Privacy Policy

1. Data controller

The data controller responsible for processing your personal data is PRIVATE KREDIT, a SAS with a share capital of 100 000 €, registered with the Trade and Companies Register under number Paris B 123 456 789, SIRET 123 456 789 00012, VAT number FR12 345678901, having its registered office at 18 allée Roberteau, 67000 Strasbourg.

For any questions relating to the protection of your personal data, you may contact us at contact@private-kredit.com or by telephone at +4917610751789. A Data Protection Officer (DPO) can be reached at the same address for any request concerning your rights.

2. Data we collect

We only collect data that is strictly necessary for the purposes described in this policy. Depending on your relationship with PRIVATE KREDIT, we may process the following categories of information:

• Identification data: surname, first name, date of birth, nationality, identity document number.
• Contact details: postal address, email address, telephone number.
• Professional and financial data: employment status, employer, income, bank details, tax notices, balance sheets, cash flow statements.
• Data relating to your loan application: amount requested, purpose of the loan, repayment period, supporting documents provided.
• Connection and browsing data: IP address, browser type, pages viewed, date and time of connection, cookies (see section 9).
• Correspondence data: content of exchanges with our advisors, call recordings where permitted by law and with your consent.

3. Purposes and legal bases for processing

Your personal data is processed for clearly defined purposes, each supported by an appropriate legal basis under the GDPR:

4. Recipients of your data

Access to your data is strictly limited to authorised persons within PRIVATE KREDIT who need it to perform their duties. We may also share your information with the following categories of recipients, under contractual guarantees ensuring an equivalent level of protection:

PRIVATE KREDIT never sells your personal data to third parties for commercial prospecting purposes.

• Partner credit institutions and banking partners involved in financing your project.
• Sub-processors: IT hosting providers, CRM software publishers, electronic signature providers, payment service providers.
• Advisory firms: lawyers, accountants, auditors, where necessary for the management of your file.
• Public authorities: tax administration, Banque de France (FICP filing where applicable), TRACFIN, courts, pursuant to legal obligations.
• Credit reference agencies and fraud prevention bodies, within the limits authorised by law.

5. Data retention periods

We retain your data only for the period necessary to achieve the purposes for which it was collected, in accordance with legal and regulatory requirements applicable to credit activities:

• Loan application data not resulting in a contract: up to 12 months from the date of the decision or last contact.
• Contractual data: for the entire duration of the contractual relationship, then archived for 5 years from the end of the relationship.
• Accounting and tax data: 10 years in accordance with accounting obligations.
• Data relating to the fight against money laundering: 5 years from the end of the business relationship.
• Browsing data and cookies: maximum 13 months for audience measurement cookies, in accordance with CNIL recommendations.

6. Security measures

PRIVATE KREDIT implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration, unauthorised disclosure or access. These measures include SSL/TLS encryption of data in transit, restricted access based on user profiles, regular backups, anti-virus and firewall systems, and staff training in confidentiality.

Despite these precautions, no method of transmission over the Internet or electronic storage is completely secure. We therefore invite you to take care with the credentials for your personal space and to report any suspicious activity to us without delay at contact@private-kredit.com.

7. Your rights

To exercise your rights, send your request to contact@private-kredit.com, accompanied by proof of identity. We undertake to respond within one month of receipt. If you believe that your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr) or the supervisory authority in your country of residence.

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of your data, subject to legal retention obligations.
• Right to restriction: request restriction of processing in certain cases provided for by law.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to processing based on legitimate interest, including profiling.
• Right to withdraw consent: where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.
• Right to define post-mortem directives concerning the fate of your data after your death (French law).

8. International transfers

Your data is primarily hosted within the European Union. Should a transfer outside the EU be necessary, PRIVATE KREDIT ensures that appropriate safeguards are in place: European Commission adequacy decision, standard contractual clauses, or other mechanisms provided for by the GDPR. You may request information on these safeguards by writing to us at contact@private-kredit.com.

9. Cookies and trackers

You can change your preferences at any time via your browser settings or our cookie management module. Disabling certain cookies may limit access to some site features.

• Essential cookies: necessary for the operation of the site (session, security, language preference).
• Audience measurement cookies: anonymous statistics on site usage (e.g. pages viewed, visit duration).
• Functional cookies: remember your preferences (forms, display settings).
• Marketing cookies: only activated with your prior consent.

10. Minors

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data concerning minors. If we become aware that data relating to a minor has been collected without parental consent, we will delete it as soon as possible.

11. Changes to this policy

PRIVATE KREDIT reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, services or applicable legislation. The updated version will be published on this page with a revised date. We encourage you to consult it regularly. In the event of substantial changes affecting your rights, we will inform you by email or via a prominent notice on the site.

12. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

PRIVATE KREDIT — 18 allée Roberteau, 67000 Strasbourg — Email: contact@private-kredit.com — Phone: +4917610751789.