RALIA SOLUTIONS – PRIVACY POLICY

1. Controller

The controller is RALIA SOLUTIONS FOR MARKETING OPERATIONS, Baniyas Towers, Al Falah St – Saeed Bin Ahmed Al Otaiba St – Abu Dhabi, United Arab Emirates.

• General privacy contact: contact@raliasolutions.com
• ATS Breaker contact: contact@atsbreaker.website
• Opale contact: contact@opaleagency.fr

This Policy explains Ralia’s central processing. Service-specific policies provide additional details and prevail for that service where more specific.

2. Scope

This Policy applies to visitors, prospects, customers, applicants, talents, creators, business contacts, persons whose data appears in a CV or portfolio, persons monitored through FAIR, and individuals included in Customer-provided business data.

3. Data collected

Depending on the service, Ralia may collect:

• identity and contact details
• account, order, invoice and payment-status information
• CVs, professional history, qualifications and portfolio data
• photographs, videos, measurements, social profiles and availability
• company, website, audience, offer, pricing and marketing information
• monitoring keywords, public online mentions and reputation data
• prospect or business-contact data lawfully supplied by a business Customer
• support communications, call notes and messages
• IP address, device, browser, pages viewed, referral data, cookie choices, security logs and approximate location
• any information voluntarily submitted

Ralia does not normally receive complete card numbers because payment is handled by Stripe.

4. Special or sensitive information

CVs, photos, videos and online content may reveal or contain sensitive information, including health, disability, racial or ethnic origin, religion, political views, trade-union membership, sexual orientation, biometric information or criminal-history information.

Do not submit sensitive data that is not necessary. Do not upload passports, identity cards, complete national identifiers, bank details, medical records, passwords or confidential employer information unless specifically requested through a secure process and legally justified.

Where special-category data is intentionally processed and applicable law requires explicit consent or another special condition, Ralia will seek the required authorisation or decline the processing.

5. Sources

Data may come directly from you, from uploaded files and forms, from Stripe, from public online sources, from brands or business partners, from a Customer acting as controller, from social networks and messaging platforms, and automatically from website technologies.

6. Purposes

Ralia uses data to:

• respond to enquiries and assess applications
• provide, personalise and support services
• format and deliver CVs
• present authorised talent profiles to potential brands
• conduct agreed marketing, prospecting and growth services
• configure reputation monitoring and issue alerts
• process payments, invoices, fraud checks and disputes
• communicate operational information
• secure, maintain and improve websites and systems
• measure audience and campaigns where lawfully permitted
• comply with law and establish, exercise or defend claims
• manage restructuring or succession of the business

7. Legal bases

Depending on the person, jurisdiction and purpose, Ralia relies on pre-contractual steps, contract performance, consent, compliance with legal obligations, legitimate interests, protection of legal claims and any other lawful basis available under applicable law.

Consent is used where required for non-essential cookies, certain marketing, public use of images, and processing that legally requires explicit consent. Consent may be withdrawn without affecting prior lawful processing.

8. AI-assisted processing

Ralia may use OpenAI/ChatGPT, Anthropic/Claude or other identified AI providers to assist with document interpretation, formatting, drafting, categorisation, monitoring, sentiment analysis, research and optimisation.

Only information reasonably necessary for the task should be submitted. Ralia will use available settings and account configurations intended to prevent Customer content from being used for general model improvement and will delete operational conversations or files when no longer needed. Provider retention, security and legal exceptions remain governed by the provider’s current terms and technical configuration.

AI may produce errors. Ralia does not make a final legally significant employment decision solely by automated processing.

9. Recipients and processors

Data may be accessed by authorised Ralia personnel and by providers necessary for hosting, website operation, file upload, payment, email, messaging, AI, analytics, advertising, scheduling, CRM, monitoring, support and security.

Current providers and provider categories include OVHcloud and Zimbra, ChatGPT Sites, Stripe, Uploadcare, OpenAI, Anthropic, Meta and WhatsApp, TikTok, LinkedIn, Google services, analytics and advertising tools, cookie-consent tools, CRM, scheduling, document-delivery, monitoring, support and security providers. The exact tools activated on a website should also appear in the live cookie information.

Talent data may be disclosed to brands or partners only for the agreed introduction or opportunity-search purpose. Ralia does not sell CVs.

Professional advisers, insurers, auditors, authorities and a lawful business successor may receive data where necessary.

10. Business Customer data

For some FAIR or +PaidMembers engagements, the business Customer determines why and how personal data is processed and Ralia acts as a processor. The Customer must ensure a lawful basis, provide required notices, respect rights and give lawful instructions. A separate data-processing addendum should be signed where required.

11. International transfers

Ralia is established in the UAE and its providers may process data in the UAE, EEA, United Kingdom, United States and other locations.

Where required, Ralia will use recognised transfer mechanisms, contractual clauses, transfer assessments, access controls, encryption or other lawful safeguards. Details may be requested at contact@raliasolutions.com.

12. Retention

Ralia keeps data only as long as reasonably necessary for the stated purpose, legal obligations, security and claims. Service-specific retention periods are described in the relevant policy.

Indicative central periods:

• enquiries not leading to a contract: up to 12 months
• contracts, invoices and transaction records: the period required by UAE and other applicable tax, accounting and limitation laws
• support and complaint records: up to 24 months after closure, or longer for a dispute
• security logs: a proportionate period based on risk
• consent records and terms-acceptance evidence: for the contract and applicable limitation period
• marketing data: until opt-out or the applicable review period
• cookie data: according to the cookie tool and provider settings

13. Cookies and tracking

Websites may use necessary cookies, analytics, functional tools and advertising technologies. Non-essential technologies will be activated only after consent where required.

Users can manage choices through the cookie banner. A cookie list should identify each live tool, purpose, provider and duration. Advertising pixels must not access the contents of CVs, private portfolios or Customer dashboards.

14. Security

Ralia uses reasonable organisational and technical measures, including restricted access, secure transmission, strong authentication, provider due diligence, deletion procedures, backups where appropriate, malware controls and incident response.

No online system is completely secure. Users should avoid unnecessary sensitive data and protect their devices and accounts.

15. Rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, information about recipients and transfers, or human review of certain automated processing. They may also opt out of marketing and, where applicable, sale or sharing for targeted advertising.

Requests may be sent to contact@raliasolutions.com or the relevant service email. Ralia may verify identity and may refuse or limit a request where permitted to protect others, comply with law, preserve security or defend claims.

16. EEA, Switzerland and United Kingdom

Where the GDPR or UK GDPR applies, individuals may complain to their competent supervisory authority. The legal bases and transfer safeguards described above apply.

17. United States privacy rights

Where a US state privacy law applies, residents may have rights to know, access, correct, delete and obtain a copy of personal data, and to opt out of certain targeted advertising, sale or sharing. Ralia does not sell CVs or talent portfolios for money. Advertising technologies may be treated as “sharing” under some laws; an applicable opt-out mechanism will be provided where required.

18. Children

Ralia’s paid services are intended for adults unless a specific service accepts a minor through a documented parent or guardian process. Ralia does not knowingly collect children’s data without an appropriate lawful basis and authorisation.

19. Data incidents

Ralia will assess suspected breaches and notify affected individuals and authorities where required by applicable law. Users should report security concerns promptly to contact@raliasolutions.com.

20. Changes

Ralia may update this Policy. The updated date will be posted, and material changes will be communicated where required.

21. Contact

RALIA SOLUTIONS FOR MARKETING OPERATIONS

Baniyas Towers, Al Falah St – Saeed Bin Ahmed Al Otaiba St – Abu Dhabi, United Arab Emirates

Email: contact@raliasolutions.com

Website: https://raliasolutions.com