4. What personal data do we collect about you and why?
We collect personal data directly from you when you visit our website, inquire about our products and services and submit your personal data for a career opportunity. In that case, under the General Data Protection Regulation (GDPR), we act as a data controller, and we process your personal data either with your consent or under other legal basis for processing. Each time consent is the legal basis, you can withdraw your consent at any time. Click here to learn more on your data rights.
Examples: name, email address, company name, business address, telephone number, preferences, and social media engagement.
When you visit our website, a cookie consent banner will prompt you to consent to our use of “preference,” “analytical” and “advertising” cookies. We have applied the privacy-by-default principle; these cookies will be blocked unless you provide us with an affirmative action to allow these cookies. Essential cookies are required for the proper functioning of our website and cannot be blocked.
If you consent to our use of advertising cookies, we collect and process Marketing Data to promote our products and services and to provide you with personalized and tailored advertising based on your preferences.
Click here to read our Cookie Policy, which explains in more detail how we use cookies, how we conduct interest-based advertising, and how you can manage your cookie preferences.
Based on your affirmative action to consent, we will also send you our newsletters and promotional emails to:
- notify you of other Alithya products and services we think you might be interested in;
- inform you of special events relating to Alithya;
- provide you with industry information related to Microsoft’s ERP, CRM, Business Intelligence, LinkedIn Sales Navigator Services and Alithya’s Digital products; and
- communicate our corporate activities and financial results to the financial community, investors, journalists and industry analysts.
You can also choose to participate in our various webinars and web conferences. To do so, you must register your name, email and your company name (or employer). We use a service provider, Digicast, to support the delivery of our webinars and web conferences. We will use your contact information to follow up with you, either by email or by telephone.
Under the GDPR, we process this information based on your consent. You may withdraw your consent at any time or unsubscribe directly in the emails by visiting our Cookies Preferences Centre or by contacting us at privacy@alithya.com. We process your personal data for our legitimate interests to ensure the proper functioning of our website.
- Usage Information and Technical Log Data
Examples: Technical logs, IP address, browser type and configuration, operating system, number of visitors, pages viewed, length of visits, geographical location, language preferences and device information.
When you visit our website, we collect usage information and technical log data in the form of personal data, anonymous data and aggregated data through the use of essential cookies. We collect this information to allow us to monitor and secure our website and to understand traffic patterns within our website. This information allows Alithya to ensure the content is presented efficiently and to optimize and improve our products and services when necessary.
Under the GDPR, we process this information based on our legitimate interests to maintain the security of our website and to tailor its content to meet your needs.
Examples: Education, professional experiences, contact information, professional memberships, certifications, employment history
If you apply for one of our job opportunities, we will collect and process the personal data you share with us, including your resume and any other attachments and content. This information allows Alithya to process employment applications and make recruitment decisions. Should your application be selected for a job offer, we will collect and use your credit score and criminal background check from our service provider.
Under the GDPR, we process this information based on your consent to provide us with your personal data.
Examples: Contact information, message content
If you communicate with us by email, through social media, our website chat service, our investor relations or otherwise, we will collect the personal data you share with us to respond to your communication.
We use third-party service providers to operate our chat function on our website. If not answered through the chatbot, your questions will be directed to the appropriate Alithya team member, who will respond to your request in a timely manner.
As a public company trading on TSX and NASDAQ, Alithya activates its investor relations communications to share financial and corporate-related information about Alithya with the financial community, investors, shareholders, media outlets, industry analysts as well as other interested parties.
Under the GDPR, we process this information based on performing a contract with you or with your consent, where applicable.
When we act as a service provider, we process various types of personal data for the purposes of delivering our products and services to our clients and to you, the users. We support our clients and their users with the development of digital applications, control and software engineering, cybersecurity, the modernization of legacy systems and the development of cloud infrastructures. When appropriate, we use artificial intelligence and machine learning technologies. We also offer managed services and client portals for Microsoft Dynamics clients, Canadian clients in the energy sector as well as Oracle Cloud, ERP, EPM, and HCM clients.
In this respect, under the General Data Protection Regulation (GDPR), we act as a data processor.
Our clients are located in Canada, Europe and the United States. They operate in the financial, investment/insurance, manufacturing, retail/distribution, telecommunications, transportation, professional services, healthcare, and government sectors.
We process such personal data in accordance with the instructions of our clients, who are responsible for determining which lawful basis allows them to collect and process your personal data and to obtain your consent when applicable under various Privacy laws.
You will find below the categories of personal data we may process on behalf of our clients.
- Contact Data: name, physical address, email, telephone number
- Identification Data: background verification, driver’s license, passport number, account number, policy number, utility bill account number
- Financial Data: credit card number, bank account, loans and mortgages, investments, payment information
- Preferences Data: language, purchase history, feedback, online searches
- Employment Data: resume, education history, employment history, recognitions and special awards, professional memberships, certifications
- Special Categories Data: ethnic origin
- Health Data: medication prescriptions, doctors’ names, frequency of appointments to medical clinics, medical records
Under the GDPR, we process this information based on performing a contract with our clients and according to our clients’ instructions, which are outlined in our contractual agreements.
