Personal data confidentiality and processing security

GDPR Privacy Policy

Because we handle high-stakes receivables and sensitive case files, the protection of your data, the confidentiality of exchanges and respect for business secrecy are at the core of Legatum & Partners’ commitment.

Confidentiality Information transmitted is handled only within the scope required for the request or the entrusted file.

Proportionality Data collection is limited to what is useful, necessary and directly connected to the matter.

Security Processing is organised to preserve the integrity of sensitive commercial and financial information.

1. Data Controller

The data controller is the Firm Legatum & Partners, a SAS registered under number 988 390 951 with the Aix-en-Provence Trade and Companies Register.

Registered office: Bâtiment C2 — Europarc Pichaury, 13290 Aix-en-Provence, France.

Personal data contact: direction@legatumpartners.eu

Applicable framework: Regulation (EU) 2016/679 (GDPR), the French Data Protection Act as amended, and any applicable mandatory rules governing cross-border data processing.

1bis. International data transfers

In the course of its activities, Legatum & Partners may process data involving international stakeholders or service providers.

Where personal data is transferred outside the European Union or the European Economic Area, such transfers are carried out in strict compliance with Chapter V of Regulation (EU) 2016/679 (GDPR).

Depending on the situation, transfers may rely on:

Adequacy decisions adopted by the European Commission, where applicable.
Appropriate safeguards, including Standard Contractual Clauses (SCCs).
Strict limitation of access to data on a need-to-know basis, in line with professional confidentiality requirements.

No data transfer is carried out without a legal framework designed to ensure a level of protection consistent with the requirements applicable within the European Union.

2. Data collected

We collect only the data strictly necessary for the performance of our assignments:

Contact data: surname, first name, professional email address, telephone number, company and role where applicable.
Case data: contracts, invoices, statements of claim, exchanges, supporting evidence and information strictly necessary to review or process the file.
Navigation data: audience measurement and conversion tracking data, subject to your consent.

3. Purposes and legal bases

Data is used to respond to contact requests, review submitted files, prepare or perform a debt recovery assignment, ensure administrative follow-up and comply with legal, accounting and tax obligations.

Depending on the case, processing is based on pre-contractual or contractual measures, the firm’s legitimate interest in handling professional requests, compliance with legal obligations, or your consent for audience measurement cookies.

4. Data retention

Data type	Retention period
Prospect relationship	3 years after the last contact
Debt recovery files	5 years after file closure, subject to longer mandatory retention where applicable
Accounting documents	10 years under French tax and accounting obligations
Cookie data	13 months maximum

5. Non-disclosure commitment

Zero-transfer commitment: your data is never sold, rented or transferred to third parties for commercial exploitation.

6. Cookies & preferences

This website uses audience measurement cookies. You can reset your choices at any time.

→ Reset my privacy preferences

7. Your rights

Access & rectification Review or correct your information.

Erasure Request deletion, subject to applicable legal restrictions.

Objection Object to certain processing operations where permitted by law.

Restriction Request temporary restriction of processing in the cases provided by the GDPR.

You may exercise your rights by email. If necessary, you may lodge a complaint with the CNIL in France or, where applicable, with another competent supervisory authority.