Privacy Policy

1. Flucredit's Institutional Commitment

Protection of your personal and financial data is at the heart of Flucredit's priorities, as a regulated credit institution and online bank. This Privacy Policy describes with full transparency how we collect, use, protect and manage your personal and banking data, in accordance with the General Data Protection Regulation (GDPR) and banking secrecy obligations.

2. Nature of Banking and Personal Data Collected

As part of opening a current account, managing your deposits, fund transfers and requests for online financing solutions, we collect the following categories of data:
• Identification and KYC Data: Surname, first name, date and place of birth, nationality, and official supporting identity documents.
• Contact Data: Email address, telephone number, residential postal address.
• Financial and Professional Data: Source of your funds, monthly income, expenses, tax notices and bank statements (data that is essential and strictly secured for assessing your creditworthiness as part of a loan).
• Bank Transaction Data: History of your transfers, current account balances and card payment operations.
• Access and Authentication Data: Secure login logs, IP address, encrypted strong authentication credentials (PSD2).

3. Purposes and Legal Bases for Processing

Your information is only processed for explicitly defined and legitimate purposes, namely:
• Performance of the banking relationship: Management of deposit accounts, issuance and receipt of bank transfers, administration of your payment cards.
• Granting and monitoring of credit: Objective assessment of your borrower profile, creditworthiness check and contractual management of online financing.
• Legal and regulatory obligations: Prevention of money laundering and terrorist financing (AML/CFT), fraud detection and mandatory regulatory reporting to central banks.
• Customer relationship and support: Technical assistance for your personal portal, handling your requests via contact@flucredit.com.

4. Banking Secrecy and Recipients of Information

In accordance with Article L. 511-33 of the French Monetary and Financial Code, all data collected is covered by the strictest banking and professional secrecy. Your data is only accessible to duly authorised internal Flucredit departments (dedicated customer advisers, risk analysts and compliance). Your personal and banking information is never sold, transferred or rented for marketing purposes or to third-party commercial companies.

5. Enhanced Security and Data Encryption (AES-256)

To best protect your financial and digital assets, Flucredit deploys state-of-the-art technological security measures:
• End-to-end encryption of all data flows via highly secure SSL/TLS protocols.
• Encrypted storage of your sensitive information using the military-grade AES-256 encryption algorithm.
• Hosting of our main servers in ultra-secure data centres of Google Cloud Platform located within the European Union (Ireland).
• Strong authentication protocols for each sensitive transaction to prevent identity theft.

6. Legal Data Retention Periods

Flucredit retains your personal and transactional information only for the duration necessary for the operations for which it was collected, plus applicable statutory limitation periods:
• Account and payment data: Retained for the duration of the contractual relationship, then archived for 5 years from closure of the deposit account.
• Credit-related data: Retained for 5 years after full repayment of the final loan instalment.
• Anti-money laundering (AML/CFT) data: Mandatory retention for 5 years after the end of the business relationship.
• Prospect data: Retained for a maximum of 3 years after the last active contact.

7. Your Rights Under GDPR

In accordance with European data protection laws (GDPR), you have full control over your personal data:
• Right of access and rectification: View your stored data and correct any inaccurate or obsolete information.
• Right to erasure and to be forgotten: Request definitive deletion of your information (except for retention required by legal banking obligations for account keeping).
• Right to object and restriction: Object to processing of certain data or limit its use.
• Right to data portability: Receive your personal data in a structured, commonly used format to transmit it to another banking institution.

8. Contact with the Data Protection Officer (DPO)

For any questions regarding this Privacy Policy or to exercise any of your GDPR rights described above, you may contact our Data Protection Officer (DPO) directly:
• By email: contact@flucredit.com
• By post: Flucredit - Data Protection Officer, 45 Promenade des Anglais, 06000 Nice, France.
If you consider, after contacting us, that your rights are not fully respected, you are legally entitled to lodge a complaint with the French Data Protection Authority (CNIL).