Roles
For the data you type into this website, the operator named at the top of this page decides why and how it is used. For the data a store keeps in the ALFIDAONE software (its sales, customers, suppliers and employees), the store decides what it records and ALFIDAONE provides the system. Written processing terms with each customer: [[TO BE CONFIRMED]]
How the software protects data
- Every record belongs to one store, and one store cannot read another store's records.
- Passwords are stored as salted hashes, never as readable text, and sign-in attempts are limited.
- Session tokens are stored hashed; session cookies are HttpOnly.
- Permissions are enforced on the server for every request.
- Sensitive actions are written to an audit trail.
- In the HR Department module, identity number, passport number and IBAN are stored encrypted and shown masked unless the person's role allows seeing them.
Customer Portal and Live Chat
Customers who register on the website get a portal account that reaches only their own company's records. A portal account cannot see another customer's records. Chat conversations, quotations, invoices, payment confirmations and documents are kept in the ALFIDAONE system and are visible to authorised staff according to their permissions.
Retention
Retention periods: [[TO BE CONFIRMED]]
Transfers outside the Kingdom
Where data is hosted and whether it leaves the Kingdom: [[TO BE CONFIRMED]]
Requests and complaints
To ask about your data or to use your rights, write to [email protected]. Data-protection contact: [[TO BE CONFIRMED]]
Incidents
How and when we notify customers and the competent authority of a personal-data incident: [[TO BE CONFIRMED]]