CeSA BANK - Privacy Policy

Our Commitment

CeSA BANK is committed to protecting the privacy of its customers and users. This privacy policy explains how we collect, use, share and protect your personal data when you use our online services.

We strictly comply with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.

Data Collected

We may collect the following categories of personal data:

1. Identification Data

First name and last name
Email address
Phone number
Postal address
Date and place of birth
Copy of identity document (only for loan applications)

2. Financial Data

Income and employment status
Bank details (IBAN)
Transaction history
Information about your financing projects

3. Navigation Data

IP address
Cookies and trackers
Visited pages and interactions
Browser type and device

4. Communication Data

Correspondence with customer service
Complaints and information requests
Participation in satisfaction surveys

Purposes of Processing

Your data is used for:

Loan application management: review of your file, simulation, granting of credit
Contract management: monitoring of loans, cards, insurances
Customer relationship: responding to your requests, after-sales service
Legal obligations: anti-money laundering, fraud prevention, accounting obligations
Service improvement: statistical analyses, development of new products
Marketing: information about our offers (with your consent)

Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes described above, in accordance with legal and regulatory obligations:

Customer data: throughout the contractual relationship + 5 years for evidentiary purposes
Prospect data: 3 years from the last contact
Cookies: maximum 13 months
Accounting data: 10 years (legal obligation)
Identity documents: 1 year in case of exercise of the right to object

Recipients of the Data

Your data may be disclosed to the following categories of recipients:

Our authorized internal departments
Our partners and processors (hosting providers, technical service providers)
Administrative and judicial authorities (upon requisition)
Partner credit and insurance organizations

We never sell your personal data to third parties.

Cookie Management

Our website uses cookies to improve your browsing experience. You can change your cookie preferences at any time.

Types of cookies used:

Technical cookies: necessary for the operation of the site
Analytical cookies: audience measurement (Google Analytics, IP addresses anonymized)
Personalization cookies: remembering your preferences
Advertising cookies: only with your consent

Your Rights

In accordance with the regulations, you have the following rights regarding your personal data:

Right of access: obtain confirmation that your data is being processed and access it
Right to rectification: have inaccurate data corrected
Right to erasure: request the deletion of your data
Right to restriction: suspend the processing of your data
Right to object: object to processing for legitimate reasons
Right to portability: receive your data in a structured format
Right to withdraw consent: at any time for consent-based processing
Right to give post-mortem instructions

To exercise your rights, contact us at: dpo@cesabk.com or by mail to our head office address, enclosing a copy of your ID.

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority).

DPO Contact

Our Data Protection Officer (DPO) is your preferred contact for any questions relating to your personal data:

Email: dpo@cesabk.com
Mail: CeSA BANK - DPO - Greater London SW1A 3QD, United Kingdom

Changes

We reserve the right to modify this privacy policy at any time. The version published online on our site is authoritative. We encourage you to check this page regularly for any updates.