1. Preamble
A-Loc Audiovisuel pays particular attention to the protection of personal data, and to compliance with:
- Law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties,
- Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, known as the "GDPR".
This document therefore describes how the a-loc.com website and A-Loc Audiovisuel collect, use, retain and protect your personal data.
2. Data controller
A-Loc Audiovisuel
SARL with a share capital of EUR 300,000.00
Registered office: 8 bis rue Jules Ferry - 92100 Boulogne-Billancourt
Registered in the Nanterre Trade and Companies Register under number 401 365 259
Contact: info@a-loc.com
Phone: +33 1 71 16 19 80
3. Data collected
3.1 Two user profiles
The website distinguishes between two profiles when an account is created. The fields requested depend on the profile chosen.
| Profile | Data collected |
|---|---|
| Individual | Title, last name, first name, email, phone, mobile, address, address line 2, postcode, city, country. |
| Company | The same data, plus: company name, department, intra-Community VAT number, SIRET number. |
3.2 When data is collected
| Stage | Data collected |
|---|---|
| Creating a customer account | Identity, contact details, individual or company profile. |
| Account verification | Email address, to send the verification code that confirms the registration. |
| Building a quote | Equipment references and quantities, description of the requirement, rental dates. |
| Finalising the quote | Delivery method, delivery address and access information, identity and mobile number of the on-site contact person, billing address (company name, department), identity and contact details of the billing contact (email, mobile, phone). |
| Contact form | Last name, first name, email, phone, message. |
| Newsletter subscription | Email address only. Consent is collected at the first step of account creation, through a box to tick, separate from the acceptance of this policy, unticked by default. |
| Browsing and logging in to the website | Connection data: IP address, connection logs. |
Mandatory fields are indicated in the forms; without them, the request cannot be processed.
3.3 Data not collected
No sensitive data within the meaning of Article 9 of the GDPR.
4. Purposes and legal bases
Each processing operation is based on an identified legal basis, within the meaning of Article 6 of the GDPR.
| Purpose | Legal basis | Consent |
|---|---|---|
| Customer account management: authentication, profile updates, sending the verification code | Performance of pre-contractual and contractual measures (Art. 6.1.b) | No |
| Handling quote requests: analysis and response | Performance of pre-contractual measures (Art. 6.1.b) | No |
| Orders, deliveries and equipment pickups | Performance of a contract (Art. 6.1.b) | No |
| Invoicing and accounting | Legal obligation (Art. 6.1.c) | No |
| Answering questions and complaints | Legitimate interest (Art. 6.1.f) | No |
| Website security: preventing fraud and abuse | Legitimate interest (Art. 6.1.f) | No |
| Sending the newsletter and offers by email | Consent (Art. 6.1.a) | Yes, box unticked by default |
| Disclosure of data at the request of a public authority | Legal obligation (Art. 6.1.c) | No |
You can unsubscribe from the newsletter at any time using the link in each email or by writing to info@a-loc.com.
5. Retention period
In accordance with the storage limitation principle (Art. 5.1.e of the GDPR), your data is not kept indefinitely.
| Type of data | Period | Justification |
|---|---|---|
| Customer account | For the duration of the business relationship. Accounts with no quote request or order for more than 3 years are deleted during a purge carried out once a year. | Legitimate interest, follow-up of the business relationship: our customers return in line with annual or multi-year trade fairs and events |
| Quotes not converted into orders | Kept with your account, and deleted with it | Legitimate interest, follow-up of the business relationship |
| Orders, deliveries and equipment pickups | Duration of the business relationship, then 5 years | Commercial limitation period, Article L110-4 of the Code de commerce |
| Billing data | 10 years | Article L123-22 of the Code de commerce |
| Questions and complaints (contact form) | The time needed to handle the request | Legitimate interest, response to the request |
| Connection logs | 14 days | Legitimate interest, security |
| Newsletter and offers by email | Until you unsubscribe, and at most 3 years after your last contact with A-Loc Audiovisuel (newsletter subscription, quote request or order) | Revocable consent, CNIL recommendation |
When an account is deleted, the data required as evidence or to meet our legal obligations (orders, deliveries, invoicing) is kept in an archive, accessible only to authorised persons, for the periods stated above.
After these periods, the data is deleted or anonymised.
6. Recipients and processors
6.1 Internal access
All personal data is confidential. Access to it is limited to A-Loc Audiovisuel staff who need it to carry out their duties: sales, logistics, accounting, technical support. Everyone with access to your data is bound by a duty of confidentiality.
6.2 Processors
| Processor | Role | Data location |
|---|---|---|
| Scaleway SAS 8 rue de la Ville-l'Évêque 75008 Paris | Website hosting | France |
| OVH SAS 2 rue Kellermann 59100 Roubaix | Sending emails (quote confirmation, newsletter, etc.), via OVH's SMTP server. | France |
Your data may also be disclosed to a public authority, only where required by law.
6.3 Transfers outside the European Union
The data you entrust to A-Loc Audiovisuel (account, quotes, contact) is hosted in France and is not transferred outside the European Union.
7. Cookies and browser storage
During your visit, the website may store information on your device, or read information already stored on it: these are cookies and browser storage. The regulations refer to them collectively as "trackers" (Article 82 of the Informatique et Libertés Act).
| Category | Used on the website | Consent |
|---|---|---|
| Strictly necessary | Yes, see 7.1 | Not required |
| External content (YouTube videos) | Yes, see 7.2 | Required, through the consent banner |
| Audience measurement and performance | No | - |
| Advertising and profiling | No | - |
| Social media | No | - |
7.1 Strictly necessary trackers
These trackers are essential for the website to work and for the services you request. They are used to:
- keep you logged in to your customer account;
- keep the quote you are building: equipment and quantities, rental period, delivery and billing addresses, step reached;
- display the prices and availability for the selected trade fair;
- keep your browsing consistent from one page to the next, such as the breadcrumb trail or returning to the right level of the catalogue;
- remember your choice regarding cookies.
These trackers are placed by A-Loc Audiovisuel only. They do not require your consent, as they are essential to the service you have expressly requested. The personal data they contain is processed to manage your customer account and your quote requests, on the legal bases set out in section 4.
Those that keep you logged in and retain your quote in progress are kept for 7 days after your last activity on the website. Your login itself expires after 1 day without activity. Those used for browsing from one page to the next are deleted when you close your browser or the tab. The one that remembers your choice regarding cookies is kept for 6 months. You can delete them all at any time by clearing your browser data (see 7.4).
7.2 YouTube videos
Some pages feature videos hosted on YouTube. Playing a video causes trackers to be placed and read by YouTube, a Google service, in particular for advertising and audience measurement purposes.
No YouTube tracker is placed until you have given your agreement. On your first visit, a banner lets you accept or refuse these trackers with the same ease. Your choice is kept for 6 months, after which you are asked again. If you refuse, the videos do not play, and the rest of the website remains accessible as normal. You can change your choice at any time using the "Cookie settings" link at the bottom of every page.
These trackers are placed and read by Google Ireland Limited, under its own responsibility. To find out more, see Google's privacy policy.
7.3 Trackers not used
The website does not use any audience measurement, advertising, profiling or social media tracker.
Should such a tracker ever be used, it would only be placed after your agreement, obtained through the consent banner. This policy would then be updated to state its purpose and the organisations involved.
7.4 Configuring your browser
You can configure your browser to block or delete cookies and stored data. As strictly necessary trackers are essential for the website to work, blocking them may however prevent you from logging in to your customer account or building a quote.
8. Security and data breaches
A-Loc Audiovisuel implements technical and organisational security measures to ensure the confidentiality of your data and limit risks: encrypted exchanges, access controls and identification.
In the event of a data breach presenting a risk to your rights and freedoms, it is notified to the CNIL and, where the risk is high, to the persons concerned.
9. Your rights
Depending on the processing concerned, you can request access to, rectification, erasure, restriction and portability of your data, object to its processing, withdraw your consent at any time and set out instructions regarding what happens to your data after your death.
9.1 How to exercise them
You can also access, update and modify your data at any time from your customer account.
By post
A-Loc Audiovisuel
8 bis rue Jules Ferry
92100 Boulogne-Billancourt
France
By email
Response time
1 month from receipt of the request
9.2 Complaint to the CNIL
If, after contacting A-Loc Audiovisuel, you believe that your rights have not been respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés: www.cnil.fr/fr/plaintes.
10. Changes to this policy
This policy may be updated to reflect a change in regulations, a new processing operation or a technical improvement.