Privacy Policy / Politique de Confidentialité
BCI SAS · 57 rue du Rouet, 13008 Marseille, France · Effective Date / Date d'entrée en vigueur: 2024
Our Commitment to Your Privacy
At BCI SAS, the protection of your personal data is a matter of the highest professional and ethical importance. We handle all information entrusted to us with the same discretion, rigour, and care that defines our approach to wealth management. This Privacy Policy governs the collection, use, and safeguarding of your personal data in full compliance with the General Data Protection Regulation (GDPR) and French data protection law as enforced by the CNIL.
Notre Engagement envers Votre Vie Privée
Chez BCI SAS, la protection de vos données personnelles est une priorité absolue, tant sur le plan professionnel qu'éthique. Nous traitons toutes les informations qui nous sont confiées avec la même discrétion et rigueur qui caractérisent notre approche de la gestion de patrimoine. Cette Politique de Confidentialité régit la collecte, l'utilisation et la protection de vos données personnelles, en conformité avec le RGPD et la loi française.
Data Controller / Responsable du Traitement
BCI SAS
57 rue du Rouet
13008 Marseille, France
13008 Marseille, France
Data Protection Contact
📧 privacy@bci-wealth.fr
For all GDPR-related enquiries and rights requests
For all GDPR-related enquiries and rights requests
Supervisory Authority
Commission Nationale de l'Informatique et des Libertés (CNIL)
www.cnil.fr
www.cnil.fr
BCI SAS, a société par actions simplifiée registered under French law, acts as the sole data controller for all personal information collected through our website, communications, and client onboarding processes. We are fully accountable for determining the purposes and means of processing your personal data.
BCI SAS, société par actions simplifiée enregistrée en France, agit en tant que responsable unique du traitement de toutes les données personnelles collectées via notre site web, nos communications et nos processus d'onboarding clients. Nous sommes pleinement responsables de la détermination des finalités et des moyens de traitement de vos données personnelles.
All data subjects may contact our dedicated privacy team at any time. We respond to all legitimate requests within 30 days / Tous les sujets de données peuvent contacter notre équipe dédiée à tout moment. Nous répondons dans les 30 jours.
Data We Collect / Données Collectées
We collect only the information necessary to deliver our wealth management services, respond to your enquiries, and fulfil our legal obligations. Below is a complete and transparent account of each category of data we may process. / Nous collectons uniquement les informations nécessaires à la prestation de nos services, à la réponse à vos demandes et au respect de nos obligations légales.
📋 Contact Form Data
Full name, email address, telephone number, country of residence, and the content of your message. Collected when you submit an enquiry or request a consultation through our website.
Nom complet, adresse e-mail, numéro de téléphone, pays de résidence et contenu de votre message.
📅 Meeting Booking Data
Name, email, preferred date and time, time zone, and any preparatory notes submitted via our scheduling tool. Used exclusively to organise and confirm your appointments with our advisors.
Nom, e-mail, date et heure préférées, fuseau horaire et notes préparatoires soumises via notre outil de planification.
💬 WhatsApp Communications
Message content, timestamps, and associated phone number when you initiate contact via WhatsApp Business. Communications are treated as confidential correspondence and processed solely for service delivery.
Contenu des messages, horodatages et numéro de téléphone associé lors d'un contact via WhatsApp Business.
🍪 Analytics & Cookies
Browser type, IP address (anonymised), pages visited, session duration, and referral source. Collected via privacy-compliant analytics tools to improve site performance and user experience.
Type de navigateur, adresse IP (anonymisée), pages visitées, durée de session et source de référence.
Legal Basis for Processing / Base Légale du Traitement
1
Contractual Necessity / Nécessité Contractuelle
Processing required to provide the services you have requested or to take pre-contractual steps at your request (Art. 6(1)(b) GDPR).
2
Legitimate Interests / Intérêts Légitimes
Website security, fraud prevention, and improvement of our digital services, where these interests are not overridden by your rights (Art. 6(1)(f) GDPR).
3
Legal Obligation / Obligation Légale
Compliance with French financial regulations, anti-money laundering (AML) requirements, and tax reporting obligations (Art. 6(1)(c) GDPR).
4
Consent / Consentement
For non-essential cookies and analytics tracking, we rely on your freely given, specific, and informed consent, which you may withdraw at any time (Art. 6(1)(a) GDPR).
"Every processing activity at BCI SAS is grounded in a clear and documented legal basis. We do not process personal data speculatively or beyond the scope of what is strictly necessary."« Chaque activité de traitement chez BCI SAS repose sur une base juridique claire et documentée. Nous ne traitons pas les données personnelles de manière spéculative ou au-delà de ce qui est strictement nécessaire. »
BCI SAS does not sell, rent, or otherwise commercialise your personal data to any third party. / BCI SAS ne vend, ne loue ni ne commercialise vos données personnelles à des tiers.
Retention Periods / Durées de Conservation
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following schedule reflects our data minimisation commitments. / Nous conservons vos données personnelles uniquement le temps nécessaire aux finalités pour lesquelles elles ont été collectées, ou conformément aux obligations légales applicables.
Your Rights / Vos Droits
Under the GDPR and French data protection law, you hold a comprehensive set of rights regarding your personal data. BCI SAS is committed to honouring these rights promptly and without undue complexity. / En vertu du RGPD et de la loi française sur la protection des données, vous disposez d'un ensemble complet de droits concernant vos données personnelles.
Right of Access / Droit d'Accès
Request a complete copy of all personal data we hold about you, including the purposes of processing and any third parties with whom it has been shared. (Art. 15 GDPR)
Right to Rectification / Droit de Rectification
Request correction of any inaccurate or incomplete personal data held about you. We will action verified corrections without delay. (Art. 16 GDPR)
Right to Erasure / Droit à l'Effacement
Request deletion of your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent. Subject to legal retention obligations. (Art. 17 GDPR)
Right to Portability / Droit à la Portabilité
Receive your personal data in a structured, commonly used, and machine-readable format, and transfer it to another controller where technically feasible. (Art. 20 GDPR)
Right to Object / Droit d'Opposition
Object at any time to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds. (Art. 21 GDPR)
Right to Restriction / Droit à la Limitation
Request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or an objection is being considered. (Art. 18 GDPR)
To exercise any of these rights, please contact us at privacy@bci-wealth.fr. We will respond within 30 days and will not charge a fee for reasonable requests. You also have the right to lodge a complaint with the CNIL at www.cnil.fr. / Pour exercer l'un de ces droits, contactez-nous à privacy@bci-wealth.fr. Nous répondrons dans un délai de 30 jours sans frais pour les demandes raisonnables.
Security & Third-Party Processors / Sécurité & Sous-traitants
Our Security Measures / Mesures de Sécurité
BCI SAS employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:
- End-to-end encryption for all digital communications and stored data
- Access controls and role-based permissions for all staff
- Regular security audits and penetration testing
- Secure hosting on EU-based, ISO 27001-certified infrastructure
- Staff training on data protection and confidentiality obligations
- Incident response protocols compliant with GDPR breach notification requirements
Third-Party Processors / Sous-traitants Tiers
We engage a limited number of carefully vetted third-party service providers who process personal data on our behalf, each bound by strict data processing agreements (DPAs) under Art. 28 GDPR:
Scheduling Software
Calendar and meeting booking platform — EU-hosted, GDPR-compliant.
Analytics Provider
Privacy-first web analytics (e.g. Matomo or equivalent) — data not shared with advertising networks.
WhatsApp Business API
Meta Platforms Ireland Ltd. — governed by EU Standard Contractual Clauses (SCCs). Data may transit outside the EEA under appropriate safeguards.
Email & Hosting
EU-based hosting and email infrastructure providers, bound by GDPR-compliant agreements.
International Transfers / Transferts Internationaux
BCI SAS endeavours to process and store all personal data within the European Economic Area (EEA). In limited circumstances — notably in connection with WhatsApp Business communications facilitated by Meta Platforms Ireland — data may be transferred to countries outside the EEA, including the United States.
BCI SAS s'efforce de traiter et de stocker toutes les données personnelles au sein de l'Espace Économique Européen (EEE). Dans des circonstances limitées — notamment dans le cadre des communications WhatsApp Business — des données peuvent être transférées vers des pays tiers, y compris les États-Unis.
All such transfers are subject to appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Transfer Impact Assessments (TIAs) where required
You may request details of the specific safeguards in place for any international transfer by contacting privacy@bci-wealth.fr. / Vous pouvez demander les détails des garanties mises en place pour tout transfert international en contactant privacy@bci-wealth.fr.
Governing Law & Updates / Droit Applicable & Mises à Jour
Governing Law / Droit Applicable
This Privacy Policy is governed by and construed in accordance with the laws of France, including the EU General Data Protection Regulation (Regulation (EU) 2016/679) as implemented into French law by the Loi Informatique et Libertés (Law No. 78-17 of 6 January 1978, as amended). Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent French courts.
Cette Politique de Confidentialité est régie par le droit français, incluant le RGPD tel qu'implémenté par la Loi Informatique et Libertés. Tout litige sera soumis à la juridiction exclusive des tribunaux français compétents.
Supervisory Authority: CNIL — Commission Nationale de l'Informatique et des Libertés · 3 Place de Fontenoy, 75007 Paris · www.cnil.fr
Policy Updates / Mises à Jour de la Politique
BCI SAS reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or the services we offer. In the event of material changes, we will notify affected individuals by email or through a prominent notice on our website prior to the changes taking effect.
BCI SAS se réserve le droit de mettre à jour cette Politique de Confidentialité à tout moment. En cas de modifications substantielles, nous notifierons les personnes concernées par e-mail ou via un avis prominent sur notre site web avant l'entrée en vigueur des modifications.
How to Exercise Your Rights / Comment Exercer Vos Droits
Submit a written request to privacy@bci-wealth.fr, including your full name and a clear description of the right you wish to exercise. We may request proof of identity to protect your data. / Envoyez une demande écrite à privacy@bci-wealth.fr, incluant votre nom complet et une description claire du droit que vous souhaitez exercer. Nous pouvons demander une preuve d'identité.
📬 Privacy Contact
privacy@bci-wealth.fr
Response within 30 days / Réponse sous 30 jours
Response within 30 days / Réponse sous 30 jours
📍 Registered Address
BCI SAS
57 rue du Rouet
13008 Marseille, France
57 rue du Rouet
13008 Marseille, France
⚖️ Regulatory Authority
CNIL — www.cnil.fr
3 Place de Fontenoy, 75007 Paris
3 Place de Fontenoy, 75007 Paris
📅 Last Updated
This policy was last reviewed and updated in 2024.
Dernière mise à jour en 2024.
Dernière mise à jour en 2024.