1. General Principles & Privacy Commitment

Preserving privacy and ensuring the absolute security of your personal data are major pillars of our financial engineering. This Privacy Policy applies to all services published by NOVARA FINANCE and transparently and rigorously describes how your information is collected, processed, secured, and stored.

L'ensemble de nos opérations de collecte et de traitement s'effectue en stricte conformité avec le Règlement Général sur la Protection des Données (RGPDUE n°2016/679) et les dispositions nationales en vigueur.

By running a loan simulation or submitting a financing application on our platform, you acknowledge that you have read and accepted without reservation the provisions of this policy.

2. Data Controller

The entity responsible for collecting and processing personal data relating to users of our services is the company:

NOVARA FINANCE

Company name and status: Banking Operations and Payment Services Intermediary

Registered Office Address: Bd de l'Empereur 1000 Bruxelles, Belgique/470 Avenue du Mont-Royal E

General email: info@novara-finance.com

Data Protection Officer (DPO): rgpd@novara-finance.com

3. Legal Bases for Processing

In accordance with Article 6 of the GDPR, the collection and processing of your data are based on strictly defined legal grounds:

Contractual Performance

Necessary for processing your financing application, providing personalized credit simulations, and connecting you with lending institutions.

Legal Obligations

Compliance with banking regulations, creditworthiness assessment obligations, anti-money laundering, and counter-terrorist financing (AML/CFT) laws.

Legitimate Interest

Continuous improvement of platform usability, IT security of our infrastructure, and fraud prevention.

Explicit Consent

Granted when accepting optional audience measurement cookies or subscribing to our informative communications.

4. Categories of Personal Data Collected

As part of assessing and setting up your loan request, we may collect the following categories of data:

1 Identity and Civil Status Data

Last name, first name, date and place of birth, nationality, home postal address, landline and mobile phone numbers, email address.

Purpose: Formal identification, contract drafting, and secure correspondence.

2 Financial, Assets, and Creditworthiness Data

Net monthly income, pay stubs, tax notices, ongoing loan repayments, recurring expenses, bank details (IBAN/BIC), and creditworthiness assessment.

Purpose: Calculation of repayment capacity, disposable income, and credit risk analysis.

3 Professional Data

Employment status (Permanent, Temporary, Self-employed, Civil Servant, Retiree), work seniority, employer or company name, and business sector.

4 Technical and Connection Data

Anonymized IP address, form timestamp data, operating system type, session identifiers, and technical security logs.

5. Data Disclosures & Third-Party Recipients

Your personal data is strictly confidential. It is disclosed only to qualified recipients who strictly require it to finalize your financing:

Banking Partners and Lending Institutions: Credit institutions and partner banks responsible for granting the requested loan.
Secure Technical Providers: Certified hosting providers, SMS confirmation delivery services, and legal timestamping solutions.
Administrative and Judicial Authorities: Only upon legally served judicial requests or within the framework of our anti-money laundering reporting obligations.

No Data Sale:

We solemnly commit to never selling, renting, or transferring your personal information to data brokers or third parties for external marketing purposes.

6. Purposes of Data Use

Collected data is used exclusively for the following purposes:

Application review and structuring: Assess your creditworthiness, prepare the request, and obtain loan approval at the best rate.
Customer relationship management: Notify you via email or phone regarding pre-approval decisions and fund disbursements.
Fraud prevention: Prevent identity theft and ensure the validity of submitted documents.

7. Security & Confidentiality Measures

We apply top-tier IT security standards to protect your information against loss, theft, disclosure, or unauthorized alteration:

Systematic data flow encryption via SSL / TLS protocol (256-bit HTTPS).
Database storage on servers hosted within the European Union.
Physical and logical access controls strictly restricted to authorized staff only.

8. Your Personal GDPR Rights

In accordance with GDPR regulations, you have the following rights regarding your data:

Right of Access (Art. 15) Obtain confirmation that your data is being processed and receive a complete copy.

Right to Rectification (Art. 16) Request the update or correction of inaccurate or incomplete data.

Right to Erasure (Art. 17) Obtain the deletion of your personal data, subject to legal retention obligations.

Right to Data Portability (Art. 20) Receive your data in a structured, machine-readable format.

9. Data Retention Periods

Your data is retained only for the duration strictly necessary for the intended purposes:

Finalized loan files: Retained for 10 years in compliance with banking and legal limitation periods.
Unsuccessful or unpursued applications: Deleted after a maximum of 12 months.
Billing and accounting data: Retained for 10 years according to the Commercial Code.

10. DPO Contact & Right to Appeal

To exercise any of your rights or for any information request regarding the protection of your personal data, you can send an email directly to our Data Protection Officer (DPO):

Data Protection Officer (DPO):

NOVARA FINANCE — Bd de l'Empereur 1000 Bruxelles, Belgique/470 Avenue du Mont-Royal E

GDPR Email Address: rgpd@novara-finance.com

If, after contacting us, you feel that your GDPR rights are not being respected, you have the right to lodge a complaint with the competent national supervisory authority (CNIL in France: www.cnil.fr or ICO in the UK: www.ico.org.uk).