ALIBORA · DATA PROTECTION
Privacy policy
How ALIBORA collects, uses, protects and retains personal data relating to visitors, prospects, candidates and professional contacts.
This policy is structured to cover the information required by the GDPR where it applies, together with Benin's personal-data framework. It must remain aligned with the processing actually performed in production.
Data controller
ALIBORA SARL, C/1348 Houeyiho, Cotonou, Bénin, +229 01 48 70 88 88.
For privacy questions or requests, use the Contact page and mention “Data protection / Privacy”.
Data we may process
- Identity and contact data: name, organisation, role, email and phone number.
- Request data: project, need, message, meeting preference and related correspondence.
- Recruitment data: experience, skills, CV/portfolio/LinkedIn/GitHub links and information supplied during recruitment.
- Technical and security data: IP address, date/time, URL, browser, technical logs and information required to prevent abuse.
- Consent preferences and, where enabled, audience-measurement or personalisation data.
Purposes and legal bases
Respond to a request or prepare a meeting
Pre-contractual steps at your request and legitimate interest in managing professional relationships.
Process a job application
Pre-contractual steps, legitimate recruitment interest and, for a separate future talent pool, consent where required.
Secure the website and prevent abuse
Legitimate interest in security, availability, abuse detection and defence of our systems.
Measure audience or personalise
Consent where required; narrowly limited trackers may be exempt under applicable law.
Meet legal obligations
Legal obligation, lawful authority requests, accounting or statutory retention.
Establish or defend legal claims
Legitimate interest and, where relevant, legal obligations or rights in disputes.
Sources and required information
Most data is obtained directly from you through forms, meetings, email and professional exchanges. Some professional information may come from a client/partner organisation or professional sources made public by the person concerned.
Fields marked as required are needed to process the relevant request. Without them, we may be unable to respond, arrange a meeting or assess an application.
Recipients and processors
Access is limited to people who need the data for their role, including relevant sales, project, HR, support, security, management and administrative teams.
Providers may process data on our behalf, including hosting, email, security, backup, collaboration, recruitment, support and technical providers. They are subject to appropriate confidentiality, security and data-protection commitments.
Data may also be disclosed to authorities, courts, advisers or insurers when required by law or necessary to defend legal rights.
International transfers
ALIBORA operates internationally. Where data is transferred to another country, we apply the mechanisms required by applicable law. For GDPR-regulated transfers to a country without an adequacy decision, this may include European Commission Standard Contractual Clauses, equivalent safeguards or, where legally available, an Article 49 derogation.
Retention
- Business enquiries and meetings: for the relationship follow-up period, then as needed for evidence, legal obligations or defence of claims.
- Applications: for the recruitment process; any retention for future opportunities must be separate, limited and communicated to the candidate.
- Technical and security logs: for a limited period determined by security, diagnostics, abuse-prevention and legal requirements.
- Consent records: for as long as needed to demonstrate compliance and until renewal/withdrawal under applicable rules.
Where law requires a specific period, that period prevails. At expiry, data is deleted, anonymised or placed in restricted archives where legally justified.
Your rights
Subject to applicable law and its conditions, you may request:
- access to your data and a copy;
- rectification of inaccurate data;
- erasure (“right to be forgotten”);
- restriction of processing;
- objection to certain processing, including legitimate-interest processing and direct marketing;
- data portability where the conditions are met;
- withdrawal of consent at any time for the future where processing relies on consent;
- not to be subject to solely automated decisions producing legal or similarly significant effects, where the law provides this right.
The public website forms do not, by themselves, make solely automated decisions producing legal or similarly significant effects.
Exercise your rights and complaints
Send your request through the Contact page and state “Data protection / Privacy”. We may request reasonable information to verify your identity before responding. We respond within the time limits required by applicable law.
You may also complain to Benin's Autorité de Protection des Données Personnelles (APDP) and, where the GDPR applies, to the competent EU supervisory authority, including the authority for your habitual residence, workplace or place of the alleged infringement.
Security and data breaches
We implement technical and organisational measures proportionate to risk, including access control, authentication, logging, encryption where appropriate, backups, hardening, monitoring, vulnerability management and incident procedures. In the event of a personal-data breach, we apply applicable requirements for documentation, notification to authorities and, where a high risk warrants it, communication to affected individuals.
Children and policy changes
The ALIBORA professional website is not specifically designed to collect children's data. If processing involving minors is introduced, we will apply the consent and enhanced-protection rules required by applicable law.
We may update this policy to reflect regulatory, technical or processing changes. The last-updated date shown at the top identifies the applicable version.