How Zolias Conseil processes your personal data, and how to exercise your rights.
This translation is provided for information. The French version prevails.
Data controller
ZOLIAS (Zolias Conseil), simplified joint-stock company (SAS) with share capital of €99.99, 60 rue François 1er, 75008 Paris, France, registered with the Paris Trade and Companies Register (RCS) under no. 990 703 571. For any question about your data: contact@zolias-conseil.com.
Data, purposes, legal bases and retention periods
| Processing | Data | Legal basis | Retention period |
|---|---|---|---|
| Consultation request (website form) | First name, last name, email, telephone, subject of the request, page from which the form was sent and, if you have accepted audience measurement, the campaign from which your visit originated | Pre-contractual steps taken at your request | 3 years from the last contact, if no relationship is entered into |
| Client relationship management (advisory engagement, subscriptions) | Identity, contact details, family, wealth and financial situation, investment knowledge and objectives | Performance of the contract; legal obligations (duty to advise, anti-money laundering) | Duration of the relationship, then 5 years from its end (anti-money laundering obligations) |
| Advertising conversion measurement (Google Ads) | Google Ads cookies, ad click identifier, page of the request; never your contact details | Your consent (cookie banner), which may be withdrawn at any time | 13 months maximum |
| Website audience and performance measurement (Vercel) | Pages viewed, origin, device type, loading speed, without cookies or personal data | Legitimate interest (understanding website traffic and quality) | Technical visit identifier erased within 24 hours |
| Website security and abuse prevention | IP address and timestamp of form submissions, held in the server’s memory | Legitimate interest (protection against automated submissions) | 1 hour for the form’s anti-abuse check |
Technical logs (IP address, browser, page requested) are kept for 24 hours by the hosting provider, for security and diagnostic purposes.
The data collected is limited to what is necessary for each purpose, and is never sold. No decision producing legal effects concerning you is taken solely on the basis of automated processing. If you accept advertising cookies, Google may use this information to measure and personalise its ads.
Recipients and processors
Your data is intended for authorised staff of Zolias Conseil. It may be processed, strictly within the scope of their tasks, by the following processors:
- Vercel Inc. (United States): website hosting, receipt of form submissions, website audience and performance measurement, without cookies;
- Resend (United States): sending form requests to the firm by email, and sending the acknowledgement of receipt;
- Google (Google Workspace): email;
- Google Ireland Limited (Google Ads): advertising conversion measurement, only if you have accepted it.
It may also be disclosed to the partners (insurers, asset management companies) strictly necessary to implement the solutions you choose, and to the authorities where required by law.
Transfers outside the European Union
Vercel and Resend are established in the United States: the data they process on behalf of Zolias Conseil may be transferred outside the European Union. These transfers are governed by the standard contractual clauses adopted by the European Commission. Google Ads data may be transferred to the United States: this transfer is governed by the Data Privacy Framework and by the standard contractual clauses.
Your rights
You have the right of access, rectification, erasure, restriction and portability of your data, the right to object (in particular to any direct marketing), the right to withdraw your consent at any time where processing is based on it, and the right to give instructions regarding what happens to your data after your death.
To exercise these rights, write to contact@zolias-conseil.com or to the registered office. You will receive a response within one month, which may be extended by two months for a complex request. Proof of identity may only be requested where there is reasonable doubt about your identity.
You may lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (cnil.fr).
Telephone marketing
If you do not wish to receive marketing calls, you may register, at no cost, on the French telephone marketing opt-out list: bloctel.gouv.fr. Zolias Conseil only calls you at your request or with your agreement.
Security
Zolias Conseil implements appropriate technical and organisational measures to protect your data: encryption of communications (HTTPS), access restricted to authorised persons only, protection of the form against automated submissions.
Cookies and audience measurement
Google Ads (Google Ireland Limited). Only with your consent, Google Ads cookies measure advertising conversions: whether a request sent on the website follows a Google ad. Nothing is placed or loaded from Google before your consent, nor if you refuse. These cookies are kept for 13 months maximum (90 days for the _gcl_au and _gcl_aw cookies placed on this website). Your contact details are never passed on to Google. The data may be transferred to the United States: this transfer is governed by the Data Privacy Framework and by the standard contractual clauses. You may withdraw your consent at any time via the “Manage cookies” link at the bottom of every page: any Google Ads cookies already placed are then erased.
Vercel Web Analytics and Speed Insights. Website traffic and speed are measured anonymously, without cookies: no tracker is placed on your device, no personal data is kept, and the technical identifier of a visit is erased within 24 hours.
Your cookie choice is kept for 6 months; the banner is then shown to you again. Details of the trackers are given on the Cookies page.
Last updated: .