GIA Patrimoine

Privacy policy

Data controller

The controller responsible for the personal data collected via this website is GIA, a wealth management firm, registered with the Trade and Companies Register (RCS) of Créteil under number 923 432 710, whose registered office is located at 3 rue du Maroc, 94500 Champigny-sur-Marne, represented by Joël AFONSO, managing director.

Data collected and purposes

GIA collects personal data for two main purposes: managing the contact form available on the website (identifying and getting in touch with a prospective client, or "lead") and managing the client area (authentication and secure access to the services offered to GIA's clients).

Legal bases for processing

The processing of data linked to the client area is based on the performance of a contract, within the framework of the relationship between GIA and its clients. The processing of data submitted via the contact form is based on GIA's legitimate interest in responding to enquiries addressed to it and in following up commercially with its prospects.

Data recipients and processors

The personal data collected is intended for GIA and, where applicable, the following processors, involved in operating the website and the associated services:

  • Supabase — hosting and management of the database.
  • Resend — sending transactional and notification emails (contact form, communications relating to the client area).
  • Behold — displaying the Instagram feed on the website, loaded only after the user's consent has been obtained (see the Cookies page).

Retention periods

Data relating to prospects (leads) collected via the contact form is kept for a period of 3 years from the last contact, unless a right of objection or erasure is exercised. Client data is kept for the entire duration of the contractual relationship, and thereafter for the period required by the legal and regulatory obligations applicable to Financial Investment Adviser (CIF) status, in particular with regard to record-keeping and anti-money laundering requirements.

Your rights

In accordance with the General Data Protection Regulation (GDPR) and French data protection law (loi Informatique et Libertés), you have the right to access, rectify, erase, object to and restrict the processing of your personal data, as well as a right to data portability. You may exercise these rights by writing to joel.afonso@gia-patrimoine.com.

Lodging a complaint with the CNIL

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, the French data protection authority), whose website can be accessed at cnil.fr.

Security

GIA implements reasonable technical and organisational measures to ensure the security and confidentiality of the personal data processed, in particular by using processors that offer appropriate safeguards for data protection.

Document drawn up on 23 July 2026 — to be reviewed by legal counsel.