Last updated: January 5, 2025

Introduction

This privacy policy defines the principles and commitments of SIIA regarding the protection of personal data. In accordance with applicable laws, including the General Data Protection Regulation (GDPR - Regulation EU 2016/679), the California Consumer Privacy Act (CCPA), as well as various national laws governing data protection, SIIA ensures that any collection, use, retention, and sharing of personal data is conducted in strict compliance with legal obligations and international standards regarding security and confidentiality.

Objectives of the Policy

This privacy policy applies to anyone interacting with SIIA, whether through its website, professional services, digital platforms, or within the framework of contractual and institutional relationships.

Data Collected and Purposes of Processing

SIIA only collects data necessary for its activities, in the context of professional and institutional relationships, and ensures never to engage in excessive or disproportionate data collection. The collected data may include:

Identification and contact information, such as first name, last name, position, company, professional email address, and phone number.

Information related to professional exchanges, including communications with our teams, information requests, and contractual interactions.

Technical and browsing information on our site, such as IP address, browser type, analytical data, and activity logs, exclusively within the framework of security and service improvement.

Any other data voluntarily provided by stakeholders in the context of their interactions with SIIA.

Purposes of Processing

This data is collected to enable:

Management and tracking of professional and institutional relationships.

Execution of contractual obligations and the services offered.

Securing digital interactions and preventing cyber threats.

Compliance with legal and regulatory obligations.

Legal Basis for Processing

Any collection and processing of personal data carried out by SIIA is based on strictly defined legal bases:

The consent of the data subject when required for certain types of interactions.

The performance of a contract or a mission requiring the use of data to fulfill professional obligations.

Compliance with a legal or regulatory obligation requiring the retention or transmission of certain information.

SIIA's legitimate interest in ensuring the efficient management of its services, protecting its information systems, and optimizing user experience.

Right to Withdraw Consent

Data subjects have the right to withdraw consent when it constitutes the basis of processing.

Data Sharing and Transfer

SIIA is committed never to sell or rent out personal data. However, certain information may be shared with third parties under specific and regulated circumstances.

Data may be shared with strategic partners and technical service providers acting as subcontractors, solely within the framework of contractual executions and subject to strict oversight through confidentiality clauses and compliance with applicable regulations.

Competent authorities when a legal obligation requires the communication of information in the context of administrative, judicial, or regulatory procedures.

Third-party institutions in the context of mergers, acquisitions, or restructurings, provided that the commitments to data protection are maintained and respected.

Data Transfer Outside the EEA

In the case of transferring data outside the European Economic Area or to a jurisdiction having a distinct legal framework, SIIA guarantees the implementation of adequate protection measures, notably by adopting standard contractual clauses recognized by the European Commission or other applicable compliance mechanisms.

Data Security and Protection

SIIA implements strict security measures to protect personal data against unauthorized access, alteration, loss, or disclosure.

The application of advanced encryption protocols for protecting communications and databases.

The establishment of a reinforced authentication and access control system for sensitive information.

Continuous monitoring of digital infrastructures to detect and neutralize any intrusion attempts or malicious exploitation.

Regular cybersecurity audits and penetration tests to assess the effectiveness of protective measures.

Security Incident Notification

In the event of a security incident that may impact the rights and freedoms of data subjects, SIIA is committed to notifying the competent authorities within the regulatory deadlines and informing affected individuals when required.

Data Retention Period

Personal data collected by SIIA is retained only for the time necessary for the purposes for which it has been obtained and in compliance with legal retention requirements.

The necessity of ensuring the tracking of professional and contractual relationships.

Regulatory obligations requiring a minimum retention period.

Needs related to risk management, compliance, and archiving.

Data Deletion

At the end of these periods, the data is either permanently deleted or anonymized for exclusively analytical purposes.

Rights of Data Subjects and Exercise of Rights

Any person whose data is collected and processed by SIIA benefits from rights guaranteed by applicable regulations.

The right to access, allowing for a copy of the held data to be obtained.

The right to rectification in case of inaccuracy or necessary modification of information.

The right to erasure ("right to be forgotten") allowing for the deletion of data under certain conditions defined by law.

The right to restrict processing allowing for the temporary limitation of data usage.

The right to object allowing for a challenge to processing based on legitimate interest.

The right to portability allowing for the retrieval of data in an exploitable format and transfer to a third party.

Exercising Rights

To exercise these rights, a written and signed request must be sent to the dedicated email address: privacy@siiaworldwide.com. Any request will be processed within a maximum of 30 days from receipt, unless exceptional circumstances require an additional timeframe, in which case a notification will be sent to the concerned individual.

Cookies and Tracking Technologies

Use of Cookies and Similar Technologies

SIIA uses cookies and other tracking technologies to ensure the security of digital interactions, optimize user experience, and ensure compliance with technical and regulatory requirements of our website and online services. These technologies allow us to analyze the performance of our platform, adapt content based on user preferences, and enhance the security of connections.

Categories of Cookies Used

The cookies we use are categorized into several groups:

Strictly necessary cookies: These cookies are essential for the proper functioning of our site and securing digital exchanges. They cannot be disabled as they guarantee the stability and protection of data transmitted via our platforms.

Analytical and performance cookies: These cookies allow us to evaluate the effectiveness of our site, analyze visitor behavior, and optimize the usability of digital interfaces. All data collected is anonymized and does not allow for personally identifying users.

Customization cookies: These cookies enhance the user experience by remembering certain preferences, such as display language and browsing settings.

Security and fraud detection cookies: These cookies help us prevent intrusion attempts, detect unauthorized access, and provide enhanced protection against cyber threats.

Management and Settings of Cookies

Users have the ability to manage their cookie preferences via:

The consent banner displayed during the first visit to our site, allowing acceptance, rejection, or customization of the used cookies.

The browser settings, which allow blocking or deleting certain cookies.

A preference management module, accessible at any time on our site, to modify settings related to cookies and tracking technologies.

Modifications and Updates to the Privacy Policy

Update Principle

SIIA is committed to keeping this privacy policy up-to-date to reflect legislative changes, technological advances, and the most recent cybersecurity practices. These updates aim to ensure complete transparency regarding personal data processing methods and guarantee ongoing compliance with international standards in data protection.

Notification of Changes

Changes to this policy will be notified as follows:

Publication of a notice of update on our website, stating the effective date of the changes.

Sending a notification by email, only if the changes directly affect the rights and obligations of the affected individuals.

Highlighting new provisions in our preference management module, allowing users to review changes before continuing to use our services.

Contact and Exercising Rights

Contact Point for Any Request Regarding Personal Data

SIIA provides a single contact point for any question or request related to the management of personal data. Requests can be directed to the dedicated email address: privacy@siiaworldwide.com. Requests must be accompanied by valid proof of identity to ensure security and prevent unauthorized access to personal information.

Right to Complain to Data Protection Authorities

If a data subject believes that their data protection rights are not being respected or that the processing carried out by SIIA infringes applicable regulations, they have the right to lodge a complaint with the competent authority in their country of residence or the country in which SIIA's headquarters is located.

This privacy policy is designed to ensure complete transparency, strict compliance with international regulations, and optimal protection of personal data processed by SIIA. We are committed to maintaining the highest standards of security and confidentiality, and to strictly respecting the rights of data subjects. Everyone using our services is encouraged to regularly review this policy to stay fully informed of the evolution of our practices and the measures implemented to ensure the protection of their data.