Personal data confidentiality and processing security
GDPR Privacy Policy
Because we handle high-stakes receivables and sensitive case files, the protection of your data, the confidentiality of exchanges and respect for business secrecy are at the core of Legatum & Partners’ commitment.
1. Data Controller
The data controller is the Firm Legatum & Partners, a SAS registered under number 988 390 951 with the Aix-en-Provence Trade and Companies Register.
Registered office: Bâtiment C2, Europarc Pichaury, 13290 Aix-en-Provence, France.
Personal data contact: direction@legatumpartners.eu
Applicable framework: Regulation (EU) 2016/679 (GDPR), the French Data Protection Act as amended, and any applicable mandatory rules governing cross-border data processing.
1bis. International data transfers
In the course of its activities, Legatum & Partners may process data involving international stakeholders or service providers.
Where personal data is transferred outside the European Union or the European Economic Area, such transfers are carried out in strict compliance with Chapter V of Regulation (EU) 2016/679 (GDPR).
Depending on the situation, transfers may rely on:
- Adequacy decisions adopted by the European Commission, where applicable.
- Appropriate safeguards, including Standard Contractual Clauses (SCCs).
- Strict limitation of access to data on a need-to-know basis, in line with professional confidentiality requirements.
No data transfer is carried out without a legal framework designed to ensure a level of protection consistent with the requirements applicable within the European Union.
2. Data collected
We collect only the data strictly necessary for the performance of our assignments:
- Contact data: surname, first name, professional email address, telephone number, company and role where applicable.
- Case data: contracts, invoices, statements of claim, exchanges, supporting evidence and information strictly necessary to review or process the file.
- Navigation data: audience measurement and conversion tracking data, subject to your consent.
3. Purposes and legal bases
Data is used to respond to contact requests, review submitted files, prepare or perform a debt recovery assignment, ensure administrative follow-up and comply with legal, accounting and tax obligations.
Depending on the case, processing is based on pre-contractual or contractual measures, the firm’s legitimate interest in handling professional requests, compliance with legal obligations, or your consent for audience measurement cookies.
4. Data retention
| Data type | Retention period |
|---|---|
| Prospect relationship | 3 years after the last contact |
| Debt recovery files | 5 years after file closure, subject to longer mandatory retention where applicable |
| Accounting documents | 10 years under French tax and accounting obligations |
| Cookie data | 13 months maximum |
5. Non-disclosure commitment
Zero-transfer commitment: your data is never sold, rented or transferred to third parties for commercial exploitation.
6. Cookies & preferences
This website uses audience measurement cookies. You can reset your choices at any time.
7. Your rights
You may exercise your rights by email. If necessary, you may lodge a complaint with the CNIL in France or, where applicable, with another competent supervisory authority.
8. Policy updates
This policy may be amended to reflect legal, regulatory, technical or organisational developments affecting the firm.
Last updated: July 2026.