Privacy Policy

INTUITAE FRANCE SAS (hereinafter “ Intuitae ”) is a simplified joint-stock company acting as an independent family office dedicated to supporting families in the comprehensive management of their wealth through asset allocation advisory, wealth structuring, investment strategy implementation and family governance. Its registered office is located at 6 rue Clément Marot, 75008 Paris, and it is registered with the Paris Trade and Companies Register under number 440 218 709.

Intuitae is the publisher of the website <www.intuitae.com> (hereinafter the “ Site ”) and, in this capacity, acts as  the data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation No. 2016/679 (“GDPR”) in relation to the processing of your personal data described in this Privacy Policy. As such, Intuitae is committed to ensuring the confidentiality, integrity and security of such data, in accordance with the GDPR and French Data Protection Act No. 78-17 of 6 January 1978, as amended.      

This Privacy Policy is intended to provide you with clear, transparent and comprehensive information about how Intuitae processes your personal data in connection with its Site, in accordance with Articles 12 et seq. of the GDPR.

What personal data do we collect?

Personal data means any information relating to an identified or identifiable natural person, including where identification is possible by reference to other information.

When you browse the Site, we collect only the personal data that is strictly necessary for the purposes described below, in accordance with the principle of data minimisation set out in (Article 5(1)(c) of the GDPR).

When you contact us by email, you voluntarily provide your email address as well as any information you choose to include in your message (such as your first name, last name, and the subject of your request).

When you browse the Site, certain technical data is automatically collected by our hosting server including your IP address, browser type, pages visited, and the date and time of your access. This information is processed solely for security purposes and to ensure the proper functioning of the Site.

Intuitae does not collect or process any special categories of personal data within the meaning of Article 9 of the GDPR. Intuitae is not intended to receive such data and has no legal basis for processing it. Should such data be transmitted inadvertently, it will be deleted without undue delay. 

Why do we process your personal data, on what legal bases, and for how long? 

In accordance with Article 6 of the GDPR, each processing activity carried out by Intuitae is based on a specific legal basis. The table below sets out, for each processing purpose, the applicable legal basis and the corresponding data retention period.

To whom do we disclose your personal data?

• Internal recipients

Your personal data is accessible only to duly authorised personnel of Intuitae and its subsidiaries who require access to it in the performance of their duties. All such personnel are bound by strict confidentiality obligations. This includes employees and collaborators working within our sales, technical and legal teams.

• Processors and partners

Your personal data may also be disclosed to our data processors, who process personal data on our behalf and strictly in accordance with our instructions. They are not authorised to use your personal data for any other purpose. These processors include:

• Website hosting provider (servers located within the EU);
• Customer relationship management (CRM) tool

These service providers process your personal data solely on behalf of Intuitae and are contractually bound by GDPR-compliant data processing agreements. We never sell your personal data to third parties.

Intuitae may also disclose your personal data to administrative, judicial or regulatory authorities where required by law, regulation or court order, or where necessary to protect or defend its legal rights.

International data transfers outside the European Union

We take the utmost care to ensure that your personal data is processed and stored within the European Union.

However, for certain specific services, Intuitae may use processors located outside the European Union. In such cases, personal data may be transferred strictly for the purposes of their mission. In accordance with applicable regulations, Intuitae requires such processors to provide appropriate safeguards, including:

• The signing of the European Commission’s Standard Contractual Clauses; and/or

• Transfer to a country recognised as adequate by an EU Commission decision under Article 45 GDPR. 

You may obtain a copy of these safeguards by contacting our Data Protection Officer at the email address provided below.

What are your rights and how can you exercise them? 

In accordance with applicable data protection laws (including the GDPR and French Data Protection Act), you have the following rights, subject to the conditions and limitations provided by law: 

• Right of access to your personal data; 
• Right to rectification;
• Right to erasure (subject to legal retention obligations or legal claims);
• Right to object to processing based on legitimate interest (subject to legal exceptions);
• Right to restriction/suspension of processing;
• Right to define instructions regarding the retention, deletion, and disclosure of your data after your death, in accordance with French law;
• Right to data portability.

You may exercise your rights by contacting us: 

• By post: Intuitae, 6 rue Clément Marot – 75008 Paris

• By email: dataprotection@intuitae.com

We will respond to your request within one month. Where necessary, this period may be extended by up to two additional months for complex requests.

If you are dissatisfied with the way your personal data is processed, you may lodge a complaint with the French Data Protection Authority (CNIL).

Data security

Intuitae is committed to ensuring the confidentiality of the personal data it collects and to implementing appropriate technical and organisational measures to protect its security and integrity, including against accidental or unlawful destruction, loss, alteration, disclosure or unauthorised access, in accordance with Article 32 GDPR.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, you will be informed without undue delay, in accordance with Article 34 GDPR.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in applicable laws, regulations, case law, or our services. The version published on the Site at the time of your consultation shall apply. We therefore encourage you to review this Privacy Policy regularly.