I. Definitions

Personal data: any information relating to an identified or identifiable natural person.

Processing: any operation or set of operations performed on personal data, whether or not by automated means.

Data controller: the legal entity that determines the purposes and means of processing. For this website, this is Groupe Valoria Capital.

Processor: the legal entity that processes data on behalf of the data controller.

Recipient: the natural or legal person to whom personal data is disclosed.

II. Processing of personal data

Groupe Valoria Capital processes your personal data on the basis of one of the following grounds: your consent, performance of a contract, compliance with a legal obligation, or the legitimate interest of the data controller, in particular to ensure site security and improve its operation.

Processing carried out via the website aims to respond to your contact requests, improve our services and measure site traffic in accordance with your cookie preferences.

III. Purposes

The purposes of the processing carried out are as follows:

• Provide and improve the services offered on the website;

• Manage contact requests and the business relationship;

• Carry out anonymised or pseudonymised statistical analyses of traffic;

• Ensure the technical security of the website and prevent fraud.

IV. Categories of personal data collected

Depending on the services used, we may collect the following categories of data:

• Identification data: surname, first name;

• Contact data: email address, telephone number;

• Connection and usage data: IP address, browser type, pages viewed, timestamps (via cookies and technical logs).

V. Data recipients

Your data is intended for authorised internal departments of Groupe Valoria Capital.

Certain data may be transmitted to technical service providers acting as processors (hosting, maintenance, audience measurement tools such as Google Analytics), in strict compliance with the GDPR and under documented instructions from the data controller.

VI. Retention period, right of access and deletion

Data is retained for no longer than is necessary for the purposes for which it was collected.

Contact requests are retained for the duration of the exchange and then archived in accordance with applicable legal obligations.

Connection logs are retained for a maximum period of twelve (12) months.

You have the right of access, rectification, erasure, restriction, objection and portability regarding your data, under the conditions provided by regulation.

VII. Security

Groupe Valoria Capital implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including protection against destruction, loss, alteration or unauthorised access to personal data.

VIII. Cookies

A cookie is a small text file deposited on your device when you visit a website.

We use cookies that are strictly necessary for the operation of the website, audience measurement cookies (Google Analytics) subject to your consent, as well as cookies related to third-party services (Google reCAPTCHA, YouTube video embeds, Google Fonts, Google Maps) when you accept them via our consent management tool.

You may change your preferences at any time via the "Manage cookies" link at the bottom of the page or via your browser settings.

IX. Your rights

In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, data portability and objection.

To exercise your rights, send your request to dpo@valoria.fr stating the subject of your request and attaching a copy of an identity document.

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

X. Contact

For any questions regarding this policy or your personal data:

Groupe Valoria Capital — Data Protection Officer

14 Avenue de la Grande-Armée, 75017 Paris, FRANCE

Email: contact@valoriacapital.fr