Privacy Policy
Last updated: 15 January 2026
This privacy policy describes how Montavestofloris SAS collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679), French Law no. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, and CNIL recommendations.
1. Data controller
The data controller is Montavestofloris SAS, registered with the Paris Trade and Companies Register under number B 912 345 678, with its registered office at 42 Rue du Faubourg Saint-Honore, 75008 Paris, France. For any questions regarding the protection of your data, you may contact our Data Protection Officer (DPO) at: dpo@montavestofloris.com or by post at the registered office address.
2. Data collected
As part of our financial and social support services, we collect the following categories of data: identification data (surname, first name, postal address, email address, telephone number), data relating to your financial and social situation voluntarily communicated through our contact and eligibility forms, browsing data (IP address, browser type, pages visited, connection timestamps) collected automatically during your visit to our site, and data relating to cookies and trackers in accordance with our cookie policy.
3. Purposes of processing
Your personal data is processed for the following purposes: responding to your contact and information requests, assessing your eligibility for public aid and financial schemes, providing personalised support in your administrative procedures, improving our services and the user experience of our website, complying with our legal and regulatory obligations, and sending you communications about our services if you have consented.
4. Legal basis for processing
The data processing carried out by Montavestofloris is based on the following legal grounds: your consent (Article 6.1.a of the GDPR) for commercial communications and non-essential cookies, the performance of a contract or pre-contractual measures (Article 6.1.b) for processing your support requests, compliance with our legal obligations (Article 6.1.c) for the retention of certain data for accounting or tax purposes, and our legitimate interest (Article 6.1.f) for improving our services and securing our site.
5. Data recipients
Your personal data is only accessible to authorised Montavestofloris SAS staff in the course of their duties. It may be transmitted to our technical subcontractors (hosting, IT maintenance) acting as processors within the meaning of the GDPR, to public bodies in connection with your administrative procedures and only with your explicit consent, and to competent authorities where required by law. We do not sell or rent your personal data to third parties for commercial purposes.
6. Transfers outside the European Union
Your data is hosted within the European Union. In the event that a transfer to a third country becomes necessary, we would ensure that appropriate safeguards are in place in accordance with Articles 44 to 49 of the GDPR (standard contractual clauses, European Commission adequacy decision, or explicit consent).
7. Data retention period
Your personal data is retained for the period strictly necessary for the purposes for which it is collected: contact data: 3 years from your last interaction with us, data relating to support files: 5 years from the closure of the file, browsing data and cookies: maximum 13 months in accordance with CNIL recommendations, and accounting documents and invoices: 10 years in accordance with French legal obligations.
8. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights: right of access (Article 15 of the GDPR), right to rectification (Article 16), right to erasure (Article 17), right to restriction of processing (Article 18), right to data portability (Article 20), right to object (Article 21), and the right to withdraw your consent at any time. To exercise your rights, contact us at dpo@montavestofloris.com or by post to our registered office. We will respond to your request within one month. You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
9. Data security
Montavestofloris implements appropriate technical and organisational measures to protect your personal data against unauthorised access, modification, disclosure or destruction. Our measures include SSL/TLS encryption of communications, strict access controls to information systems, regular and secure backups, and regular staff training on data protection.
10. Policy changes
We reserve the right to modify this privacy policy at any time. Any substantial modification will be brought to your attention by a notice published on our website. The date of last update is indicated at the top of this document.