Personal Data Protection Policy
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, applicable since May 25, 2018 (“the General Data Protection Regulation” or “GDPR”);
- Law No. 78-17 of January 6, 1978, as amended (the “French Data Protection Act”);
- the opinions and recommendations of the supervisory authorities, the Working Party on the Protection of Individuals with regard to the Processing of Personal Data (the “Article 29 WP”), and the European Data Protection Board.
Personal data is also protected under the professional secrecy regulations to which we are subject.
Depending on the pages from which you transmit it to us, we will process your personal data for the following purposes:
- Responding to messages and queries you send to us via the “Contact Us” form;
- Processing applications that you send us via the areas reserved for this purpose;
- Sending you information about Crédit Mutuel when you have signed up for our newsletter.
- This processing is done based on your consent.
Data about you that is collected when you submit your application will be stored for the time needed to process the application and then for a period of two years, unless you notify us of your objection or you have agreed to your data being stored for a longer period.
Lastly, data about you that is collected when you sign up for our newsletter will be stored until you withdraw your consent to receive the newsletter.
Your personal data may be transferred to a country located outside the European Union in limited cases and for strictly defined purposes. We will ensure that the data is protected:
By the existence of an adequacy decision by the European Commission acknowledging that the third country in question ensures an adequate level of protection;
If no such adequacy decision by the European Commission exists, we ensure that appropriate safeguards are provided, such as standard contractual clauses approved by the European Commission or binding corporate rules.
Pursuant to Law No. 78-17 of January 6, 1978 on data processing, data files and individual liberties, as amended, and the General Data Protection Regulation (EU) 2016/679, each person has a right of access, rectification, objection, erasure, portability and restriction of processing.
You have the right to withdraw your consent at any time when the processing of your data is based on your consent. You also have the right to establish specific guidelines for the processing of your data after your death, as well as the right to file a complaint with a supervisory authority.
You may exercise any of the rights set out above by writing to the data protection officer at the address below: LE DÉLÉGUÉ À LA PROTECTION DES DONNÉES, 63 chemin Antoine Pardon, 69814 TASSIN CEDEX.
In addition, if you wish to update the information you have provided to us, you may do so at any time by sending us an email. To do so, click here.