Data controller

The data controller is Contrôle interne des sociétés par actions, trading as CISA Finance, with its registered office at 25 rue de Ponthieu, 75008 Paris, France. For any request relating to personal data: lecomte@cisa-finance.com.

Data and purposes

The website currently has no data collection form, user account or audience measurement tool integrated by CISA. If you click a contact link, your email application opens and you send the information in your email directly to CISA. This information is used to respond to your enquiry and, where relevant, to take steps towards a professional relationship or contract.

Legal basis

Depending on the context, processing of incoming messages is based on steps requested before entering into a contract or CISA’s legitimate interest in responding to and following up on professional correspondence.

Recipients and retention period

Messages are accessible to authorised personnel at CISA and to technical service providers needed to operate the email service, within the scope of their duties. Where information is used for prospecting, enquiries that do not lead to a business relationship are retained for no more than three years from the prospect’s last contact. Correspondence relating to a contractual relationship is retained in accordance with applicable legal requirements and limitation periods. These periods should be confirmed and aligned with CISA’s actual practices.

Your rights

Subject to applicable law, you may request access to, correction or erasure of your personal data, restriction of processing, or object to certain processing. You may exercise your rights by writing to lecomte@cisa-finance.com. You may also lodge a complaint with the French data protection authority (CNIL).

Cookies and trackers

The current version of the website does not include any audience analytics, advertising or tracking tools configured by CISA. The hosting platform may nevertheless use technical elements required for security and service operation; their characteristics should be checked with the provider before public release.

Updates

This policy may be updated if the website or processing activities change. This version should be reviewed against the company’s actual practices and service providers.