Privacy policy Exco Nexiom

Personal data: any information relating to an identified or identifiable natural person.

Processing: any operation or set of operations performed on personal data or sets of personal data.

Data subject: an individual whose personal data is being processed.

Exco Nexiom / We: Exco Nexiom and its subsidiaries.

You/Your: any person concerned by the processing of personal data covered by this data protection policy.

We have appointed a data protection officer whose contact details are as follows:

E-mail: dponexiom@exco.fr

We inform you that your data will be kept and stored on servers located in the European Union for as long as it is required. Your data will not be transferred outside the European Union in connection with the use of our services.

We inform you that we take all necessary precautions and appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorized third parties.

We take care to work only with subcontractors (software publishers) offering secure solutions that comply with French and European laws (RGPD).

Your personal data will not be transferred, rented or exchanged for the benefit of third parties.

• We are committed to the following data protection principles:
• Processing is legal, fair and transparent. Our processing activities have legitimate grounds. We always consider your rights before processing personal data. We will provide you with information about processing on request.
• Processing is limited to the purpose. Our processing activities correspond to the purpose for which the personal data was collected.
• Processing is carried out with a minimum of data. We collect and process only the minimum amount of personal data required for any purpose.
• Processing is limited to a certain period of time. We will not keep your personal data longer than necessary.
• We will do our best to ensure the accuracy of the data.
• We will do our best to ensure data integrity and confidentiality.

Exco Nexiom processes your personal data in several cases:

• Management of the commercial, financial and marketing relationship between Exco Nexiom and its customers, partners and suppliers. The legal basis for this processing is
• Exco Nexiom's legitimate interest in ensuring its administrative and financial operations. Informative or commercial communications are based on your consent. You can ask at any time not to receive these communications.
• Manage job applications at Exco Nexiom sites.
• Execution of assignments entrusted to Exco Nexiom by its customers, which may involve the processing of personal data if you are employed by a customer of Exco Nexiom, or by a customer of a customer of Exco Nexiom.

These missions cover the following areas:

• Chartered accountancy
• The board
• Human resources management
• Legal and/or tax departments linked to accountancy and HRM
• Auditing and statutory auditors
• Wealth management advice
• IT and technology engineering missions

The legal basis for such processing is Exco Nexiom's legitimate interest in being able to perform its contractual obligations towards its customers, and/or the legal obligations that apply to Exco Nexiom in the exercise of its regulated activities.

You can consult Exco Nexiom's business registers:

Depending on the situation during a given assignment and the data processing involved, Exco Nexiom will be considered as a "subcontractor", "controller" or "joint controller". The determination of status is based primarily on the definition of purposes, i.e. the result sought by implementing the data processing. The entity that decides on the purpose of processing automatically has the status of data controller.

Exco Nexiom, when acting as data controller, limits the collection of personal data to that which is adequate, relevant and strictly necessary for processing.

Exco Nexiom, when acting as a subcontractor for the purposes of carrying out the assignments entrusted to it by its customers, undertakes contractually within the framework of its assignment contracts to provide the utmost respect for the security and confidentiality of the personal data it is required to process within this framework.

The personal data processed by Exco Nexiom in the context of the assignments entrusted to it by its customers is transmitted exclusively to the bodies that need to know it (tax, social security and provident organizations in particular), on the instructions of the customer.

Your personal data processed by Exco Nexiom is kept in France for a period of time appropriate to the purpose of each processing operation and, when Exco Nexiom acts as a subcontractor to carry out a mission, for the period of time defined contractually with the customer.

Exceptionally, such data may be kept for longer periods to manage claims or disputes, or to meet legal, disciplinary and/or regulatory obligations.

You have the right to request access to your personal data and the rectification of inaccurate data. You may request the erasure of data and the restriction of processing, and you may also object to processing, in the cases and within the limits provided for by the applicable legislation. You have the right to the portability of the personal data you have provided to Exco Nexiom, under the conditions provided for by the applicable legislation. You also have the right to define directives relating to the conservation, deletion and communication after your death of your personal data processed by Exco Nexiom, in accordance with the applicable legislative and regulatory provisions.

Where processing is based on your consent, you may withdraw it at any time.

You can exercise your rights by sending an e-mail to dponexiom@exco.fr.

Your request will be processed as quickly as possible, provided you can prove your identity by attaching a copy of your official identity document and a telephone number to your e-mail or letter.

CNIL complaints

You can lodge a complaint about the processing of your personal data with the Commission Nationale Informatique et Libertés (CNIL) - www.cnil.fr - 3 place de Fontenoy 75007 Paris.

We reserve the right, at our sole discretion, to modifier this charter, in whole or in part, at any time. These modifications will come into effect as of the publication of the new charter on exconexiom.fr.

Your use of our services following the entry into force of these modifications will constitute recognition and acceptance of the new charter.

This charter came into force on May 25, 2018.