Privacy policy Exco Fiduciaire du Sud-Ouest

Personal data: any information relating to an identified or identifiable natural person.

Processing: any operation or set of operations performed on personal data or sets of personal data.

Data subject: an individual whose personal data is being processed.

EXCO FSO / We: EXCO Fiduciaire du Sud-Ouest and its subsidiaries.

You/Your: any person concerned by the processing of personal data covered by this data protection policy.

We are committed to the following data protection principles:

• Processing is legal, fair and transparent. Our processing activities have legitimate grounds. We always consider your rights before processing personal data. We will provide you with information about processing on request.
• Processing is limited to the purpose. Our processing activities correspond to the purpose for which the personal data was collected.
• Processing is carried out with a minimum of data. We collect and process only the minimum amount of personal data required for any purpose.
• Processing is limited to a certain period of time. We will not keep your personal data longer than necessary.
• We will do our best to ensure the accuracy of the data.
• We will do our best to ensure data integrity and confidentiality.

EXCO FSO processes your personal data for several purposes:

• To manage the legal, commercial, financial and marketing relationship between EXCO FSO and its customers, partners and suppliers. The legal basis for this processing is EXCO FSO's legitimate interest in ensuring its legal, administrative and financial operations and developing its business. Commercial prospecting communications are based on your consent. You can ask at any time not to receive commercial solicitations.
• To manage the legal relationship between EXCO FSO and its trainees, employees and temporary staff. The legal basis for this processing is EXCO FSO's legitimate interest in ensuring its internal technical, legal, administrative and financial operations and developing its activities.

In these two situations, EXCO FSO acts as "data controller" within the meaning of the applicable regulations.

• Execution of assignments entrusted to EXCO FSO by its customers, which may involve the processing of personal data if you are employed by an EXCO FSO customer, or by a customer of an EXCO FSO customer.

These missions cover the following areas:

• public accounting,
• the board,
• human resources management,
• legal and tax issues related to accounting and HRM,
• auditing and statutory auditing,
• IT and technology engineering.

The legal basis for such processing is EXCO FSO's legitimate interest in fulfilling its contractual obligations to its customers, and/or the legal obligations that apply to EXCO FSO in the exercise of its regulated activities.

EXCO FSO will be considered as a "subcontractor", "data controller" or "joint data controller", depending on the situation and the data processing involved. Determination of status is based primarily on the definition of purposes, i.e. the result sought by implementing data processing. The entity that decides on the purpose of processing automatically has the status of data controller.

EXCO FSO, when acting as data controller, limits the collection of personal data to that which is adequate, relevant and strictly necessary for processing.

EXCO FSO, when acting as a subcontractor for the purposes of carrying out the assignments entrusted to it by its customers, is contractually committed within the framework of its assignment contracts to ensuring the utmost respect for the security and confidentiality of the personal data it is required to process within this framework.

The personal data processed by EXCO FSO in the context of the missions entrusted to it by its customers is transmitted exclusively to the bodies that need to know it (tax, social and provident organizations in particular), on the instructions of the customer.

Your personal data processed by EXCO FSO is kept in France, for a period adapted to the purpose of each processing operation and, when EXCO FSO acts as a subcontractor to carry out an assignment, for the period defined contractually with the customer.

Exceptionally, such data may be kept for longer periods to manage claims or disputes, or to meet legal, disciplinary and/or regulatory obligations.

You have the right to request access to your personal data and the rectification of inaccurate data. You may request the deletion of data and the restriction of processing. You may also object to processing, in the cases and within the limits provided for by the applicable legislation. You have the right to the portability of the personal data you have provided to EXCO FSO, under the conditions provided for by the applicable legislation. You also have the right to define directives relating to the conservation, deletion and communication after your death of your personal data processed by EXCO FSO, in accordance with applicable laws and regulations.

Where processing is based on your consent, you may withdraw it at any time.

You can exercise your rights by sending an e-mail to vosdonnees-fso@exco.fr.

Your request will be processed as quickly as possible, provided you can prove your identity by attaching a copy of your official identity document and a telephone number to your e-mail or letter.

CNIL complaints

You can lodge a complaint about the processing of your personal data with the Commission Nationale Informatique et Libertés (CNIL) - www.cnil.fr - 3 place de Fontenoy 75007 Paris.