Legal stuff
Summary
- DEFINITIONS →
- ALTARES-D&B's GENERAL COMMITMENTS →
- PROCESSING PERSONAL DATA IN ALTARES-D&B’s BUSINESS SCOPE →
- 1. ALTARES – D&B group as a Database publisher and as a partner of the Dun & Bradstreet network →
- 1.1. ALTARES-D&B as DUN & BRADSTREET WWN member →
- 1.2. SALES INTELLIGENCE’s Database →
- 1.3. Smart Profile’s Database →
- 2. ALTARES – D&B group as an economic actor →
- 2.1. Marketing management →
- 2.2. Contractual management →
- 3. ALTARES – D&B group as an employer →
- SECURITY OF PERSONAL DATA →
- SUBCONTRACTORS →
- RIGHTS OF DATA SUBJECT →
- ADDITIONAL INFORMATION/UPDATES →
PRIVACY POLICY APPLICABLE IN ALTARES – D&B’s GROUP
Last version: DECEMBER 2025
PREAMBULE
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data is applicable on 25 May 2018 (hereinafter “GDPR”). It aims to harmonize the laws on the protection of Personal Data within the European Union and to strengthen the protection of natural persons with regard to the Processing of their Personal Data, the fundamental right of every person.
As an integral part of its DNA, data represents for the ALTARES – D&B Group one of the main raw materials for business growth; its mission is to offer its expertise across the entire value chain of data in order to enhance the wealth of data of its customers and make it a performance engine.
ALTARES – D&B Group is the exclusive partner in France, BeNeLux and Maghreb of the international network of DUN & BRADSTREET (hereinafter “WWN”), world leader in BtoB economic information. ALTARES – D&B Group provides data on a worldwide scale (on a base of more than 600 million companies in 240 countries), aggregates them with those of its customers and with multiple sources, and offers solutions tailored to the needs of its customers.
ALTARES – D&B Group is committed to protecting Personal Data and the privacy of the Data Subject and aims to provide clear and transparent information about how Personal Data is processed in the course of its business.
The purpose of this privacy policy (hereinafter the “Policy”) is to provide this information.
Definitions
For a better understanding of the Policy, please note that capitalized terms have the meanings given in the GDPR.
ALTARES-D&B Group corresponds to:
- Altares – D&B, which is registered with the Nanterre Trade and Companies Registry under Siren n° 572014199 whose registered office is located at Tour Landscape, 6, Place des Degrés CS 40344, 92045 LA DEFENSE CEDEX;
- Dun & Bradstreet B.V., which is registered under ID local number 24047019 whose registered office is located at Otto Reuchlinweg 1094, Montevideo Offices, 5th floor, 3072 MD Rotterdam, The Netherlands;
- Dun & Bradstreet Belgium NV which is registered under ID local number 0401.847.046 whose registered office is located at Inter Access Park, Pontbeekstraat 4, 1702 Dilbeek, Belgium;
- Inforisk Altares Africa, which is registered under ID local number 339825 whose registered office is located at 42 boulevard Abdelmoumen, Casablanca, Morocco.
ALTARES-D&B’S GENERAL COMMITMENTS
- A Data Protection Officer (DPO) has been appointed and can be contacted via email at dpo@altares.com;
- Evolution of the records of Processing activities, and in particular setting up of the Processing records specific to ALTARES – D&B group’s Processing and controlling activities.
- Formalization of the procedures governing the Processing of Personal Data, in order to ensure compliance with obligations relating to transparency and documentation. This includes, in particular: the procedure concerning records of Processing activities, the procedure for handling requests from Data Subjects seeking to exercise their rights, as well as the procedure for alerting and providing information in the event of a Personal Data Breach.
- Training of employees concerned by Personal Data Processing according to good practices with regard to the GDPR and deployment of a policy to describe the rules of good conduct expected from employees of companies of the ALTARES – D&B Group.
- Implementation of the notion of “Privacy by Design” in both product design and the implementation of Processing, as well as the notion of “Privacy by Default”.
PROCESSING PERSONAL DATA IN ALTARES-D&B’s BUSINESS SCOPE
GDPR applies to:
- ALTARES – D&B Group as a Database publisher and as a partner of the DUN & BRADSTREET network: the protection of Personal Data contained in ALTARES – D&B Group’s Databases and, globally, in DUN & BRADSTREET’S Database.
- ALTARES – D&B Group as an economic actor: the protection of the use of the Personal Data of customers, suppliers and prospects.
- ALTARES – D&B Group as an employer: the protection of Personal Data in the management of human resources.
1. ALTARES – D&B group as a Database publisher and as a partner of the Dun & Bradstreet network
ALTARES-D&B is composed of two Databases:
- ALTARES-D&B, as member of DUN & BRADSTREET’S WWN,
- ALTARES-D&B, as Sales Intelligence division.
1.1 ALTARES-D&B as DUN & BRADSTREET WWN member
Purposes of the Processing, legal basis and retention period
ALTARES-D&B and its partner DUN & BRADSTREET, Inc., as independent Controllers, process company-related data – sometimes including Personal Data – to offer business solutions listed below. These services help customers assess financial risk, understand business partners and clients, comply with regulations (e.g., anti-fraud, anti-corruption, AML), and make informed business decisions.
| Purposes of the Processing | Legal basis of the Processing | Data retention period |
|---|---|---|
| Offer business solutions that support “Credit and Risk”, “Sales & Marketing”, “Compliance”, “ESG-Insights” and “Data Management” processes. | Processing is based on the following legitimate interests:
|
The Personal Data thus collected will be kept for a period that varies according to their nature and the purpose for which they were collected, in accordance with the Restriction of Processing. |
Type of Personal Data
The data collected by ALTARES – D&B group mainly concerns companies. For the most part, they do not make it possible to directly or indirectly identify a natural person; thus, they do not fall under the category of Personal Data. These include, for example, legal identity, legal category – share capital, activity, date of creation, date of registration, number of employees, number of establishments, telephone, fax, payment experience, balance sheet, etc.
Some of these data may, however, be described as “Personal Data” according to the GDPR, such as e-mail addresses, capital links, first names, names and, where applicable, dates of birth of statutory officers, operational managers, insolvency proceedings, legal notices, etc.
In this context, Personal Data that may be processed are data of any kind relating to:
- Identification and contact information: names, first names, date of birth, email addresses, phone numbers;
- Professional information: company name, job title, registered office, D-U-N-S® Number, registration numbers, business affiliations;
- Economic and financial data: balance sheets, legal announcements, payment histories, debts, assets, collective proceedings;
- Other relevant data: ownership structures, criminal convictions or offences (when publicly reported), and other data required to fulfill the above purposes.
- and more generally all Personal Data necessary for the aforementioned purposes;
The categories of Data Subjects are the following:
- Individuals linked to businesses, such as statutory representatives, operational directors, shareholders, and professional contacts;
- Individual entrepreneurs (e.g., sole traders, freelancers, farmers, liberal professions).
Means of collecting Personal Data
The nature of the operations carried out on Personal Data is collection, qualification, enhancement, and analysis.
Personal Data may be sourced from:
- Public sources: e.g., Dutch Chamber of Commerce (Kamer van Koophandel), public records, RNCS, BODACC, KBO, etc.;
- Private sources: including data received from customers or commercial partners;
- Dun & Bradstreet’s international network: subsidiaries, affiliates, and members of its Worldwide Network (WWN).
Recipients of the Personal Data
Personal Data is intended for ALTARES – D&B, its partner DUN & BRADSTREET, Inc and subsidiaries, affiliated entities and members of DUN & BRADSTREET’s WWN, their clients and possibly their providers and/or contractual or commercial partners exclusively for the achievement of the aforementioned purposes. Some of the Personal Data collected may be communicated in particular to Third Parties located outside of the European Union, exclusively for the purposes mentioned above. In such cases, appropriate safeguards – such as Standard Contractual Clauses – are in place to ensure the protection of Personal Data.
It is specified that ALTARES – D&B has entered into an agreement with DUN & BRADSTREET, Inc as well as all members of the WWN network, with the following objectives:
- to require all parties to the contract to comply with all relevant laws relating to Personal Data, in order to protect the interests of the Data Subjects;
- to require all parties to the contract to comply with all relevant privacy laws;
- to require all parties to implement and comply with adequate safeguards for the Processing and transfer of Personal Data.
Furthermore, DUN & BRADSTREET, Inc is listed as a certified organization under the Data Privacy Framework, which came into effect on July 10, 2023 (list available via the following link: https://www.Dataprivacyframework.gov/list), adopted by the European Commission. It is therefore possible for ALTARES-D&B, which is subject to the GDPR, to transfer Personal Data to DUN & BRADSTREET, Inc., which has publicly and annually committed to adhering to this same legal framework. There is then no obligation to set up a transfer tool under Article 46 of the GDPR or to rely on derogation under Article 49 of the GDPR.
1.2. SALES INTELLIGENCE’s Database
| Purposes of the Processing | Legal basis of the Processing | Data retention period |
|---|---|---|
| Performance of the contractual service (e.g. Processing of Data required for online payment). | Processing is based on the performance of a contract. | Personal Data collected in this way will be retained for the duration of the contract and any renewals thereof, and for a maximum period of 5 (five) years from the end of the contract. |
| Retention, collection and use of Data required by law. | Processing is based on a legal obligation. | |
| Management of registration on websites and applications. | Processing is based on consent. | |
| Sending information about the company’s and its partner’s products/services, including personalized information. | Processing is based on consent. | Personal Data will be retained until consent is withdrawn or for 3 (three) years from the last contact made by the user. |
| Responding to users’ rights requests, questions and complaints. | Processing is based on consent. | |
| Contact in order to respond to information requests submitted via forms. | Processing is based on consent. | |
| Transmission of contact details to third parties (referrals, response to needs expressed via campaigns). | Processing is based on consent. | |
| Profiling based on website browsing or other Data provided. | Processing is based on legitimate interest. | Personal Data collected in this way will be retained for the duration of the contract and any renewals thereof, and for a maximum period of 5 (five) years from the end of the contract. |
| Profiling for sending information regarding promotions, new products and personalized content. | Processing is based on legitimate interest. | |
| Sending information and customer satisfaction surveys on purchased products or used services. | Processing is based on legitimate interest. | Personal Data will be retained for 2 (two) years from their collection. |
| Providing information to customers to support their sustainable economic development (e.g. risk management, compliance with legal / regulatory obligations, business growth). | Processing is based on legitimate interest. | Personal Data collected in this way will be retained for the duration of the contract and any renewals thereof, and for a maximum period of 5 (five) years from the end of the contract. |
| Communicating responses regarding the use of our services (including partners’ services) to prospects. | Processing is based on legitimate interest. | |
| Improving client / prospect satisfaction and ensuring an enhanced user experience of our services (including partner services). | Processing is based on legitimate interest. |
Type of Personal Data
Personal Data that may be processed are first and last name, address, postal code, city, phone number, email address, job title, IP address.
Means of collecting Personal Data
The nature of the operations carried out on Personal Data is collection, qualification, enhancement, and analysis.
- Collection through forms: accessing, using, downloading, purchasing, or subscribing to certain services involves the collection of Personal Data concerning the prospect, customer, or user. In these cases, when filling out paper or electronic forms, individuals provide information about themselves. These forms systematically specify:
- The purposes associated with the collection;
- Any other intended uses and the legal basis for the collection;
- A reference to this privacy policy;
- The retention period when it is not specified in our Privacy and Personal Data Protection Policy.
- Collection through cookies: the various ALTARES D&B websites may use cookies to distinguish you from other users, to enable us to improve our services and optimize your user experience. This collection is subject to a specific policy detailed on the “Cookies” page accessible on each of the ALTARES – D&B websites.
- Collection by telephone: ALTARES - D&B provides certain services by telephone and may collect Personal Data. Where possible, telephone contact is confirmed by email, allowing the Data Subject to keep a written record and exercise their rights at any time.
- Indirect collection: ALTARES D&B may obtain Personal Data from third parties. In such cases, ALTARES D&B enters into a contract with the third party in accordance with the provisions of the applicable regulations and informs the Data Subject as soon as possible of the Processing that is being carried out and the information that must be provided to them.
Recipients of the Personal Data
Personal Data may be transmitted:
- To ALTARES - D&B internal departments: the departments responsible for performing the subscribed services, including customer service, sales administration, etc.;
- To ALTARES - D&B external service providers: subcontractors, including technical service providers;
- To ALTARES - D&B business partners;
- To ALTARES - D&B customers who access the Personal Data contained in its B2B Database as part of the contract they have signed.
Transfers of Personal Data outside of the European Union
ALTARES - D&B carries out all of its Processing within the European Union (EU). However, for certain specific services, ALTARES D&B may use subcontractors based outside the EU. Certain Personal Data may then be communicated to them for the strict purpose of their assignments. In this case, in accordance with the regulations in force, ALTARES D&B requires its subcontractors to provide the necessary guarantees for the supervision and security of these transfers, in particular by signing the European Commission’s standard contractual clauses.
1.3. Smart Profile’s Database
Purposes of the Processing, legal basis and retention period
| Purposes of the Processing | Legal basis of the Processing | Data retention period | |
|---|---|---|---|
| Smart Profile uses information held about Data Subjects in the following ways: | To ensure that content from our site is presented in the most effective manner for you and for your computer. | Processing is based on consent. | We will retain your information for as long as your account is active or as needed to provide our Services to you. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. |
| To provide you with information, products, or services that you request or which we believe may interest you. | Processing is based on consent. | Personal Data will be retained until consent is withdrawn or for 3 (three) years from the last contact made by the user. | |
| To notify you about changes to our Service and to correspond with you. | Processing is based on consent. | ||
| To investigate breaches of our agreement with you or unlawful use of the Site. | Processing is based on consent. | Personal Data will be retained until consent is withdrawn or for 5 (three) years from the last contact made by the user. | |
| To produce aggregate statistical information and analytics about the Service (from which users cannot be identified). | Processing is based on consent. | ||
| Smart Profile also processes Business Card Details of specific Corporate Employees who have a direct link to Business implementations, priorities and decision making. | Processing is based on our legitimate interests or the legitimate interest of a third party. | Business Card information details are linked to a specific Company Profile for as long as the information is valid and accurate. When a Business Card is no longer active at a specific Company, we would archive the information. Following a suppression request, the Business Card Details are moved to the suppression list related to the specific Company, for the performance of our legal obligation. | |
Type of Personal Data
Smart Profile’s Contact Page will request:
- Name & Company name;
- Basic contact details such as phone number and email;
- Your preferred contact region;
- A specification of your request.
Smart Profile also processes Business Card Details of specific Corporate Employees who have a direct link to Business implementations, priorities and decision making.
Business Card information includes:
- Name;
- Surname;
- Job Title;
- Professional email address (with company domain).
Means of collecting Personal Data
Data is collected by telephone.
Regarding the collection of Business Card information, we use a diverse range of sources. Those may include your own company website, collaboration with publicly and private listed Data repositories, social media interactions or interaction at events.
Recipients of the Personal Data
Smart Profile may share Personal Data with the following categories of recipients:
- Clients and Licensees of Smart Profile who use Business Card Information to maintain and enrich their corporate profiles and to conduct B2B marketing and account-based activities. These clients act as independent Data Controllers and have their own obligations under the GDPR to inform Data Subjects about their Data Processing activities.
- Service Providers and Partners who assist Smart Profile in operating its services, maintaining databases, performing analytics, hosting web platforms, or providing IT and marketing support. These third parties process Data under contractual arrangements that ensure compliance with GDPR requirements.
- Third-Party Analytics Providers, which collect aggregated and anonymized information on website usage and performance. These providers help Smart Profile improve its online services and user experience.
- Third Parties Located Outside the EEA, including subcontractors and IT or payment service providers, who may process Data on behalf of Smart Profile. In such cases, Smart Profile ensures that appropriate safeguards are in place to protect the Data.
- Public Authorities or Legal Bodies, when required by law or in response to valid legal requests, to protect Smart Profile’s rights or to comply with regulatory or judicial obligations.
Smart Profile does not disclose Business Card e-mail addresses directly to third parties for their own marketing purposes. Instead, marketing e-mails are sent by Smart Profile on behalf of its clients, allowing recipients to choose whether to engage with advertisers via a hyperlink.
Transfers of Personal Data outside of the EU
The information that we collect from you may be transferred, stored, or processed at a destination outside the Benelux and the European Economic Area (“EEA”).
It may also be processed by third parties operating outside the EEA who work for us or for one of our suppliers. Such third parties may be engaged in, among other things, the fulfillment of your order, the Processing of your payment details and/or the provision of support services. By submitting your information, you agree to this transfer, storing or Processing. We will take all steps that are reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Policy.
2. ALTARES – D&B group as an economic actor
In business life, ALTARES needs to approach potential prospects and develop its commercial activity through marketing operations (2.1). ALTARES also needs to manage contracts allowing the supervision of service subscriptions (2.2).
2.1 Marketing management
Purposes of the Processing, legal basis and retention period
ALTARES – D&B, as Data Controller, is required to process Personal Data as part of its marketing management.
| Purposes of the Processing | Legal basis of the Processing | Data retention period |
|---|---|---|
| Receive a demonstration of ALTARES – D&B services. | Processing is based on consent. | Personal Data is retained until consent is withdrawn or for three (3) years from the last contact made by the prospect. |
| Process the quote request. | Processing is based on consent. | |
| Allow the Data Subject to register for the webinar organized either by ALTARES – D&B, or a partner. | Processing is based on consent. | Personal Data is retained for two (2) months after the webinar has taken place. |
| Process the request for information about an ALTARES – D&B service from the Data Subject. | Processing is based on consent. | Personal Data is retained until consent is withdrawn or for three (3) years from the last contact made by the prospect. |
| Download the failure study written by ALTARES – D&B. | Processing is based on consent. | |
| Download the failure study report prepared by an ALTARES partner – D&B. The partner is named on the page describing the study. | Processing is based on consent. | |
| Manage the sending of the latest news from ALTARES to the Data Subject. It enables ALTARES – D&B to manage subscriptions to the newsletter. | Processing is based on consent. |
Type of Personal Data
The Personal Data processed for this purpose is the surname, first name, professional email address, professional telephone number, company, position.
All of this Personal Data must be provided in order to process the request of the Data Subject appropriately.
Means of collecting Personal Data
The Personal Data are collected and stored in a computer file belonging to ALTARES – D&B.
Recipients of the Personal Data
The Personal Data cited herein is intended for the sales and marketing teams of ALTARES - D&B and could be processed by sales and marketing software providers, and also partners. For more information about our partners or sales and marketing technical solutions, please reach out to ALTARES – D&B’s DPO.
2.2 Contractual management
Purposes of the Processing, legal basis and retention period
ALTARES – D&B, as Data Controller, is required to process Personal Data as part of its contract management. This overall purpose is divided into several more specific purposes:
| Purposes of the Processing | Legal basis of the Processing | Data retention period |
|---|---|---|
| Billing, but also the deployment and implementation of the contract by the various ALTARES – D&B teams (delivery, sales, customer services, etc.) for the benefit of the customer. | Processing is based on the performance of a contract or pre-contractual measures. | Personal Data collected in this way will be retained for the duration of the contract and any renewals thereof, and for a maximum period of 7 (seven) to 10 (ten) years, depending on the jurisdiction, from the end of the contract. |
| Configurate access to services and monitor customer usage in relation to the volumes subscribed to under the contract. | Processing is based on the performance of a contract or pre-contractual measures. | |
| Register for webinars as part of user/administrator training. This allows the Personal Data to be processed so that the relevant people can be registered and receive the information they need to log in. | Processing is based on the performance of a contract or pre-contractual measures. | |
| Contact customer support to resolve any issues encountered while using the services. | Processing is based on the performance of a contract or pre-contractual measures. |
Type of Personal Data
The Personal Data requested by ALTARES – D&B is the surname, first name, professional email address, position and if needed, connection logs, in order to register the contract and carry out all the actions necessary for contract management, as listed.
Means of collecting Personal Data
The nature of the Processing of Personal Data is collection and storage in the information systems (CRM, SRM, ERP, etc.) of ALTARES – D&B.
Recipients of the Personal Data
The Personal Data referred to herein is intended, depending on the services concerned:
- To ALTARES - D&B;
- To its partner DUN & BRADSTREET, Inc and to the subsidiaries, affiliated entities and members of the WWN;
- Where applicable, to contractual or commercial partners involved in the performance of the contract;
- Contract management software providers.
For more information about our partners or contract management software providers, please reach out to ALTARES – D&B’s DPO.
Some of the Personal Data collected may be communicated to third parties located outside the European Union, however, the transfers are performed towards a country recognized as providing an adequate level of protection by the European Commission or subject to safeguards deemed appropriate under Article 46 of the GDPR.
3. ALTARES – D&B group as an employer.
Purposes of the Processing, legal basis and retention period
As part of its recruitment activities for its internal needs ALTARES – D&B is required to process Personal Data.
| Purposes of the Processing | Legal basis of the Processing | Data retention period |
|---|---|---|
| Searching for and identifying relevant profiles to meet the internal recruitment needs of ALTARES - D&B. | Processing is based on our legitimate interest. | The Personal Data of successful candidates is retained until the hiring decision is made. If hired, it is then kept for HR management and recruitment archiving throughout the employment contract and for the applicable legal retention period thereafter. If the candidate is not hired, the Personal Data will be kept for a period of two (2) years from the date of application for the purposes of maintaining a talent pool and managing the recruitment process. After 2 years, the Personal Data is destroyed. |
| Pre-selecting candidates. | Processing is based on the performance of a contract or pre-contractual measures. | |
| Assessing the candidate’s ability to perform a job and test their professional skills. | Processing is based on our legitimate interest. | |
| Reach out to the candidate and interact for the recruitment process (interview, offer, skills assessment, etc.). | Processing is based on our legitimate interest. | |
| Creating and managing an applicant pool to meet future needs. | Processing is based on consent. | |
| Discussion for the onboarding of the selected candidate. | Processing is based on the performance of a contract or pre-contractual measures. |
Type of Personal Data
For the aforementioned purpose, ALTARES – D&B may process the following Data: first and last name, email address, telephone number, postal address, resume (CV), cover letter, professional references, information about professional experience and education, results of candidate profile assessment processes (interview reports, technical tests, comments).
Means of collecting Personal Data.
In accordance with the aforementioned purposes, Personal Data is collected, analyzed, stored, organized, communicated, recorded, and deleted.
Recipients of the Personal Data
The Personal Data will be processed by ALTARES employees responsible for human resources management, all managers associated with the purpose of the Processing, and the service provider supplying the recruitment management software. For more information about our partners or human resource management software providers, please reach out to ALTARES – D&B’s DPO.
SECURITY OF PERSONAL DATA
ALTARES – D&B Group has implemented the necessary technical and organizational measures to guarantee a level of protection adapted to the risk incurred. It manages an infrastructure designed to ensure an optimum level of security throughout the entire Data Processing lifecycle.
ALTARES – D&B Group protects and secures Personal Data to prevent destruction, loss, alteration and unauthorized disclosure of Personal Data or unauthorized access accidentally or unlawfully.
As a result, ALTARES – D&B group has taken the relevant physical, electronic and organizational protection measures for Personal Data.
All the actions and commitments of ALTARES – D&B Group aim to respect the GDPR’s principles such as the principles of loyalty, lawfulness, transparency, determined, explicit and legitimate purposes, minimization and accuracy of Personal Data of a specific nature and respect for the rights of Data Subjects regarding their Personal Data.
SUBCONTRACTORS
ALTARES – D&B Group directly carries out most of the Personal Data Processing activities necessary to provide its services; however, ALTARES – D&B Group may also use suppliers to help provide these services. Each of its suppliers is subject to a rigorous selection process to ensure that it has the necessary technical expertise and is able to provide the appropriate level of security and confidentiality. A written contract concluded between ALTARES – D&B Group and each service provider obviously stipulate the respective obligations with regard to the Personal Data, in compliance with the requirements of the GDPR.
RIGHTS OF DATA SUBJECT
In accordance with the applicable regulations, any individual whose Personal Data is processed by ALTARES - D&B may at any time exercise their rights under the regulations in force with ALTARES – D&B, provided that they meet the conditions set out therein:
- Right of access: any Data Subject may obtain access to their Personal Data being processed by ALTARES – D&B;
- Right of rectification: any Data Subject may update their Personal Data or have their Personal Data processed by ALTARES – D&B rectified;
- Right to object, in particular to receiving commercial communications: any Data Subject may express their wish to no longer receive commercial communications from ALTARES – D&B or request that their Personal Data no longer be processed in that way;
- Right to erasure: any Data Subject may request the deletion of Personal Data concerning them;
- Right to restriction: any Data Subject may request the suspension of the Processing of Personal Data concerning them.
Any Data Subject may also define guidelines on the fate of his Personal Data after his death.
These rights are exercised by email to dpo@altares.com with presentation of a proof of identity of the Data Subject.
The Data Subject also has the right to lodge a complaint with a national Supervisory Authority.
| Altares – D&B (France) | French Data Protection Authority : Commission Nationale de l’Informatique et des Libertés (CNIL) | 3 place de Fontenoy, 75007 Paris https://www.cnil.fr/fr |
|---|---|---|
| Dun & Bradstreet B.V. (The Netherlands) | Dutch Data Protection Authority: Autoriteit Persoonsgegevens | Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ DEN HAAG Or https://www.autoriteitpersoonsgegevens.nl/ |
| Dun & Bradstreet Belgium NV (Belgium) | Belgian Data Protection Authority: Gegevensbeschermingsautoriteit | Rue de la Presse, 35 à 1000 Bruxelles Of https://www.autoriteprotectiondonnees.be/citoyen |
| Inforisk Altares Africa (Morocco) | Moroccan Data Protection Authority : Commission Nationale de Protection des Données Personnelles (CNPD) | Avenue Al Arz, Secteur 4, M1, Hay Riad – Rabat Maroc Of http://www.cndp.ma |
ADDITIONAL INFORMATION/UPDATES
If you need any additional information related to this privacy notice, please contact Altares – D&B’s DPO at dpo@altares.com. dpo@altares.com.
In a constant effort to improve its services and processes as well as to protect the right of Data Subjects in accordance with the regulations in force, ALTARES – D&B group reserves the right to update this Personal Data Protection Policy according to its needs and circumstances or if required by law; therefore, we invite you to regularly check for updates.
Last update: December 2025.
