We are committed to ensuring your privacy and the protection of your personal data.

This Data Policy informs you of the conditions under which we (i.e., Schelcher Prince Gestion, as part of the Crédit Mutuel Arkéa group) collect, process, retain, archive and erase our prospects’ and clients’ personal data and of your rights with respect to such data.

What is personal data?

Personal data is any information by means of which an individual can be directly or indirectly identified (e.g., name, address, registration number, phone number, photo, date of birth, IP address, fingerprint, etc.).

Which types of personal data do Schelcher Prince Gestion process?

Within the scope of our contractual or business relationship with you, we mainly process the following types of personal data: 

• declarative personal data, i.e., data collected directly from you or indirectly from third parties with which we have a contractual relationship;
• personal data derived from publicly available information (the public section of social networks, for example) in compliance with regulations;
• personal data deduced or determined by Schelcher Prince Gestion.
•  

What are the purposes of and grounds for collecting your personal data?        

We process personal data for the following purposes and on the following grounds:

Direct marketing

We can only contact you by email for direct marketing purposes on condition that we have obtained your prior consent unless otherwise authorised by law. You may, however, exercise your right to object by emailing us at : clientservices@spgestion.fr

Who receives the personal data processed by Schelcher Prince Gestion?

We are bound by a professional secrecy obligation in relation to the personal data provided to us. However, by transmitting your personal information to us, you authorise us to share banking secrecy with respect to such data, in light of the aforementioned purposes, for the benefit of other Crédit Mutuel Arkéa group companies, their service providers and processors and any legally empowered administrative and court authorities (European Union countries or non-EU members).

Thus, in the case of a fund transfer pursuant to Regulation EC/1781 of 15 November 2006, some of your personal data may be transmitted to the bank or beneficiary of the transfer located in an EU or non-EU country. In order to transfer funds we may, for technical reasons, need to transfer data outside the EU, in particular to the US, with regard to transactions using the SWIFT secure network. The holder may obtain all and any information about said transfer by consulting the ‘Information Notice’ on the French Banking Federation’s website (www.fbf.fr).

We are not responsible for personal data that you may have authorised a third party to process, but that you have not shared with it such as account aggregation applications or social media. It is your responsibility to refer to the data protection policies of any third parties concerned to check the conditions under which they process data and/or to exercise your rights with respect to such processing.

What security measures does Schelcher Prince Gestion put in place?

Pursuant to financial-market regulations we are required to ensure high levels of security and confidentiality with respect to your personal data. As such, we consider all of your data to be confidential data covered by professional secrecy obligations. These data may be transmitted, used or stored in accordance with the secure framework described below.

 In accordance with the type of personal data and the risks posed by the processing thereof, we take the technical (data encryption), physical (building access control) and organisational (dedicated teams trained in data safety) measures needed to ensure that these data are secure and are not deformed, damaged, rendered unavailable or accessed by third parties. To guarantee this level of security, additional security measures may be necessary, such as audit traces or trails.

 We raise our employees’ awareness about the protection of personal data and ensure that they comply with the regulations in force as well as with our firm’s ethics.

 We choose processors and service providers that provide significant guarantees regarding the implementation of appropriate technical and organisational measures so that your data is processed in a way that meets the requirements of the applicable data protection regulations.

 Our clients and other parties working with us (e.g., on security surveillance) may also effectively contribute to maintaining our personal data security levels by complying with the rules that we advise them to follow and informing us of any anomaly they may encounter.

If we notice an incident that impacts personal data, we make sure – based on regulatory obligations – to inform the CNIL (French data protection authority) and the persons concerned as soon possible.

How long do we store your personal data?

We have put specific rules in place regarding the storage periods for personal data.

To determine these periods, we take account of the various purposes for which the data are collected, the persons concerned by the collection, and compliance with legal, regulatory or professional obligations. These periods do not exceed what is strictly necessary to effectively process your data.

What are your rights?

You have specific rights with respect to your data, such as a right to access, rectify, object to, restrict and erase them, as well as a right to data portability. You are also entitled to give instructions about the storage, erasure and communication of your personal data following your death. Lastly, you are entitled to file a complaint with the CNIL.

 How do you exercise your rights?

  (1) Please specify which processed data is concerned and the reason behind your request.