Legal and regulatory information

plicable law and competent administrative authority

The Privacy Policy is governed by the General Data Protection Regulation no. 2016/679 (the “GDPR”) and by the French Data Protection Act no. 78-17 of 6 January 1978 as amended (the “Data Protection Act”), under the regulatory control of the French personal data protection authority, the Commission Nationale de l’Informatique et des Libertés (“CNIL”, www.cnil.fr)

Links to third-party websites

Our site may contain or use links to websites, mobile applications, products or services operated by third parties (in particular advertising sites, IDIA CI’s partners or social networks). We remind you that the Privacy Policy does not extend to these third parties over which IDIA CI has no control and for which we cannot be held responsible.

At the time of updating this Security Policy, only the LinkedIn and Tweeter services are used.

We encourage you to read the privacy policies, procedures and practices of these third parties.

THE PERSONAL DATA WE COLLECT

This Privacy Policy applies to personal data that we may collect from or about you (see below), from the following sources:

Browsing the IDIA Capital Investissement website;

Receiving and sending emails, text messages and other electronic messages between IDIA CI and you.

USE OF YOUR PERSONAL DATA

We collect and use your personal data for the main purposes described below:

To understand your needs and expectations, in particular to optimise your use of our website and its functionalities;

To answer your questions and process your requests;

To respond to legal requests and orders.

TRANSMISSION OF DATA

If you have formally consented, your personal data may be communicated by IDIA Capital Investissement :

Within the Crédit Agricole Group

We may share your personal data with certain entities of the Crédit Agricole Group, in order to ensure the continuity of our services and our relationship with our clients, prospective clients or users of our website.

With third party service providers

We may communicate your personal data to trusted third parties located within the European Union, in particular to ensure the proper functioning of our website.

With third parties for legal reasons

In the event that we are required to comply with laws and regulations and legal requests and orders or if this is permitted by law (i.e. for the protection and defence of rights, situations that threaten life, health or safety, etc.).

In any event, we always require these recipients to provide sufficient guarantees of confidentiality and security and to take the physical, organisational and technical measures necessary to protect and secure your personal data, in accordance with the legislation in force.

DATA SECURITY

IDIA Capital Investissement secures your personal data by implementing appropriate physical, organisational and technical measures to prevent any unauthorised access, use, disclosure, modification or destruction, in accordance with the regulations in force.

These measures include:

·        Storage on secure servers within the European Union;

·        Securing your data by implementing measures to guarantee the confidentiality, integrity and availability of your data;

·        Limited access to your data on a “need-to-know” basis.

Although IDIA CI implements all possible measures to protect your personal data, we cannot guarantee the security of information transmitted on our website when a security flaw affects your terminal or browser.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Under the RGPD and the Data Protection Act, you have various rights, including:

Access, modification, updating and deletion of your personal data

You may request access to your personal data held and processed by IDIA CI, consult it, obtain a paper or electronic copy and request that it be corrected, updated or deleted.

Opposition

You may request that your data, which is being processed, be communicated to you in an open and machine-readable format, either for your personal use or for transfer to another data controller.

Limitation of processing

In certain cases, you may request that the processing of your data be restricted.

Complaint to a Supervisory Authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with the supervisory authority of the European Union country in which you reside or work or in which you consider that your rights have been infringed.

You may exercise all these rights by sending a written request, along with a copy of your identity document, to the contacts mentioned in Article 9 “Contacting us”.

We will endeavour to respond to your request as quickly as possible and in accordance with the applicable regulations. Nevertheless, in certain cases, we may not be able to respond favourably in order to comply with our legal or contractual obligations.

RETENTION PERIODS FOR DATA COLLECTED

We keep your personal data only for as long as is necessary to fulfil the various purposes defined in Article 3 “Use of your personal data” above, except in cases where the law authorises or requires us to keep it for longer.

The table below summarises the different maximum retention periods applicable or imposed on IDIA CI depending on the purposes for which your personal data may be processed. These maximum retention periods apply unless you request the deletion or cessation of use of your data before its expiry for a reason compatible with any legal obligation that may be imposed on IDIA Capital Investissement.

CHANGES TO THE PRIVACY POLICY

IDIA Capital Investissement reserves the right to make changes to the Privacy Policy. We encourage you to visit this page regularly to review any changes and to stay informed about the measures we take to protect your personal data.

CONTACT US

To exercise your rights or if you have any questions about the Privacy Policy, please contact us at contact@ca-idia.com or at our postal address 12, place des Etats-Unis – 92127 Montrouge Cedex.

If you have any questions about the processing of your personal data, you can also contact our Data Protection Officer at dpo@ca-idia.com.

The Privacy Policy was updated on 23/05/2018.