Table of Contents
1. Data Controller
The data controller for your personal data is:
- Company: CréditPro Financial Services SAS
- Head Office: 12 Rue de la Finance, 75001 Paris, France
- SIREN: 123 456 789
- Email: dpo@euro-creditpro.com
- Phone: +32 460 24 68 55
- Supervisory Authority: CNIL – www.cnil.fr
2. Data Collected
We collect the following categories of data depending on your interactions with our services:
| Category | Data Concerned | Source |
|---|---|---|
| Identity | Name, first name, date of birth, nationality | Application form |
| Contact | Email address, phone number, postal address | Contact/Application form |
| Financial Situation | Income, expenses, professional situation, financing project | Loan application form |
| Navigation | IP address, pages visited, session duration, browser | Cookies and trackers |
| Communications | Email, chat and phone history | Interactions with our advisors |
We do not collect sensitive data within the meaning of Article 9 of the GDPR (racial origin, political opinions, health data, etc.) without your explicit consent.
3. Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Processing your loan application | Contract performance (Art. 6.1.b GDPR) |
| Evaluating your creditworthiness | Legal obligation (Art. 6.1.c GDPR) |
| Sending business communications | Consent (Art. 6.1.a GDPR) |
| Improving our services | Legitimate interest (Art. 6.1.f GDPR) |
| Fraud prevention and regulatory compliance | Legal obligation (Art. 6.1.c GDPR) |
| Statistics and analytics | Consent or legitimate interest (Art. 6.1.f GDPR) |
4. Retention Period
- Loan application data: 5 years from the end of the contractual relationship
- Contact data: 3 years from last contact
- Navigation data: Maximum 13 months
- Identity documents: Duration of contract + 5 years
- Anti-money laundering data: 5 years after the end of the business relationship
After these periods expire, your data is permanently deleted or anonymized.
5. Data Recipients
Your personal data may be disclosed to the following categories of recipients:
- Our Financial Partners: banks and credit institutions for processing your application
- Technical Providers: hosting, CRM, email tools (bound by GDPR data processing agreements)
- Competent Authorities: ACPR, Banque de France, courts on request
- Credit Bureaus: consultation of FICP/FCC files from Banque de France
We never sell your data to third parties for commercial purposes.
6. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
Obtain a copy of all data we hold about you.
Correct any inaccurate or incomplete data about you.
Request deletion of your data under GDPR conditions.
Receive your data in a structured, machine-readable format.
Object to processing of your data, particularly for marketing purposes.
Request temporary suspension of processing your data.
To exercise these rights, submit your request by email to dpo@euro-creditpro.com or by mail to our head office with a copy of your ID. We respond within a maximum of 30 days.
If you are dissatisfied, you have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr/fr/plaintes.
7. Data Security
CréditPro implements appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction:
- TLS 1.3 encryption of all communications
- Encryption of data at rest (AES-256)
- Two-factor authentication for internal access
- Logging and monitoring of data access
- Regular security audits and penetration testing
- Mandatory data protection training for employees
8. Cookies and Trackers
Our website uses cookies and trackers. For detailed information about their use and managing your preferences, consult our Cookie Policy.
9. Transfers Outside the EU
Some of our technical providers may process your data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, in particular:
- Standard contractual clauses adopted by the European Commission
- Adequacy decisions for countries recognized as offering sufficient protection
10. Contact & Data Protection Officer
Our Data Protection Officer is available to answer any questions about the processing of your personal data:
- Email: dpo@euro-creditpro.com
- Mail: CréditPro Financial Services – DPO, 12 Rue de la Finance, 75001 Paris
This privacy policy may be modified at any time. In case of substantial changes, we will inform you by email or through a prominent notice on our website.