Privacy Policy for the www.evaliancecapital.fr website

This privacy policy defines and informs you of how the Website Owner uses and protects the information that the User transmits, if any, when using the Website accessible from the following URL: www.evaliancecapital.fr (hereinafter the “Website”).

Please note that this privacy policy may be modified or supplemented at any time, in particular to comply with any legislative, regulatory, jurisprudential, or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These changes are binding on the User as soon as they are posted online. The User should therefore regularly consult this privacy and cookie policy in order to be aware of any changes.

I. Personal data

In general, you can visit the Site without providing any personal information about yourself. In any case, you are under no obligation to provide this information to the Site Owner.

However, if you refuse, you may not be able to benefit from certain information or services that you have requested. In this regard, the Owner may in some cases ask you to provide your surname, first name, postal address, email address, telephone number, company and position, and other information about you (hereinafter your “Personal Information”). By providing this information, you expressly agree that it may be processed by the Site Owner for the purposes indicated in point 2 below and for any purposes that may be mentioned at the end of each form.

In accordance with the General Data Protection Regulation adopted by the European Parliament on April 14, 2016, and the amended French Data Protection Act of January 6, 1978, SOS GRPD informs you of the following:

1. Identity of the data controller

The data controller is the Owner of the Website, whose contact details are provided on the Website.

2. Purposes of processing

The Website Owner may process your Personal Information:

(a) for the purpose of providing you with the information or services you have requested (in particular: sending the Newsletter, commercial offers, white papers, or assessing your level of compliance via a quiz); and/or

(b) for the purpose of collecting information that enables us to improve the Site, products, and services (in particular through cookies); and/or

(c) for the purpose of contacting you about various events related to the commercial relationship, including product updates and customer support.

3. Recipients

Only the Site Owner is the recipient of your Personal Information. This information, whether in individual or aggregate form, is never transmitted to a third party, notwithstanding the subcontractors used by the Site Owner (you will find more information about them in point 7 below). Neither the Site Owner nor any of its subcontractors will sell the personal data of visitors and Users of its Site.

4. Retention period

Your Personal Information is retained by the Site Owner only for the time corresponding to the purpose of collection as indicated in 2 above, which in any event shall not exceed 24 months.

5. Data Protection Rights

You have the following rights regarding your Personal Information, which you can exercise by writing to us at the postal address listed on the Site or by filling out the contact form on the Site.

Right of access and communication of data
You have the right to access your Personal Information.

However, due to the obligation of security and confidentiality in the processing of personal data incumbent upon the Site Owner, you are informed that your request will be processed provided that you provide proof of your identity, in particular by producing a scan of your valid identity document (in the case of a request via our form or a signed photocopy of your valid identity document (in the case of a request made in writing).

The Site Owner informs you that it will be entitled, where applicable, to oppose requests that are manifestly abusive (due to their number, repetitive or systematic nature).

To assist you in this process, particularly if you wish to exercise your right of access by means of a written request to the postal address mentioned in point 1, you will find a model letter drawn up by the Commission Nationale de l’Informatique et des Libertés (the “CNIL”) by clicking on the following link.

www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces

Right to rectify data
Under this right, the law entitles you to request the rectification, updating, blocking, or deletion of data concerning you that may be inaccurate, erroneous, incomplete, or obsolete.

You may also define general and specific guidelines regarding the fate of your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their loved one be taken into account and/or that the necessary updates be made.

To help you with this process, particularly if you wish to exercise your right of rectification on your own behalf or on behalf of a deceased relative by sending a written request to the postal address mentioned in point 1, you will find a letter template developed by the CNIL by clicking on the following link.

www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-inexactes-obsoletes-ou-perimees

Right to object
This right may only be exercised in one of the following two situations:

When the exercise of this right is based on legitimate grounds; or
When the exercise of this right is intended to prevent the data collected from being used for commercial prospecting purposes.
To assist you in this process, particularly if you wish to exercise your right to object by sending a written request to the postal address indicated in point 1, you will find a letter template developed by the CNIL by clicking on the following link.

www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

6. Response times

The Website Owner undertakes to respond to your request for access, rectification, or opposition, or any other additional request for information within a reasonable period of time, which shall not exceed one month from receipt of your request.

7. Authorized service providers and transfer to a third country within the European Union

The Owner informs you that it uses authorized service providers to facilitate the collection and processing of the data you have provided to us. These service providers are located within the European Union and have access to the data collected through the various forms on the Site.

The Site Owner has ensured in advance that its service providers implement adequate safeguards and comply with strict conditions regarding confidentiality, use, and data protection.