and trusted service providers (hosting, email management, CRM), bound by strict contractual commitments,
Where appropriate, internal control or audit services.
Where is your data stored?
Your data is hosted in Europe. Alcyconia does everything necessary to prevent any data transfer outside the European Union. In the event of exceptions, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decision, etc.).
What are your rights regarding your data?
As a data subject, you have the rights provided for in the General Data Protection Regulation (GDPR). You may exercise the following rights at any time:
| Possible rights | Details |
| Right of access | Allows the customer, prospect or any other person using the form to obtain from Alcyconie confirmation of the possession of data concerning him/her, a copy of this data, certain information relating to the characteristics of the processing The first copy of your personal data is provided to you free of charge. A reasonable fee, based on administrative costs, may be charged for any request for an additional copy, in accordance with Article 15 § 3 of the GDPR. Documents containing third-party data may not be disclosed. |
| Right to rectification | Edit inaccurate, erroneous, or incomplete data |
| Right to data restriction | Possibility of requesting the limitation of the processing of this data, unless it can be demonstrated that there are legitimate and compelling reasons that may override the interests and rights and freedoms of the data subjects |
| Right to erasure | Possibility to request the erasure of your personal data in the event of withdrawal of consent |
| Right to portability | Allows you to retrieve part of your data in a machine-readable format. You are free to store this portable data elsewhere or easily transmit it from one system to another, for reuse for other purposes. |
Processing of personal data as part of our recruitment process:
What happens when you apply for a job on our site via the application form?
When you contact us via the website (application form), the legal basis for the processing of personal data is consent.
When you apply for a job offer or send us an unsolicited application, we use your data to:
- Receive, register and review your application,
- Assess the suitability of your profile for the requirements of the position to be filled,
- Contact you to follow up on your application.
The following are collected, for the use of the application form:
| Data processed | Data retention period |
| Identity data : Surname, first name, email address, telephone number | Data kept for the duration of the response to your request |
| Data in the body of your message : any personal data that you choose to include in your message. | Data kept for the duration of the response to your request |
| Personal data in your CV and cover letter | Data kept for the duration of the response to your request. When you consent to your CV and cover letter being included in our CV library, we keep this data for 3 years. |
Who can access your data?
Only explicitly authorised persons within Alcyconia can access your personal data. These are:
- Members of our internal teams who need this data to respond to or contact you,
- Our subcontractors and trusted service providers (hosting, email management, CRM), bound by strict contractual commitments,
- Where appropriate, internal control or audit services.
Where is your data stored?
Your data is hosted in Europe. Alcyconia does everything necessary to prevent any data transfer outside the European Union. In the event of exceptions, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decision, etc.).
What are your rights regarding your data?
As a data subject, you have the rights provided for in the General Data Protection Regulation (GDPR). You may exercise the following rights at any time:
| Possible rights | Details |
| Right of access | Allows the candidate using the application form to obtain from Alcyconie confirmation of the possession of data concerning him/her, a copy of this data, certain information relating to the characteristics of the processing The first copy of your personal data is provided to you free of charge. A reasonable fee, based on administrative costs, may be charged for any request for an additional copy, in accordance with Article 15 § 3 of the GDPR. Documents containing third-party data cannot be disclosed. |
| Right to rectification | Edit inaccurate, erroneous, or incomplete data |
| Right to data restriction | Possibility of requesting the limitation of the processing of this data, unless it can be demonstrated that there are legitimate and compelling reasons that may override the interests and rights and freedoms of the data subjects |
| Right to erasure | Possibility to request the erasure of your personal data in the event of withdrawal of consent |
| Right to portability | Allows you to retrieve part of your data in a machine-readable format. You are free to store this portable data elsewhere or easily transmit it from one system to another, for reuse for other purposes. |
What happens when we search for candidates online?
When we search for candidates online, the legal basis for processing personal data is legitimate interest.
We may also collect certain data via recruitment platforms (LinkedIn, job boards, etc.) to:
- Search for profiles that match our needs,
- Build a database of internal CVs (CV library),
- Contact you to assess your interest and suitability for a position,
- Use assessment tools (e.g., a pre-recorded video interview) if necessary.
We undertake to process only the data that is strictly necessary for this purpose, and to inform you at the time of the first contact.
The following are collected:
| Data processed | Data retention period |
| Identity data : Last name, first name, email address. | Data kept for the duration of the recruitment process until the hiring decision is made or for the duration of the response to your application. |
| Personal life data : Professional, academic and/or job history | Data kept for the duration of the recruitment process until the hiring decision or the duration of the response to your application. |
| Sensitive data: The person spontaneously communicates personal information about himself or herself through the open field. | Data kept for the duration of the recruitment process until the hiring decision is made or for the duration of the response to your application. |
Who can access your data?
Only explicitly authorised persons within Alcyconia can access your personal data. These are:
- Members of our internal teams who need this data to respond to or contact you,
- Our subcontractors and trusted service providers (hosting, email management, CRM), bound by strict contractual commitments,
- Where appropriate, internal control or audit services.
Where is your data stored?
Your data is hosted in Europe. Alcyconia does everything necessary to prevent any data transfer outside the European Union. In the event of exceptions, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decision, etc.).
What are your rights regarding your data?
As a data subject, you have the rights provided for in the General Data Protection Regulation (GDPR). You may exercise the following rights at any time:
| Possible rights | Details |
| Right of access | Allows the candidate to obtain from Alcyconie the confirmation of the possession of data concerning him/her, a copy of this data, certain information relating to the characteristics of the treatment An additional copy will be invoiced to you in accordance with the provisions in force. Documents containing third-party data cannot be disclosed. |
| Right to rectification | Edit inaccurate, erroneous, or incomplete data |
| Right to data restriction | Possibility of requesting the limitation of the processing of this data, unless it can be demonstrated that there are legitimate and compelling reasons that may override the interests and rights and freedoms of the data subjects |
| Right to object and withdraw | Object to the processing of personal data where the processing is based on legitimate interest and there is no overriding legitimate interest which overrides rights and freedoms |
Is my personal data secure?
ALCYCONIE implements technical and organisational security measures proportionate to the risk as far as possible in order to guarantee the confidentiality, integrity, availability and constant resilience of its information systems and services. All our staff are aware of IT security and data protection issues.
How can you exercise your rights over your personal data?
You can contact our Data Protection Officer (DPO) at any time to exercise your rights under the GDPR. We will respond to you within one month of receiving your request. This period may be extended by an additional two months if the application is complex or if we receive many requests. In this case, you will be informed. If there is reasonable doubt about your identity, we may ask you to provide proof of identity before processing your request. If a request is manifestly abusive, we may refuse to act on it. In this case, you will be informed and we will explain the possible remedies. In order to make your request to exercise your rights, you can use a letter template, made available by the CNIL at the following address: https://www.cnil.fr/fr/modeles/courrier
Privacy Policy Modification Condition:
Under what conditions can this policy be changed?
Alcyconie reserves the right to modify this policy at any time in order to ensure its compliance with the law in force.
Therefore, you are advised to review the policy regularly; Alcyconia is not obliged to inform you of any changes to the provisions of this policy.
This policy was last modified on 28/10/2025