Privacy Policy
1. Introduction
ALPHAIOTA SAS ("Vizzia", "we", "us") is committed to protecting the personal data of visitors to the website vizzia.com ("the Site").
This Privacy Policy explains, in accordance with the UK GDPR and the Data Protection Act 2018, how we collect and process your personal data. As ALPHAIOTA SAS is a company established in France, processing is also carried out in accordance with Regulation (EU) 2016/679 (EU GDPR) and French Law No. 78-17 of 6 January 1978 (as amended).
For visitors residing in Italy, processing is also subject to Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
2. Data Controller
The controller of the personal data collected via the Site is:
ALPHAIOTA SAS (operating the Site under the trading name Vizzia)
Registered office: 8 rue Sainte-Cécile, 75009 Paris, France
Company address: PATCHWORK - 8 rue Sainte-Cécile, 75009 Paris, France
Registered with the Paris Trade and Companies Register under number 899 832 901
EU VAT number: FR64899832901
Email: contact@vizzia.fr
Phone: +33 1 89 71 35 70
3. Data Protection Officer
Vizzia has appointed an external Data Protection Officer (DPO): la Robe Numérique Conseil.
For any question regarding this policy or the exercise of your rights, you may contact our DPO at the address above or write to: rgpd@vizzia.fr
4. Personal data we collect
We collect the following categories of data:
4.1 Data you provide directly
When you complete a form on the Site (demo request, contact, resource download, newsletter sign-up):
- Full name
- Email address
- Phone number (optional)
- Name of the local authority or organisation
- Job title
- Content of your message or request
4.2 Data collected automatically
As you browse the Site, we automatically collect, subject to your consent where applicable:
- IP address (collected for security, anonymised for analysis)
- Browser type and version
- Operating system
- Pages visited, visit duration, traffic source
- Cookie identifiers and similar technologies
4.3 Derived data
Data resulting from combining your activity on the Site with the communications you receive from us (email opens, clicks, demo requests).
5. Purposes of processing and lawful bases
6. Data recipients
Your data is intended for:
- Vizzia's internal teams: sales, marketing and support, strictly within the limits of their duties
- Our technical processors acting on our instructions (Article 28 GDPR)
Your data is never sold to third parties.
7. Transfers outside the European Union and the United Kingdom
Some of our processors are established in the United States. The associated transfers are governed, in accordance with Articles 44 et seq. of the GDPR, by:
- The processor's certification under the EU-US Data Privacy Framework (DPF), where applicable
- The signing of Standard Contractual Clauses adopted by the European Commission on 4 June 2021
Prior to any transfer governed by SCCs, Vizzia ensures, in line with EDPB recommendations, that the level of data protection in the recipient country is essentially equivalent to that guaranteed within the EU.
For UK visitors, transfers from the United Kingdom are governed by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, and by the UK extension to the Data Privacy Framework where applicable.
8. Retention periods
9. Your rights
Under the UK GDPR, the EU GDPR and applicable laws, you have the following rights over your personal data:
Right of access (Art. 15): obtain confirmation that your data is being processed and a copy of it
Right to rectification (Art. 16): have inaccurate data corrected
Right to erasure (Art. 17): request deletion of your data in the cases provided for
Right to restriction of processing (Art. 18): temporarily restrict processing
Right to data portability (Art. 20): receive your data in a structured format
Right to object (Art. 21): object to processing based on legitimate interests, and at any time to commercial prospecting
Right to withdraw your consent at any time, without affecting the lawfulness of prior processing
To exercise these rights, contact us at: rgpd@vizzia.fr
We will respond within one month, which may be extended by two months for complex requests. We may request proof of identity in the event of reasonable doubt.
10. Lodging a complaint with a supervisory authority
If you believe your rights are not being respected, you may lodge a complaint with the competent supervisory authority:
United Kingdom: ICO (Information Commissioner's Office), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, www.ico.org.uk
France: CNIL, 3 Place de Fontenoy, 75007 Paris, www.cnil.fr (lead authority for the controller)
Italy: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it
11. Data security
Vizzia implements appropriate technical and organisational measures to ensure the security of your data:
- Encryption of communications (HTTPS / TLS)
- Hosting on secure servers
- Strict access control to data by authorised teams
- Password policy and multi-factor authentication for internal access
- Regular staff awareness training on security and confidentiality
- Data breach notification procedure in accordance with Article 33 GDPR
12. Cookies
The Site uses cookies and similar technologies. For more information on the cookies used, their purposes, their duration and how to manage your consent, please see our Cookie Policy (https://www.vizzia.com/en/cookie-policy).
13. Changes to this policy
This Privacy Policy may be updated at any time to reflect legal, technical or organisational developments. The update date appears at the top of the document. Substantial changes will be notified to you by an appropriate means.
14. Contact
For any question regarding this policy:
ALPHAIOTA (VIZZIA) c/o PATCHWORK, 8 rue Sainte-Cécile, 75009 Paris, France
Email: contact@vizzia.fr
Phone: +33 1 89 71 35 70