COMPLIANCE
GDPR

Our commitments regarding personal data protection and GDPR compliance.

The General Data Protection Regulation (GDPR) is the European legal framework that protects the fundamental rights of individuals regarding the use of their personal data. Financea-Crédit is committed to fully respecting these obligations and ensuring maximum protection of your data.

Fundamental principles

Lawfulness, fairness and transparency

We act in compliance with the laws with transparency towards you

Purpose limitation

Your data is used only for the stated objectives

Data minimization

We collect only the necessary data

Accuracy

Your data must be accurate and kept up to date

Storage limitation

Data is kept only for the time necessary

Integrity and confidentiality

Your data is secured and protected

Legal bases for processing

Explicit consent

You voluntarily consent to the use of your data for the requested services

Contract

The processing of your data is necessary for the execution of a credit contract

Legal obligation

Compliance with anti-fraud laws, AML/KYC and banking obligations

Legitimate interests

Improving our services and fraud prevention

Your GDPR rights

Right of access (Article 15)

You may request access to all of your personal data stored by Financea-Crédit. We provide a full copy within 30 days.

Right to rectification (Article 16)

You may correct or update your inaccurate or incomplete data at any time.

Right to erasure (Article 17)

You may request the complete deletion of your data, unless legal obligations require us to retain it.

Right to data portability (Article 20)

You may receive your data in a structured, commonly used, and machine-readable format (e.g., CSV file) to transfer it elsewhere.

Right to object (Article 21)

You may refuse the processing of your data for direct marketing or other non-essential purposes.

Right to restriction of processing (Article 18)

You may request that we limit the processing of your data while we verify its accuracy.

Security measures

Data encryption

All exchanges are in 256-bit HTTPS/TLS. Sensitive data is encrypted at rest.

Secure infrastructure

Servers in the European Union, ISO 27001 certified, with regular backups.

Access control

Only our authorized employees have access to your data. Multi-factor authentication is in place.

Security audits

Regular external audits to verify compliance and the absence of vulnerabilities.

Staff training

All our employees receive regular training on data protection.

Responsibility and governance

Data Controller:Financea-Crédit is responsible for the protection of your data and compliance with the GDPR.

Data Protection Officer:An internal DPO oversees the application of the GDPR and can be contacted for any questions.

Documentation:Financea-Crédit maintains a complete record of processing activities in accordance with Article 30 of the GDPR.

Impact assessment:Impact analyses are carried out before any new high-risk processing.

Data breach notification

In the event of a personal data breach, Financea-Crédit commits to:

  • Notify you without undue delay (maximum 72 hours)
  • Inform the competent authorities (CNIL)
  • Provide clear explanations regarding the breach and the measures taken
  • Offer support and advice to mitigate risks

Exercising your GDPR rights

To exercise your rights (access, rectification, erasure, portability, objection), please send us a written request:

Email:contact@credit-financea.com

Address:206 Rue Jean Jaurès, 83600 Fréjus, France

Your request will be processed within 30 days. You may also lodge a complaint with the CNIL: www.cnil.fr

Last updated:May 7, 2026. This policy may be modified in accordance with regulatory changes.

Your cookie preferences

We use cookies to measure our site's audience and improve our services. You can accept or decline audience measurement cookies at any time. For more information, please see our privacy policy and our GDPR notices.