Privacy Policy & GDPR

Last updated: 20 April 2026 | Legal basis: EU Regulation 2016/679 (GDPR) | DPO: Pascal Bianco

1. Identity of the data controller

BIANCO INVEST ASSURANCES — SARL with share capital of €10,000
31 Avenue Simone Veil — 06200 Nice
SIREN: 508 490 356 00039 — RCS Nice — NAF code: 6622Z
ORIAS No.: 08 045 834
Email: info@groupe-bianco.fr — Tel: +33 (0)4 92 000 411
Data Protection Officer (DPO): Pascal Bianco — info@groupe-bianco.fr

2. Data collected and legal bases

Purpose	Data collected	Legal basis	Retention period
Contact requests	Name, first name, email, telephone, subject	Legitimate interest / Consent	3 years after last contact
Insurance contracts	Civil status, family situation, financial data	Contract performance	Contract duration + 5 years
Wealth management	Patrimonial situation, income, risk profile	Contract performance / Legal obligation (IDD)	5 years after end of relationship
Credit brokerage	Financial data, professional situation, banking history	Contract performance	5 years after end of relationship
AML/CFT compliance	Identity document, proof of origin of funds	Legal obligation	5 years after end of relationship
Navigation statistics	Anonymised navigation data (Google Analytics)	Consent (cookies)	Maximum 13 months
CRM management	Exchange history, preferences, contracts	Contract performance / Legitimate interest	5 years after end of relationship

3. Tools and sub-processors

Tool	Purpose	Transfer outside EU
Excalibur	CRM — client and insurance contract management	No
O2S	CRM — wealth management and client monitoring	No
Google Analytics	Website audience measurement	Yes — USA (Data Privacy Framework)
Google Fonts	Loading of typographic fonts	Yes — USA (Data Privacy Framework)
OVH	Website hosting	No (France)

All our sub-processors are bound by GDPR-compliant processing agreements. Transfers to the United States are carried out within the EU-US Data Privacy Framework.

4. Recipients of data

Our insurance partners, banking institutions and credit organisations in connection with our brokerage activities
ORIAS and supervisory authorities (ACPR, AMF) in connection with our regulatory obligations
Our IT service providers (Excalibur, O2S, OVH) bound by GDPR-compliant sub-processing agreements
Judicial or administrative authorities where legally required

No data is sold or transferred for commercial purposes to third parties.

5. Your rights

Right of access (art. 15) — obtain a copy of your data
Right to rectification (art. 16) — correct inaccurate or incomplete data
Right to erasure (art. 17) — subject to our legal retention obligations
Right to restriction (art. 18) — temporarily suspend the use of your data
Right to portability (art. 20) — receive your data in a structured format
Right to object (art. 21) — object to processing based on legitimate interest
Right to withdraw consent — at any time, without prejudice to prior processing

To exercise these rights: info@groupe-bianco.fr — response guaranteed within one month (art. 12 GDPR).
You may also contact the CNIL: www.cnil.fr — 3 Place de Fontenoy, 75007 Paris.

6. Data security

BIANCO INVEST ASSURANCES implements appropriate technical and organisational measures to protect your data: HTTPS/TLS encryption, restricted named access, access logging, regular and secure backups.

Last updated: 20 April 2026