This policy describes how we use your personal information.
deBRETAGNE ART (we, us, our) is committed to safeguarding the privacy of the personal data we collect and process.
For example, as part of the/our customer on-boarding process we will collect your personal data such as your name, address, telephone number, email address, employment details, financial information and passport details in order to verify your identify and, in some cases, assess your credit worthiness for the product for which you have applied. We do this as part of our legal obligations as a regulated provider of financial services and also to safeguard our business and our customers from fraud and other criminal activity.
If you have any questions, please contact firstname.lastname@example.org
If we change anything important about this policy (the information we collect, how we use it or why we use it) we will highlight those changes at the top of the policy and provide a prominent link to it for a reasonable length of time following the change and prior to the change taking effect.
Who We Are
We are deBretagne Art.
Your personal data is collected by Alix de Bretagne exclusively.
- Collecting personal data
- Collecting personal data
- Retaining personal data
- Information we share
- Where your information will be held
- Your rights
- Right to object
- How to contact us
1. Collecting Personal Data
We will collect, store and use your personal data to facilitate your applications for services through our website or in person, to allow you to manage the service you have with us (including by submitting instructions online) and for the purposes set out in more detail in this section.
Certain types of personal data are more sensitive than others. “Special personal data” about you includes information about health, disability, race, ethnicity, criminal offences (or alleged offences), political opinions, biometrics or religion. We may collect and receive special personal data about you.
Your personal data may be shared with some third parties as is set out in more detail below.
|What personal data we collect||How we use your personal data||Why we use your personal data|
|1. Information that you give to us as part of the customer on-boarding process, whether online, in-person or over the telephone including:||We use this information to:||We use your personal data:|
|2. Information that is given to us by you as an organisation as part of the customer on-boarding process, whether online, in person or over the telephone including:||We use this information to:||We use your personal data:|
|3. Information when you communicate with us whether in person, through our website or via email, over the telephone, through social media or via any other medium, including:||We use this information to:||We use your personal data:|
|4. Information that we collect from third party partners and corporate customers which includes:||We use this information to:||We use your personal data:|
|5. Information that we collect incidentally from other sources such as public sources, or from individuals representing organisations, including:||We use this information to:||We use your personal data:|
|6. Shareholder and investor data. We collect and process personal data relating to our shareholders and investors which includes:||We use this information to:||We use your personal data:|
2. Collecting Special Categories of Personal Data
We have identified here the types of special categories of personal data and criminal data we may collect or receive, how we will use it and why we will use it.
|What special categories of personal data we collect||How we use your special category personal data||Why we use your special category personal data|
|1. Special Categories of Information and Criminal Data that you give us or that we receive from you, your organisation or from third parties:||We use this information to:||We use your personal data:|
3. Retaining Personal and Special Category Personal Data
We will keep your information for as long as you are a deBRETAGNE ART customer and for a period of time after you stop being a customer of ours.
When you stop being a deBRETAGNE ART customer, we will retain your personal data for a period of up to six years. We retain your personal data in this way to enable us to respond to any queries or complaints which you may have in the future and to maintain records in line with our legal obligations to do so.
In certain circumstances we may also retain your personal data for longer than 10 years if this is necessary in connection with a legal, regulatory or contractual obligation.
We will not delete personal data if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.
4. Information We Share
There are certain circumstances where we transfer your personal data to employees, contractors and to other parties.
- Your personal data may be transferred to other third party organisations in certain scenarios:
- If we discuss selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality;
- If we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you;
- If we’re required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the Police; or
- If we are defending a legal claim your information may be transferred as required in connection with defending such claim.
- We do not sell, rent or trade any of your personal data.
- We will not, without your consent, disclose or supply your personal data to any third party for the purpose of their or any other third party’s direct marketing.
- Your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.
5. Where Your Information Will Be Held
Your information may be transferred outside the European Economic Area.
We will only transfer data to jurisdictions outside the scope of the European General Data Protection Regulation (GDPR) where the appropriate safeguards set out in the GDPR are in place.
However, to ensure your personal information is properly protected in line with EU and UK data protection law, the transfer of this information is governed by a contract including Standard Contractual Clauses approved by the European Commission in accordance with Article 46(2) (c) of the General Data Protection Regulation.
If you would like to obtain copies of the regulator-approved Standard Contractual Clauses please contact us at the e-mail address provided on the first page of this notice.
6. Your Rights
You have certain rights in relation to your information. The availability of these rights and the ways in which you can use them are set out below in more detail.
Some of these rights will only apply in certain circumstances. If you would like to exercise, or discuss, any of these rights, please contact us at the e-mail address provided on the first page of this notice.
- Access: you are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of the personal data we hold about you and certain other information about it.
- Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected.
- Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims.
- Restriction: you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- Transfer: you may request the transfer of certain of your personal information to another party.
If you want to exercise any of your rights, please contact us at the e-mail address provided on the first page of this notice.
You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident, where we are based or where an alleged infringement of Data Protection law has taken place. In the UK you can make a complaint to the Information Commissioner’s Office (Tel: 0303 123 1113 or at www.ico.org.uk).
7. Right to Object
You have a right to object to us processing your information in certain circumstances.
You have a right to object to our processing of your personal data where this is based on our legitimate interests (or those of a third party). You may challenge our reliance on legitimate interests. However, we may be entitled to continue processing your personal data based on our legitimate interests or where this is relevant to legal claims. You also have the right to object where we are processing your personal information for direct marketing purposes.
We are committed to keeping your personal data safe. We have physical, technical and administrative measures in place to prevent unauthorised access, loss, misuse or alteration of your personal data.
We store all personal information on secure servers with relevant access and firewall controls.
Any personal data sent to us, either in writing or email, may be insecure in transit and we cannot guarantee its delivery.
This Policy will be changed from time to time.
If we change anything important about this Policy (the personal data we collect, how we use it or why) we will highlight those changes at the top of the policy and provide a prominent link to it for a reasonable length of time following the change.
We will also notify you in advance of the changes taking effect so that you understand what impact our changes may have on you.
10. How to Contact Us
If you have any questions about this Policy, please contact us:
By email: email@example.com