Processing is carried out under the following bases pursuant to GDPR Article 6:

Assessment data and associated reports are retained for 12 months from the date of purchase, after which they are deleted or anonymized.

Email addresses are retained for the duration necessary to fulfil the service and to comply with applicable obligations under French law — up to 10 years for financial records pursuant to Article L. 123-22 of the French Commercial Code.

Alpha uses the following sub-processors to deliver its service:

All sub-processors operate under GDPR-compliant data processing agreements.

As a data subject, you have the following rights:

• Right of access — obtain a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restriction — limit processing in certain circumstances
• Right to portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at athena@idbokx.tech. We will respond within 30 days.

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)

• Website: www.cnil.fr
• Phone: +33 (0)1 53 73 22 22

For any questions regarding this Privacy Policy or the processing of your personal data:

idbokx — Data Controller Email: athena@idbokx.tech