ARTICLE 1. PURPOSE

The purpose of this data usage policy is to clearly and transparently describe how KREDITS GROUP, as the data controller, processes personal data.

It applies to all processing of personal data carried out by the Company KREDITS GROUP from its websites, mobile applications, during events or trade fairs and for any direct marketing actions or marketing studies.

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the 'data subject'); an 'identifiable natural person' is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

KREDITS GROUP is committed to ensuring that this policy, as well as the way in which user data is processed in practice, complies with the amended Data Protection Act and the General Data Protection Regulation (or GDPR). KREDITS GROUP acts as the data controller within the meaning of the regulations.

ARTICLE 2. DATA COLLECTED

Each data collection form on KREDITS GROUP's websites limits data collection to what is strictly necessary for the services offered. This data is collected within the framework indicated below (Article 3).

Additional data may, however, be collected by KREDITS GROUP if the user chooses to fill in the free fields provided on the website.

Certain data must be provided in order for the user to access the services offered by KREDITS GROUP on its websites.

ARTICLE 3. METHODS OF COLLECTION

We only use your personal data in the cases provided for by current regulations:

• The performance of a contract we have entered into with you.
• Compliance with a legal obligation.
• Your consent to the use of your data.
• The existence of a legitimate interest in using your data. Legitimate interest is a set of commercial or business reasons that justify the use of your data by the publishing company of KREDITS GROUP.

These purposes are based on KREDITS GROUP's legitimate interest in having data concerning its users and contacts.

RECIPIENTS OF THE COLLECTION

The data is intended for the company's departments to respond to your request (marketing, customers, etc.) or retained as part of the contractual relationship.

RETENTION PERIOD

Data is retained and used for a period in accordance with applicable legislation.

ARTICLE 4. USE OF DATA COLLECTED

KREDITS GROUP may use the personal data in its possession to:

• send commercial information relating to its products, promotions, offers, as well as other information related to its products or services tailored to the interests of the data subjects;
• transmit information about the products and offers of third parties – customers or business partners of KREDITS GROUP – related to the function and/or with regard to an interest identified in relation to the activity of the data subject or that of the organization to which they belong;
• market this information in the form of qualified databases to third parties – clients or business partners of KREDITS GROUP – in connection with the function and/or with regard to an identified interest in relation to the activity of the person concerned or that of the organization to which they belong;

This personal data will be used by KREDITS GROUP as part of its activities relating to the promotion of its own products and services as well as prospecting on behalf of third parties. It is only used within the strict limits defined by the legislation in force.

ARTICLE 5. DATA HOSTING

All data collected and processed by KREDITS GROUP is hosted within the European Union. However, in the event that one of its subcontractors is located outside the European Union, KREDITS GROUP undertakes to take all necessary measures to ensure the security of its customers' and users' data.

Similarly, KREDITS GROUP undertakes to ensure that these service providers maintain their data security and confidentiality requirements throughout the contractual relationship. Otherwise, KREDITS GROUP undertakes to terminate the latter.

ARTICLE 6. USER RIGHTS OVER THEIR DATA

Under the amended Data Protection Act and the GDPR, the user has the following rights over their data:

• The right to request access to the data processed.
• The right to request the rectification or erasure of the data processed.
• The right to limit the processing of their data.
• The right to object to the processing of their data.
• The right to data portability.
• The right to file a complaint with the CNIL.

The user should contact the Data Protection Officer for any questions relating to the processing of their data and the exercise of their rights over it (refer to Article 6 of this document) at the following address kontakt@kreditsgroup.com

The latter undertakes to provide a response within 15 days.

ARTICLE 7. USE OF COOKIES

What is a cookie?

A cookie is a text file placed when you visit a website, application, or online advertisement and stored in a specific area of ​​your computer's or mobile device's hard drive. Cookies are managed by your internet browser, and only the issuer of a cookie can decide whether to read or modify the information it contains.

A cookie has a limited validity period. Its placement and storage on your device are carried out in compliance with applicable legislation and subject to the choices you have expressed, which you can change at any time.

A cookie does not personally identify you. It allows its issuer to recognize your device and collect certain information relating to browsing carried out from this device.

ARTICLE 8. MODIFICATION OF THIS POLICY

We regularly adapt and update this data protection information. In the event of significant changes that may affect the rights of KREDITS GROUP users, we will notify you of these changes in advance. This information is provided in writing.

If you have any further questions about this data protection declaration, or if you wish to exercise your right to access your data and have it rectified or deleted, you can contact us at the following address: kontakt@kreditsgroup.com