Since your Personal Data is confidential, only those persons duly authorised by Valther can access Your Personal Data, without affecting the possibility that it may be sent to bodies responsible for controlling or inspecting our compliance in accordance with the applicable regulations.

Anyone who has access to Your Personal Data is bound by a non-disclosure obligation. These individuals are duly authorised members of Valther. Our service providers may also occasionally be required to process Personal Data that is strictly necessary to perform the services we entrust to them (assignments, electronic and postal distribution, logistics and catering, etc.). If service providers from outside the European Union are used, Valther undertakes to ensure that appropriate measures have been implemented to guarantee that your Personal Data benefits from an adequate level of protection, in particular through the European Commission’s Standard Contractual Clauses, internal company rules, or the Data Protection Shield established between the European Union and the United States.
 
The GDPR has hardened certain obligations in this area. In line with its values and responsible practices, Valther has implemented the new measures imposed by the applicable regulations to enhance the personal data protection of data subjects.  Personal Data is protected and secured to ensure that it remains confidential and to prevent it from being distorted, damaged, destroyed, or disclosed to unauthorised third parties, for as long as necessary to fulfil the processing purposes in accordance with applicable law.
 
When it is necessary and authorised to disclose data to third parties, Valther makes sure that these third parties provide the same level of protection for such data as that provided by Valther and demands contractual guarantees from them, such that, the data is exclusively processed for the purposes you have previously accepted, with the required level of confidentiality and security.

If an infringement of Personal Data likely to result in a high risk to the rights and freedoms of data subjects is confirmed, Valther undertakes to report this infringement to the competent supervisory authority and, where required by the regulations, to the data subjects (either individually or generally as applicable).

Valther commits to providing all the compliance evidence required by the supervisory authorities (e.g., processing records, privacy impact assessments, procedures for managing the rights of the data subjects, technical and organisational security measures, etc.).

As a data subject, you have the following rights regarding Your Personal Data:

• Right to information about the processing of your Personal Data: Valther makes every effort to provide you with information in a concise, transparent, intelligible, and easily accessible format using clear and plain language on the conditions under which Your Personal Data is processed.

 

• Right of access and query: The right of access allows you to obtain confirmation from Valther as to whether your Personal Data is being processed and the conditions of that processing, as well as to obtain a copy of this Data in a commonly used electronic format, where applicable.

 

•  Right to modification and rectification: You also have the right to obtain from Valther, without undue delay, the rectification or updating of your Personal Data.

 

• Right to erasure (or ‘right to be forgotten’) of your Personal Data:  Subject to the exceptions provided by the applicable law (e.g.,: storage necessary to comply with a legal obligation, legitimate interest of Valther to store the data), you have the right to ask Valther to erase Your Personal Data without undue delay when such data is no longer needed for the purposes for which it was collected or otherwise processed; when you wish to withdraw your consent on which the processing was based and there are no other grounds which justify its processing; or when you believe and can prove that your Personal Data has been unlawfully processed. Your Personal Data must be erased by virtue of a legal obligation.

 

• Right to restrict the processing of your Personal Data: The applicable regulations provide that this right to restrict the processing of your Personal Data can be invoked in certain cases, in particular:

 

- When you contest the accuracy of your Personal Data,

​

- When you can prove that the Personal Data processing is unlawful but you do not wish your Personal Data to be deleted, but instead demand that restrictions be placed on its use,

​

- When the Firm no longer needs your Personal Data but you still require it to prove, exercise, or defend your rights through the legal system,

​

- When you oppose processing that is based on the Firm's legitimate interest, while you check whether the legitimate reasons pursued by the data controller take precedence over those of the data subject.

•  Right to file a complaint with a supervisory authority: If, despite the efforts of Valther to protect the confidentiality of your Personal Data, you believe that your rights have not been respected, you may file a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).

 
For any questions or to exercise your rights, you can send a letter to Valther and include a signed copy of your identity document to the following address: Valther - 46 avenue d'Iéna, 75116 Paris, attention Mr. Velin Valev, or by email to contact@Valther.com.

Valther undertakes to respond to you as soon as possible and, in any case, within one month from receiving your request. If necessary, this period may be extended by two months, taking into account the complexity and the number of claims sent to Valther. In this case, within one month from receiving your request you will be informed about this extension and the reasons for the delay. If you send your claim electronically, we will contact you electronically where possible, unless you expressly request otherwise. Finally, if Valther does not accept your claim, it will inform you of its reasons. You will then be entitled to file a claim with a supervisory authority and/or initiate legal proceedings.

​