1. Objective and Scope of the Policy

MARVESTING places the utmost importance and care on the protection of privacy and personal data, as well as compliance with applicable legislation provisions.

Regulation (EU) 2016/679 of April 27, 2016, concerning the protection of natural persons regarding the processing of personal data and the free movement of such data (hereinafter “GDPR”), asserts that personal data must be processed lawfully, fairly, and transparently. Therefore, this privacy policy (hereinafter the “Policy”) aims to provide you with clear, straightforward information on the processing of your personal data during your browsing and operations conducted on our website.

2. Data Controller

As part of your activity on the website marvesting.com, we collect and use personal data relating to you, as individuals (hereinafter “Data Subject”).

For all processing activities, MARVESTING, a simplified joint-stock company, registered under RCS Nanterre B 814009668, headquartered at 102-116 rue Victor Hugo – 92300 Levallois Perret, determines the means and purposes of processing. Thus, we act as the Data Controller within the meaning of Personal Data Regulations, particularly Regulation (EU) 2016/679 on the protection of natural persons regarding the processing of personal data and the free movement of such data.

3. What personal data do we collect, and how?

By using our website, you transmit certain information about yourself, some of which can identify you (“Personal Data”). This occurs when you browse our site, fill out online forms, or simply when you become a member.

The nature and quality of the personal data collected about you vary depending on your relationship with MARVESTING, primarily including:

• Identification Data: This includes all information allowing us to identify you, such as your first name, last name, and phone number. We may also collect your email address and postal address.
• Login Data: Information necessary to access your personal account, such as your password and other authentication and account access details. We also collect your IP address for maintenance and statistical purposes.
• Financial Data: Bank details such as bank account information.
• Various Documents (PDF, Office format, Images) containing titles, content, folder names, or document-related information such as comments written in documents, alert and reminder dates.
• Browsing Information: While navigating our website, you interact with it, and therefore certain browsing information is collected.
• Data Collected from Third Parties: Personal data you have agreed to share with us, or publicly accessible on social networks and/or collected from other publicly accessible databases.

4. Why and how do we collect your personal data?

We collect your personal data for specific purposes based on different legal grounds.

Within the framework of contract execution or pre-contractual measures, your data is processed for:

• Service management;
• Contract management;
• Management of your customer account;

With your consent, your data is processed for:

• Commercial prospecting and marketing activities;
• Transmission of your data to our commercial partners;
• Newsletter management;
• Management of cookies requiring your consent;

Under MARVESTING’s legitimate interest, your data is processed for:

• Establishing statistics to improve products and services;
• Conducting satisfaction surveys and polls;
• Pre-litigation and litigation management;

5. Do we share your personal data?

Your data is intended for authorized MARVESTING employees responsible for managing and executing contracts and legal obligations, according to the collection purposes and within the limits of their respective responsibilities.

Data may be transmitted for tasks related to these purposes, within their respective missions and authorizations, to the following recipients:

• MARVESTING Group entities within the context of outsourcing activities to another group entity;
• Service providers and subcontractors we use to perform various operations and tasks on our behalf;
• Commercial partners, only if you have explicitly consented through a checkbox on our data collection forms;
• Duly authorized public authorities (judicial, supervisory authorities, etc.) within the framework of our legal and regulatory obligations;
• Regulated professions (lawyers, bailiffs, etc.) who may intervene in implementing guarantees, recovery, or litigation;

When your data is communicated to our service providers and subcontractors, they are also requested not to use the data for purposes other than those initially intended. We strive to ensure these third parties maintain the confidentiality and security of your data.

In any case, only necessary data is provided. We ensure secure communication or transmission of your data.

We do not sell your data.

6. Are your personal data transferred to third countries?

MARVESTING strives to store personal data in France or at least within the European Economic Area (EEA).

However, data collected when using our platform or our services may be transferred to other countries, for example, if certain providers are located outside the European Economic Area.

In case of such transfer, we ensure it is carried out:

• To a country offering an adequate level of protection, equivalent to European regulatory requirements;
• Under standard contractual clauses;
• Under binding corporate rules.

7. How long do we retain your personal data?

We retain your personal data only for the time necessary to achieve the purpose for which we hold such data, either to meet your needs or fulfill our legal obligations.

Retention periods vary depending on several factors, such as:

• MARVESTING’s business needs;
• Contractual requirements;
• Legal obligations;
• Recommendations from supervisory authorities.

Retention periods for your data are as follows:

Last updated: 28/03/2022.