Legal
Privacy Policy
Last updated: March 2026
SAS Cardea Capital ("Cardea Capital", "we", "us", or "our") is a société par actions simplifiée registered in France. We are committed to protecting your personal data in compliance with Regulation (EU) 2016/679 (the "GDPR") and French Law No. 78-17 of 6 January 1978 as amended (the "Loi Informatique et Libertés").
1. Data Controller
SAS Cardea Capital is the data controller for all personal data collected through this website and in connection with our investor relations activities.
Registered address: 78 Avenue des Champs-Élysées, 75008 Paris, France
SIREN: 994 869 030 — RCS Paris
2. Data We Collect
We may collect and process the following categories of personal data:
- Identity data: full name, date of birth, nationality, place of birth
- Contact data: email address, phone number, postal address
- Financial data: investment amounts, source of funds, bank details
- Identity verification data: passport or national ID copies, proof of address
- Communication data: messages sent through our contact form or by email
3. How We Use Your Data
- Contractual necessity: to onboard you as an investor and manage your investment relationship
- Legal obligation: to comply with KYC/AML obligations under French and EU law (Directive 2015/849/EU)
- Legitimate interest: to respond to inquiries, send investor communications, and maintain our business records
- Consent: where you have expressly agreed to receive marketing or informational communications
4. Legal Bases for Processing
All processing is carried out on one or more of the following legal bases under Article 6 GDPR: performance of a contract, compliance with a legal obligation, legitimate interests, or your explicit consent.
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described above, and in any case for a minimum of 5 years following the end of our business relationship, as required by French anti-money laundering regulations.
6. Data Sharing
We do not sell your personal data. We may share it with:
- Regulatory authorities (AMF, Tracfin) when legally required
- Our service providers acting as data processors (IT, legal, compliance) under strict confidentiality obligations
- Professional advisors bound by professional secrecy obligations
7. International Transfers
Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.
8. Your Rights
Under GDPR, you have the right to: access, rectification, erasure, restriction of processing, data portability, and to object to processing. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr.
To exercise your rights, contact us at: contact@cardeacapital.com
9. Cookies
This website may use technical cookies strictly necessary for its operation. No advertising or tracking cookies are used without your prior consent.