FINADORY
Legal information

Privacy policy

Last updated:

This English translation is provided for convenience only. The French version is the only legally binding one and prevails in case of discrepancy. Read the French version

This policy explains how FINADORY processes the personal data of visitors to the Site and of its prospects, clients and partners, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French law no. 78-17 of 6 January 1978 (Informatique et Libertés).

Data controller

FINADORY, Single-shareholder simplified joint-stock company (SASU) with share capital of €1,000, RCS Paris 912 552 627, 110 rue Réaumur, 75002 Paris, France.

Contact for any question about your data: hello@finadory.com.

Data collected

We only collect the data needed for the purposes described below:

  • Identification and contact data: last name, first name, job title, company, email address, phone number.
  • Content of your exchanges with us: message, description of your project, attachments.
  • Business relationship data: quotes, contracts, invoices, history of exchanges.
  • Technical connection data: IP address, date and time, browser, pages viewed, collected by our host for the security and proper functioning of the Site.
  • Audience measurement, only if you accept it: pages viewed, visit duration, device type and approximate location, collected by Google Analytics.

Purposes and legal bases

  • Responding to your contact and project requests: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
  • Managing the relationship with our clients and partners (quotes, performance of services, invoicing): performance of the contract (Art. 6.1.b) and legal accounting and tax obligations (Art. 6.1.c).
  • Business prospecting towards professionals, about offers related to their activity: legitimate interest (Art. 6.1.f). You can object at any time, free of charge.
  • Sending our news by email, when you have ticked the box provided for this purpose: consent (Art. 6.1.a), which can be withdrawn at any time via the unsubscribe link in each email.
  • Ensuring the security of the Site and preventing fraud: legitimate interest (Art. 6.1.f).
  • Measuring the Site’s audience with Google Analytics: consent (Art. 6.1.a), which can be withdrawn at any time.

Your data is not subject to any fully automated decision producing legal effects concerning you.

Recipients

Your data is intended for authorised staff of FINADORY and, where applicable, of its subsidiaries, solely for the purposes above. It is neither sold nor rented.

It may be processed by our technical processors (Site hosting, email, sales management and automation tools), chosen for the guarantees they offer under the GDPR and bound to FINADORY by a contract compliant with Article 28 GDPR.

Messages sent through the contact form are delivered to our mailbox by Brevo (Sendinblue SAS, France), which also handles, where applicable, the sending of our news. The form is protected against bots by ALTCHA, a mechanism hosted on our own site: it sets no cookie and sends no data to any third party.

The meeting booking embedded in the Contact page is provided by Wanalink, a FINADORY group platform. Information entered to book a slot is processed under Wanalink’s privacy policy.

If you accept it, audience measurement is carried out by Google Analytics (Google Ireland Limited).

Transfers outside the European Union

The Site is hosted by Vercel Inc., a company established in the United States and certified under the EU-US Data Privacy Framework. When another provider processes data outside the European Union, the transfer is governed by an adequacy decision or by the European Commission’s standard contractual clauses.

Retention periods

  • Prospects: 3 years from the last contact initiated by you.
  • News subscribers: until you unsubscribe, or 3 years without any interaction from you.
  • Clients: for the duration of the business relationship, then 5 years (general limitation period); accounting documents and invoices: 10 years.
  • Technical connection data: 12 months at most.
  • Google Analytics data: 14 months.

Cookies

The Site uses no advertising cookies. Only with your consent, Google Analytics sets audience measurement cookies (_ga, _ga_*), kept for 13 months at most. Only cookies strictly necessary for the operation and security of the Site are exempt from consent.

Your consent is collected through a banner that lets you accept or refuse just as easily. Your choice is stored in your browser so you are not asked again; you can change it at any time via “Cookie settings” at the bottom of each page. Refusing has no impact on your use of the Site.

The websites of the group’s brands accessible from the Site have their own cookie policies.

Security

FINADORY implements appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted and authenticated access, and providers chosen for their security guarantees. In the event of a data breach that poses a risk to your rights, FINADORY notifies the CNIL and, where applicable, the people concerned, under the conditions laid down by the GDPR.

Your rights

You have the following rights over your data:

  • access (Art. 15 GDPR) and rectification (Art. 16);
  • erasure (Art. 17) and restriction of processing (Art. 18);
  • portability (Art. 20);
  • objection, in particular to business prospecting (Art. 21);
  • withdrawal of your consent at any time, where processing is based on it;
  • setting instructions on what happens to your data after your death (Art. 85 of the French Informatique et Libertés law).

To exercise your rights, write to hello@finadory.com or to FINADORY, 110 rue Réaumur, 75002 Paris, France. We respond within one month, which may be extended by two months for complex requests, in which case you will be informed. Proof of identity may be requested in case of reasonable doubt.

If you consider that your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Changes

This policy may change. The version in force is the one published on the Site, with its update date.