The purpose of this “personal data protection policy” is to inform you about the processing that we, CARVEST, as Data Controller, carry out on the personal data that we collect from you in compliance with the General Data Protection Regulation.
The main purpose of such processing is to administer our private equity business on behalf of investing entities.
The personal data that we collect from you in the context of our relationship are necessary for several reasons, in particular:
* to review potential investee companies for inclusion in our private equity portfolio
* to carry out contractual relations with the company of which you are a director
* to meet our legal obligations,
* to pursue our legitimate interests, in accordance with your rights.
We will use your personal data mainly for the following purposes: the management of our relationship relating to private equity and the respect of legal and regulatory obligations, in particular with regard to the fight against money laundering or against the financing of terrorism.
How long we keep your personal data
We store and process your personal data for the period necessary to achieve the purpose for which it is collected.
The retention period corresponds to the duration of the business relationship plus the periods necessary for the settlement and consolidation of claims and the legal retention and prescription periods in order to meet our legal obligations, to respond to requests from regulators and administrative authorities and finally to meet our legitimate interest in monitoring our activity. You will find below the main retention periods applied.
Data relating to files examined but which did not result in an investment managed by CARVEST
Data on files examined that did not result in a private equity transaction managed by CARVEST are kept for a maximum of 7 years for the purposes of follow-up and possible subsequent reactivation of the file. The individual whose data was collected during the study of the file may, however, at any time request the deletion of his/her personal data, provided that this request does not contravene the legal and regulatory obligations imposed on CARVEST.
Data relating to the private equity files managed by CARVEST
This data is kept for a maximum period of 10 years after the termination of the business relationship. The natural person whose data was collected during the business
business relationship may request the early deletion of his or her personal data, provided that this request does not contravene the legal and regulatory obligations legal and regulatory obligations.
Recipient of the data
In addition to the authorities authorized by regulatory provisions to access all or part of the information concerning you, the data – personal or otherwise – concerning the management of the private equity file will be shared with the investor capital on whose behalf CARVEST manages the participation file.
Your personal data will not be transferred or hosted outside the European Union.
Data Security
All your personal data is protected by appropriate technical and organizational security measures. CARVEST has security measures in place to protect your personal data from unauthorized access and use. We limit access to your personal data to those who actually need to access it for business purposes. Those who have access to your data are subject to a duty of confidentiality.
Requests to exercise rights
CARVEST has appointed a Data Protection Officer, whom you may contact at the following addresses: dpo@ca-centrest.fr, or by post at DPO-
Data Protection Officer – Crédit Agricole Centre-est – 1, rue Pierre de Truchis de Lays – 69410 CHAMPAGNE AU MONT D’OR.
You may at any time, under the conditions provided for by law, contact this DPO to access your personal data, oppose their processing on legitimate grounds, have them rectified, request their deletion, limit their processing, portability, or communicate instructions on their fate in the event of death.
In the event of a dispute, you may file a complaint with the CNIL, whose website is accessible at http://www.cnil.fr and whose headquarters are located at 3 Place de Fontenoy, 75007 Paris.