Privacy

The data collected are data about the number of visitors to our website and their sub-pages that you visit. Specifically, the following data is collected or stored with each call:

• filename
• Date and time of retrieval
• The amount of data transferred and a message indicating whether the retrieval was successful.

This information gives us insight into the general interests and preferences of our visitors. They serve the continuous improvement of our Internet offer. The data is more general, statistical and non-personal as this data is anonymised. So we can not understand which user has retrieved which data.

No personal information (such as names, addresses, telephone numbers or e-mail addresses) will be collected unless you provide us with such information voluntarily (such as through our contact forms). Your entries regarding the contact forms are sent to a central email address, which is exclusively maintained by the Crédit Agricole Leasing & Factoring SA - Branch Germany. We use the personal information you provide to answer your requests and process your orders. To maintain customer relationships, we may still need to process your personal information and disclose it to our affiliates to better meet your needs and improve our products or services. Your personal data will not be sold.

A cookie is a small file stored by a server in a user's terminal (computer, phone, etc.) and associated with a web domain (i.e. in most cases with all the pages of the same website). Among other things, this standard procedure allows you to exchange certain settings and information between your browser and our system.

What is the function of cookies?

Cookies have different functions and serve mainly to improve the user-friendliness of the website. Furthermore, cookies are used for authentication and statistical evaluation (including surfing on the website). In addition, the use of cookies enables the website to be optimally tailored to the interests of the visitors.

Some cookies are necessary for the proper operation of the website, others may be useful to enable the visitor to store certain information (such as user names and / or language settings). This makes it possible to improve the user friendliness steadily.

What types of cookies are used by this website?

We use cookies to optimize the website and make the visit more comfortable for users. You can decide for yourself whether the browser used allows cookies or not. Please note that disabling cookies may affect the functionality of the website.

Subject to your permission, the following cookies could be used.

Technical cookies

These are u.a. used to allow the transmission of a message (for example contact forms). For security reasons, the technical cookies are also used for authentication. Another use is to store user-specific information. Without these technical standards, it would not be possible to provide all the features offered by the website. These cookies do not collect information for commercial purposes and can be divided into

Session cookies

These include information to ensure that user guidance is stored on a per-visit basis based on self-determined criteria (for example, the language selected).

Analytical cookies

These store, for example, information about the date and time of the visit and about the contents of the page visited. Subsequent analyzes allow for continuous improvements in ease of use. These statistics are based on anonymous data and are used solely for this purpose.

Third Party Cookies

These allow the use of cookies by third parties for the purpose of analyzing and improving the browsing experience.

This website uses Matomo, a software for the statistical evaluation of visitor access. Matomo uses cookies to allow you to analyze the use of the website.

The information generated by the cookie about your use of the website is stored on a server in Germany. The IP address is anonymized immediately after processing and prior to its storage. You have the option to prevent the installation of cookies by changing the settings of your browser software. As a precaution, we point out that with appropriate setting, not all features of this website may be available.

Please refer to the following link for further information:

https://matomo.org/privacy/

We collect your data for the following purposes:

Distribution and brokerage as well as the initiation and implementation of financial services in the field of factoring (execution of contractual relationships, factoring contracts), in particular the purchase of receivables from deliveries of goods and services (performance of contractual obligations), business consultancy and collection and related services besides shops.

The aforementioned ancillary businesses also include personnel administration, customer service, customer management and all other activities arising for the administration. The processing of personal data for own purposes (legitimate interest) and on behalf of the user is carried out in accordance with contractual agreements and legal regulations in force.

Please note that without the processing of certain data, it is not possible to comply with laws or fulfill contractual obligations.

Personal data or data categories required for fulfilling the purpose in the context of our business activities are collected for the following groups of persons:

Customer / debtor data

Contact details, asset data, legitimacy data, payment history data and all other data necessary for contractual fulfillment.

Prospect data

Contact details, asset data and other data necessary for contractual fulfillment.

Employee data

Employees include in particular: employees, apprentices, rehabilitated persons, persons who are to be regarded as employees similar to employees due to their economic independence, applicants, retired persons and interns. Contractual data and performance data (including assessments) are processed, as far as this is necessary for the decision on the creation of an employment relationship or justification of the employment relationship for its implementation or termination.

Examples: contract and billing data, personnel management and control data (name, address, job title, social data, bank details); Performance appraisal data; Access control data; Schedule management data; Data in the context of corporate communication and IT system usage and the legally required logging.

Service data

In particular, service providers include suppliers, creditors, intermediaries, agencies, commercial credit insurance, legal advisers, landlords, auditors and IT service providers. For example, contact and contract data, bank data are processed.

Cooperation partners

In particular, cooperation partners include business partners in Germany and abroad. For example, contact data and contract data as well as other data required for cooperation and contract execution are processed.

Internal recipients

The data mentioned are processed by the specialized departments (for example, financial accounting, IT, personnel), which are involved in the respective business procedures, or are necessary in order to safeguard the legitimate interest and to guarantee the execution of the contractual obligations.

External recipients

For example, Associated companies, corresponding banks, credit reference agencies, lawyers, notaries, IT service providers, insolvency administrators, insurance companies (insofar as this is necessary to fulfill the contractual relationship). Public bodies that may obtain or request data by law (e.g., tax authorities, social security funds, regulators and law enforcement agencies).

In addition, data processors (service providers) can be commissioned to process data on the basis of legal regulations. These include, in particular, IT services, print services, telecommunications and consulting.

Third countries

Transmission to countries outside the European Union or the EEA is only on the basis of statutory regulations, or due to the exceptions provided for in the Federal Data Protection Act. Transmission shall only be made to those third countries which ensure an adequate level of data protection.

The obligations of the legislator to retain data and other documents within a given deadline are met. The deletion or anonymization of the data takes place after expiry of the statutory or contractually agreed retention periods. The legal deadlines are, for example:

• in accordance with the provisions of the German Commercial Code, the Tax Code, the German Banking Act, the Money Laundering Act and the Securities Trading Act. The specified deadlines are up to 10 years. Civil law periods of up to 30 years also extend. If data are not affected, they will be deleted if the stated purpose is omitted. The specification of data minimization is complied with.
• commercial prospecting
• data for geolocation
• connection data (IP address, logs, etc.)

Right of access

You can request access to your personal data processed by Crédit Agricole Leasing & Factoring S.A..

Right to withdraw your consent

You can withdraw your consent at anytime, if the consent is the legal basis for the processing, without prejudice to the lawfulness of the processing based on consent prior to withdrawal.

Right of rectification

In case of a change of your data, you may request correction of the data. Even if your data may not be complete, you may request completion. If we have forwarded your data to third parties, we will take care that your data will be corrected / completed there (in compliance with legal regulations).

Right of erasure

A deletion of your personal data may be required:

• When the personal data is no longer needed for the purpose of data collection.
• If the consent to data processing has been revoked or there is no legal basis which justifies the processing of the data or if there are no overriding interests worthy of protection.
• If the data was processed improperly.
• If the data needs to be deleted due to legal requirements.

Please note in this context that the right of erasure may depend on whether there is a reason which continues to require the processing of the data (e.g. the observance of statutory retention requirements).

Right to limit the processing of your data

You may request the restriction of the data processing under the conditions laid down in the regulations. A limitation of the processing of your personal data may be required:

• If the accuracy of your personal information is disputed and we have ensured that it is accurate.
• If the data processing is illegal and you prefer a restriction instead of the deletion.
• If the data are no longer needed, but they are needed to assert legal rights.
• If there is a conflict with the data processing. In this case, data processing is restricted until it is determined whether your interests in data processing are over-weighing.

Right to file a complaint

In the event of a complaint, you are free to contact the data protection officer of Crédit Agricole Leasing & Factoring S.A. or the relevant data protection authority.

The competent authority for the federal state of Bavaria:

Bavarian State Office for Data Protection Supervision
PO Box 606
91511 Ansbach
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
poststelle@lda.bayern.de
https://www.lda.bayern.de

Changes to the contact details are reserved to the competent authority. On the homepage of the authority, the current contact data are available.

Right to object to data processing

You have the right to object to the processing of your personal data at any time in accordance with Article 6 (1) (f) GDPR (data processing based on a balance of interests), if this is justified by your particular situation. This also applies to profiling within the meaning of Article 4 No. 4 GDPR.

Should you object to the processing of your data, we will no longer process any personal data unless there are interests worthy of protection for Crédit Agricole Leasing & Factoring S.A., which make the data processing necessary and which outweigh your interests or the enforcement data, Assertion or defense of legal claims are needed.

In the case of a contradiction, please contact immediately our data protection officer:

Blaise DIAGNE
Data Protection Officer CAL&F
50 Av. Jean JAURES 92120 Montrouge
France
DPO-calf@ca-lf.com
datenschutz@eurofactor.de

The objection can basically be made free of form.

Certain (above) data are collected, processed and used on the basis of contractual, legal or banking regulatory requirements (the BaFin and the Bundesbank). These include, for example, the German Banking Act, the German Securities Trading Act, the Tax Act, the Money Laundering Act (to fulfill control and reporting obligations, inter alia due to sanctions and embargo, fraud prevention and the assessment and management of risks within the Group) or circumstances due to the terms and conditions.

• Contact information includes first and last name, telephone, fax and e-mail addresses, address, contact history.
• Contract data includes, for example, first name and surname, signatures, debtor data, warranty statements.
• Identification data includes, for example, ID card copies (first and last name, address, date of birth, place of birth, eye color, size, nationality, ID number, pictures) as well as signatures and registration confirmations, e-mail addresses and telephone numbers.
• Asset data includes, for example, balance sheets, bank details / bank data, cash assets (financial position), real estate, creditworthiness,
• Bank details include, for example, bank details BIC / SWIFT / IBAN, data of the account holder, information regarding the transfer of funds.

Our websites use social media of the providers listed below. These plugins can be recognized by the fact that they are marked with the appropriate logo.

Only by your active forwarding (use of the links per click) information (including personal data) are transferred to the service provider through the connection between your device and the servers of the respective service providers. We do not collect personally identifiable information based on the data transfer. It must be assumed that the link to the providers at least the IP address and device-related information is collected and used. It is also possible for service providers to try to store cookies on the device you are using. Please refer to the privacy policy of the respective service provider to see which specific data is collected and how it is used.

We have links to the following companies:

Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA)
Link to Facebook's privacy policy for more information:
https://de-de.facebook.com/business/gdpr

Twitter Inc. (795 Folsom St. - Suite 600 - San Francisco - CA 94107 - USA)
Link to Twitter's Privacy Policy for more information:
https://twitter.com/privacy

Google Plus / Google Inc. (1600 Amphitheater Parkway - Mountain View - CA 94043 - USA)
Link to the Google Plus Privacy Policy for more information:
https://policies.google.com/privacy

LinkedIn Corporation (2029 Stierlin Court - Mountain View - CA 94043 - United States)
Link to LinkedIn's privacy policy for more information:
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

We are not responsible for compliance with the privacy policies of the other websites. We have no influence on which data are used by the provider and refer to the imprint of this page.

We reserve the right to amend this privacy policy if necessary, so that it always meets the current legal requirements or to implement changes to our services in the data protection statement.