1. Data Controller
EuroFiducia SAS is the data controller responsible for your personal data within the meaning of the General Data Protection Regulation (GDPR, Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) for French residents, and the Italian Privacy Code (Codice della Privacy, D.Lgs. 196/2003 as amended) for Italian residents.
2. Personal Data We Collect
Identity Data
- Full name, date of birth, nationality
- Government ID number and document copy
- Tax identification number (fiscal code / numéro fiscal)
Contact Data
- Email address, phone number, postal address
- Preferred language for communications
Financial Data
- Bank account details (IBAN, BIC)
- Payment card details (processed by PCI-DSS compliant providers)
- Transaction history, portfolio holdings, investment profile
Technical Data
- IP address, browser type, device information
- Usage data, page visits, login timestamps
- Cookie data (see our Cookie Policy)
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract — to open and manage your account and execute your investment instructions.
- Legal obligation — to comply with AML/KYC regulations, tax reporting, and regulatory requirements.
- Legitimate interests — to prevent fraud, secure our platform, and improve our services.
- Consent — for marketing communications, cookies, and optional features, which you may withdraw at any time.
4. How We Use Your Data
- Account opening, verification (KYC), and ongoing management
- Processing deposits, withdrawals, and investment transactions
- Generating transaction receipts and statements
- Providing AI-powered customer support in your language
- Notifying administrators of account activity (visits, deposits, withdrawals, support messages) for security and service quality
- Sending administrative messages to your email and dashboard
- Complying with legal, regulatory, and tax obligations
- Preventing fraud, money laundering, and unauthorized access
5. Data Sharing
We do not sell your personal data. We share data only with:
- Regulatory authorities — AMF (France), CONSOB (Italy), and other competent authorities as required by law.
- Payment providers — banks and payment processors to execute your transactions.
- Identity verification providers — for KYC checks.
- Custodians and depositories — to hold your investments securely.
- Professional advisors — legal, audit, and tax advisors under confidentiality obligations.
6. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, and we comply with GDPR requirements for international transfers.
7. Data Retention
We retain your personal data for as long as your account is active and for the period required by law thereafter. AML/KYC records are retained for a minimum of 5 years after the end of the business relationship, in accordance with AMLD5. Transaction records are retained for 7–10 years as required by tax and regulatory authorities.
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — request a copy of your personal data.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data (subject to legal retention requirements).
- Right to restrict processing — limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for marketing.
- Right to withdraw consent — at any time for consent-based processing.
- Right to lodge a complaint — with the CNIL (France) or Garante (Italy).
To exercise any of these rights, contact our Data Protection Officer at
[email protected] or through your dashboard support center.
9. Data Security
We implement bank-grade security measures including TLS encryption for all data in transit, AES-256 encryption for data at rest, segregated client accounts, multi-factor authentication options, and regular security audits. Access to personal data is restricted to authorized personnel on a need-to-know basis.
10. Cookies
We use cookies to operate the Platform, remember your language preference, and analyze usage. See our Cookie Policy for full details and how to manage cookies.
11. Children's Privacy
The Platform is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately.
12. Contact & Data Protection Officer
For any privacy-related questions or to exercise your rights, contact:
Data Protection Officer — [email protected]
EuroFiducia SAS, Paris, France
You may also lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, France) or the Garante per la protezione dei dati personali (Italy).
EuroFiducia SAS · GDPR Compliant · CNIL Registered · Garante Notified