Privacy Policy

​​

Personal Data Protection Policy

Carat GP, as the data controller under Law No. 78-17 of January 6, 1978, is aware of the importance of protecting your personal data. Carat GP processes personal data in accordance with applicable legal provisions, particularly the General Data Protection Regulation (GDPR) .

​

1. What is Personal Data?
   Personal data refers to any information that can directly or indirectly identify you. This includes information such as your name, contact details, date of birth, and account or contract numbers.

2. How does Carat GP collect your personal data and for what purposes?
   Carat GP ensures that it only collects the personal data necessary for specific, legitimate, and explicit purposes. Additionally, Carat GP commits to sharing your personal data only with third parties essential for processing and never selling your data.
   Carat GP collects personal data through various documents during our contractual or commercial relationship. These documents outline the collection's purpose, legal basis, recipients, retention period, potential transfers outside the European Union, and your rights and how to exercise them.
   Through its website, Carat GP may collect information via contact forms and when you access your client space. If certain information is marked as "(mandatory)" in the contact form, it is necessary for Carat GP to respond to your inquiries.
   Personal data is collected for the following purposes: managing the business relationship (with the legal basis being the execution of a contract or pre-contractual measures taken at your request) and managing the client relationship (with the legal basis being the execution of a contract or pre-contractual measures taken at your request).

3. Who are the recipients of the personal data collected by Carat GP?
   Your personal data is intended for the authorized services of Carat GP to process your inquiries and requests regarding our products and services and to contact you for this purpose. When you subscribe to life insurance, a securities account, or financial instruments, your personal data is collected and processed with the insurer associated with your contract, the account holder, or management companies for the opening and processing related to your product or service. Additionally, your personal data may be transmitted to the National Chamber of Wealth Management Advisors or supervisory authorities for compliance with legal or regulatory obligations.
   Our suppliers contractually commit to maintaining the confidentiality of the personal data we provide to them. Your data may also be transmitted to service providers, such as those responsible for website hosting or those providing software to process your wealth assessment requests.

4. How long are your personal data collected on Carat GP's website retained?
   Personal data collected regarding you and your close ones, as a client of Carat GP, will be kept throughout our contractual relationship and archived for a period of five (5) years as required by applicable regulations.

5. What are your rights, and how can you exercise them?
   In accordance with Law No. 78-17 of January 6, 1978, as amended, and the General Data Protection Regulation, you have the following rights regarding your information:

• Right of access: You can access the personal data Carat GP holds about you.

• Right of deletion: In certain cases, you have the right to request the deletion or removal of your personal data.

• Right of rectification: You can request that your personal data be corrected if it is inaccurate or outdated. You can also ask for it to be completed if necessary.

• Right of opposition: You can unsubscribe or object to receiving our commercial prospecting messages.

• Right to restriction of processing: In certain cases, you may request the limitation of the use of your personal data.

• Right to portability: You can request the transfer of your personal data to a third party.
  We remind you that under Article 40-1 of Law No. 78-17 of January 6, 1978, as amended, you can provide general instructions regarding the retention, deletion, and communication of your personal data after your death.
  You can exercise these rights at any time: by postal mail, accompanied by a photocopy of an ID, addressed to: Carat GP, 23 Mail Haroun Tazieff, 44300, Nantes, to the attention of your advisor; using our contact form on the website http://www.carat-gp.fr; or by sending an email to office@carat-gp.fr. You may also file a complaint with the CNIL.

1. Security of Personal Data
   Carat GP implements a series of operational measures to ensure compliance with the principles above and to protect your personal data. These include:

• Confidentiality agreements with our employees,

• An information technology and security policy for information systems through our IT providers,

• Physical and organizational protective measures to limit the risk of inappropriate access to personal data.
  Regarding your access to your client space on our website, we require you to enter your username and password. We recommend:

• Keeping your password confidential and not sharing it with third parties,

• Logging out of your personal space after each session.
  Please note that we will never contact you to ask for your password. If a third party asks for your password, ignore their request and contact us immediately.

1. Contact
   If you would like more details about the information above, you can contact us:

• By postal mail, accompanied by a photocopy of an ID, addressed to: Carat GP, 23 Mail Haroun Tazieff, 44300, Nantes, to the attention of your advisor,

• Using our contact form on the website http://www.carat-gp.fr,

• - By sending an email to office@carat-gp.fr.

Legal Mentions
In accordance with Article 6-III-1 of Law No. 2004-575 of June 21, 2004, for confidence in the digital economy, you will find below all the legal information related to this website and the management of its data.

Legal Mentions
Carat GP (head office) – SARL with a capital of €40,777 – RCS Nantes 842620 247 – Registered with ORIAS under No. 18008033 as: Financial Investment Advisor (CIF) affiliated with the National Association of Independent Wealth Management Advisors, approved by the Financial Markets Authority (AMF) F000573 – Insurance Brokerage (COA) – Intermediary in Banking Operations and Payment Services (IOBSP) – Holder of a Professional Transaction Card for real estate and business assets.
Holder of Professional Civil Liability Insurance and Financial Guarantee of €600,000 without handling of funds.

Notice of Personal Data Information
At Carat GP, we take the confidentiality and security of personal information received from our clients and prospects very seriously. In the course of our professional relationships, we collect, process, and hold information about them. The personal data provided to us in the context of our Wealth Management Advisory services and the services we offer are collected and processed by Carat GP as the data controller under the provisions of the General Data Protection Regulation ("GDPR"). These personal data are collected based on various legal grounds (consent, contractual necessity, legal obligation, and/or legitimate interest of the Data Controller).
Their processing aims to ensure that we have the necessary and useful information about the client and their close ones to provide our financial investment advisory services within the framework of our contractual and commercial relationships.
The collected information may be shared with our partners, including IT, financial, and insurance companies.
The data is retained throughout the duration of our contractual relationship and archived for five (5) years, unless otherwise specified for a shorter or longer period, notably in case of litigation.
You have the right to access, correct, limit, oppose, and transfer your data in accordance with the law. If you wish to exercise these rights, you can contact us at the following address: Carat GP, 23 Mail Haroun Tazieff, 44300, Nantes. You also have the right to file a complaint with the CNIL.