Privacy policy
Last updated: July 2026
This privacy policy describes how GEREJE CORPORATE FINANCE (« GEREJE », « we ») collects and processes your personal data when you use gerejecorpfinance.com and our online services (contact form, investor area, mandates).
1. Data controller
GEREJE CORPORATE FINANCE
50 avenue des Champs-Élysées, 75008 Paris, France
Email: contact@gerejecorpfinance.com
2. Data collected
Depending on your interactions, we may collect:
- Contact form: name, email, website, postal address, GEREJE city, message.
- Investor registration: identity, email, company, project, GEREJE contact, LinkedIn profile, investment criteria, password (stored encrypted).
- Mandate browsing (logged-in investors): sections viewed, timestamp, IP address, user-agent.
- e-NDA signing: identification data and signature metadata via Adobe Sign.
- Technical data: server logs (IP address, date/time, pages visited) for security purposes.
3. Purposes and legal bases
| Processing | Purpose | Legal basis | Retention |
|---|---|---|---|
| Contact form | Respond to your enquiry | Legitimate interest / pre-contractual measures | 12 months |
| Investor account | Manage access to investment opportunities | Pre-contractual measures / contract | relationship duration + 5 years |
| Pending investor applications | Process access requests | Legitimate interest | 24 months |
| Mandate activity tracking | Measure investor interest in mandates | Legitimate interest (authenticated investors) | 24 months |
| e-NDA signing | Execute a confidentiality agreement | Contract performance / legal obligation | 10 years |
| Security logs | Security and fraud prevention | Legitimate interest | 12 months |
| Non-essential cookies | External fonts, embedded content, analytics | Consent | See cookie policy |
4. Data recipients
Your data may be shared with:
- Authorised GEREJE internal teams.
- Our technical processors: hosting provider (OVHcloud), email provider, Adobe Sign (electronic signature).
- Font or embedded content providers (Google Fonts, YouTube, Google Maps) only if you consent via our cookie banner.
We do not sell your personal data to third parties.
5. Transfers outside the European Union
Some processors (Adobe Sign, Google) may process data outside the EU. Such transfers are governed by EU Standard Contractual Clauses or adequacy decisions, in accordance with GDPR Chapter V.
6. Your rights
Under the GDPR, you have the following rights:
- Right of access — obtain a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure — request deletion of your data.
- Right to restriction — restrict processing in certain cases.
- Right to portability — receive your data in a structured format.
- Right to object — object to processing based on legitimate interest.
- Withdrawal of consent — at any time for consent-based processing.
To exercise your rights, contact us at contact@gerejecorpfinance.com. We will respond within one month.
You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.
7. Security
We implement appropriate technical and organisational measures: HTTPS encryption, hashed passwords, CSRF protection, form rate limiting, secure sessions (HttpOnly, SameSite).
8. Changes
This policy may be updated. The last update date appears at the top of the page. We encourage you to review it regularly.