This policy explains how FINADORY processes the personal data of visitors to the Site and of its prospects, clients and partners, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French law no. 78-17 of 6 January 1978 (Informatique et Libertés).
Data controller
FINADORY, Single-shareholder simplified joint-stock company (SASU) with share capital of €1,000, RCS Paris 912 552 627, 110 rue Réaumur, 75002 Paris, France.
Contact for any question about your data: hello@finadory.com.
Data collected
We only collect the data needed for the purposes described below:
- Identification and contact data: last name, first name, job title, company, email address, phone number.
- Content of your exchanges with us: message, description of your project, attachments.
- Business relationship data: quotes, contracts, invoices, history of exchanges.
- Technical connection data: IP address, date and time, browser, pages viewed, collected by our host for the security and proper functioning of the Site.
- Audience measurement, only if you accept it: pages viewed, visit duration, device type and approximate location, collected by Google Analytics.
Purposes and legal bases
- Responding to your contact and project requests: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
- Managing the relationship with our clients and partners (quotes, performance of services, invoicing): performance of the contract (Art. 6.1.b) and legal accounting and tax obligations (Art. 6.1.c).
- Business prospecting towards professionals, about offers related to their activity: legitimate interest (Art. 6.1.f). You can object at any time, free of charge.
- Sending our news by email, when you have ticked the box provided for this purpose: consent (Art. 6.1.a), which can be withdrawn at any time via the unsubscribe link in each email.
- Ensuring the security of the Site and preventing fraud: legitimate interest (Art. 6.1.f).
- Measuring the Site’s audience with Google Analytics: consent (Art. 6.1.a), which can be withdrawn at any time.
Your data is not subject to any fully automated decision producing legal effects concerning you.
Recipients
Your data is intended for authorised staff of FINADORY and, where applicable, of its subsidiaries, solely for the purposes above. It is neither sold nor rented.
It may be processed by our technical processors (Site hosting, email, sales management and automation tools), chosen for the guarantees they offer under the GDPR and bound to FINADORY by a contract compliant with Article 28 GDPR.
Messages sent through the contact form are delivered to our mailbox by Brevo (Sendinblue SAS, France), which also handles, where applicable, the sending of our news. The form is protected against bots by ALTCHA, a mechanism hosted on our own site: it sets no cookie and sends no data to any third party.
The meeting booking embedded in the Contact page is provided by Wanalink, a FINADORY group platform. Information entered to book a slot is processed under Wanalink’s privacy policy.
If you accept it, audience measurement is carried out by Google Analytics (Google Ireland Limited).
Transfers outside the European Union
The Site is hosted by Vercel Inc., a company established in the United States and certified under the EU-US Data Privacy Framework. When another provider processes data outside the European Union, the transfer is governed by an adequacy decision or by the European Commission’s standard contractual clauses.
Retention periods
- Prospects: 3 years from the last contact initiated by you.
- News subscribers: until you unsubscribe, or 3 years without any interaction from you.
- Clients: for the duration of the business relationship, then 5 years (general limitation period); accounting documents and invoices: 10 years.
- Technical connection data: 12 months at most.
- Google Analytics data: 14 months.
Security
FINADORY implements appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted and authenticated access, and providers chosen for their security guarantees. In the event of a data breach that poses a risk to your rights, FINADORY notifies the CNIL and, where applicable, the people concerned, under the conditions laid down by the GDPR.
Your rights
You have the following rights over your data:
- access (Art. 15 GDPR) and rectification (Art. 16);
- erasure (Art. 17) and restriction of processing (Art. 18);
- portability (Art. 20);
- objection, in particular to business prospecting (Art. 21);
- withdrawal of your consent at any time, where processing is based on it;
- setting instructions on what happens to your data after your death (Art. 85 of the French Informatique et Libertés law).
To exercise your rights, write to hello@finadory.com or to FINADORY, 110 rue Réaumur, 75002 Paris, France. We respond within one month, which may be extended by two months for complex requests, in which case you will be informed. Proof of identity may be requested in case of reasonable doubt.
If you consider that your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
Changes
This policy may change. The version in force is the one published on the Site, with its update date.
