Data Protection Charter

Updated on 07/10/2024

Acoba, a leading provider of cloud backup and AI solutions for surveillance, is committed to protecting the personal data of its customers, prospects, and anyone in contact with our services. This charter outlines how your personal data is used and how we ensure its protection.

Why Do We Need Personal Data?

We process your personal data to manage contracts you have with us, implement the services provided under these contracts, or analyze data sets to enhance our offerings.

What Data Is Collected and For What Purpose?

If you are an Acoba customer :

We collect the necessary data to execute your contract. This data is collected directly from you or from a partner through whom you signed the contract. Your data is primarily processed to manage the contractual relationship you have with Acoba. We retain this data for the duration of your contract and for 5 years following its conclusion.

If you are a prospect

We collect your identification data to contact you and information about the site to be monitored to offer a service that best suits your needs. This data is collected directly from you, from the partner who informed you about our services, or from a client who referred you. We process this data for commercial prospecting purposes and retain it for a maximum of two years from its collection or from the last contact we had with you.

If you are a trusted contact

We collect identification data that allows us to contact you in case of alarm management. This data is collected from the client who designated you as a trusted contact or directly from you. This data is exclusively processed by our monitoring center for procedures that require the involvement of trusted contacts. Therefore, your personal data is retained only for as long as you are designated as a trusted contact.

For any other person

The data collected includes identification data and data necessary for the execution of the contract under which you contacted us. We retain this data for the duration of the relevant contract and for 5 years following the end of the contract.

Recording of Telephone Conversations

Acoba records or double listens to some calls made to its services as the Data Controller.

These recordings are used in the context of our legitimate interest, unless you object, for:

Enhancing employee skills;
Monitoring advice and the quality of the customer relationship;
Creating factual elements for use in preventing and resolving disputes, litigation, and pre-litigation;
Protecting employees in the event of verbal abuse and incivility;
Conducting experiments related to management objectives and quality monitoring, as well as analyzing conversations using artificial intelligence techniques.

They may also be used in the context of our legal obligations for:

Managing requests to exercise your rights;
Implementing control mechanisms, particularly in the fight against fraud and corruption.

These recordings are intended only for authorized individuals and may be transmitted and/or accessed by those involved in setting up and analyzing the telephone conversations.

They are kept for six months, except in the case of litigation, where they are retained for the duration of the litigation and until all appeals have been exhausted.

Who Can Access Your Personal Data?

Your personal data is accessible to Acoba employees to ensure the proper functioning of our services. The data necessary for the execution of subscribed services is transmitted to Acoba service providers, particularly those responsible for delivery, installation, and maintenance of equipment, alarm intervention, and security services. It may also be accessible to or transmitted to Acoba's technical subcontractors for IT administration and maintenance operations. Your subscription data is also transmitted to your referrer.

What Is the Legal Basis for Processing?

The legal basis for processing is the legitimate interest and compliance with Acoba's contractual or pre-contractual obligations.

What Are Our Commitments?

We commit to ensuring that data collection is limited to what is strictly necessary to achieve the aforementioned purposes (contract management, implementation of services provided under the contract, data analysis for the purpose of improving our services) and that their use is exclusively limited to this objective.

What Do We Do to Meet Our Commitments?

We fulfill our commitments by raising awareness and training our employees on the processing of your personal data; by implementing appropriate and proportionate data collection tools and procedures; by securing the data, which is subject to a specific policy called the General Information Security Policy, aimed at ensuring information protection; by adopting a specific organization (a risk identification and management system, a Group Data Protection Officer (DPO) responsible for ensuring compliance with data protection regulations, a Group Information Systems Security Officer (CISO) who ensures the effectiveness of the information systems security mechanism, and an internal control and audit system).

What Are Your Rights Regarding Your Personal Data?

In accordance with legal provisions, you have the rights of access, deletion, and objection for legitimate reasons.

Right of access: allows you to know what personal data we hold about you.
Right to rectification: allows you to request the correction of your data if you consider it incomplete or inaccurate.
Right to deletion (or right to be forgotten): allows you to request the deletion of the personal data we hold about you. However, this right may not be applied when the law requires or allows us to retain this data.
Right to object: allows you to object at any time to our use of certain personal data.

You also have the right to restrict processing, allowing you to request that we pause the use of your data while we carry out the necessary checks to address a request to exercise another of your rights.

Finally, under the right to data portability, you can retrieve the data you have provided to our digital platforms for personal use or to transfer it to a third party of your choice.