Privacy Policy

Last updated: 15 October 2026

This policy explains how Investor Access processes the personal data of the people it deals with: investors, executives and representatives of companies taking part in its events, prospects, visitors to investoraccess.fr and users of the event.investoraccess.fr platform (together, the “Site”). It is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.

1. Data controller

Investor Access, SAS with share capital of EUR 40,000, 128 rue La Boétie, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 892 379 330.
Contact for any question about your data: contact@investoraccess.fr.
Investor Access has not appointed a data protection officer.

2. Data processed and sources

Depending on your relationship with Investor Access, we process the following categories of data:

  • Identification and contact details: title, surname, first name, job title, employer, business email address and phone number, country, language;
  • Professional profile: biography, photograph, LinkedIn profile; for investors, investor type, investment strategy and universe, assets under management, companies followed or held;
  • Event participation: registrations, preferences, meetings requested and held, companies or investors met, exchanges with our team;
  • Platform account: username, encrypted password, connection logs;
  • Images: photographs and videos taken at events;
  • Billing: contact details of the persons in charge of invoicing and payment;
  • Enquiries: information sent through the contact form or by email.

This data is collected directly from you, from your employer (in particular when a company registers its representatives for an event), or from public sources (company websites, regulatory filings, professional databases, LinkedIn).

Fields marked as mandatory upon registration are required to organise your participation. Without them, your participation cannot be organised.

3. Purposes and legal bases

PurposeLegal basis
Creating and managing your platform account; organising events and meetings; preparing schedules; sharing your profile with the participants you meetPerformance of a contract or of pre-contractual steps; where the contract is concluded with your employer, legitimate interest of Investor Access and your employer in performing it
Promoting events: publishing the name, job title, biography and photograph of representatives of participating companiesLegitimate interest, under the contract concluded with the participating company
Business-to-business marketing by email or phone about our events and servicesLegitimate interest; you may object at any time, in particular via the unsubscribe link included in every email
Answering your enquiriesPre-contractual steps or legitimate interest
Taking and publishing photographs and videos at events (Site, social media, presentation materials)Legitimate interest in illustrating our events; participants are informed on site and may object or request removal of their image
Invoicing, accounting and compliance with our legal obligationsLegal obligation
Site security, prevention of fraud and unauthorised accessLegitimate interest
Internal participation statistics and service improvementLegitimate interest

Investor Access does not take any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

4. Recipients

Your data may be accessed by:

  • authorised Investor Access staff, to the extent required by their duties;
  • other event participants, to the extent necessary to organise meetings: investors receive the profiles of the company representatives they meet, and vice versa;
  • our service providers acting on our behalf: hosting (o2switch, France), platform and contact database management, email delivery, office and video-conferencing tools, chartered accountant. These providers are contractually bound to process data only on our instructions and to keep it secure;
  • event venues and partners, to the extent necessary to manage access;
  • administrative or judicial authorities, where required by law.

Investor Access does not sell your personal data.

5. Transfers outside the European Union

The Site and the platform are hosted in France. Some service providers, for example for email, office or video-conferencing tools, may process data outside the European Economic Area. Such transfers are then governed by an adequacy decision of the European Commission or by the standard contractual clauses adopted by it. A copy of these safeguards may be obtained on request at the address given in section 1.

6. Retention periods

DataPeriod
Platform accountWhile the account is in use, then deleted after 3 years of inactivity
Clients and participants (company representatives, investors)Duration of the relationship, then 3 years from the last contact
Prospects3 years from collection or from the last contact initiated by the prospect
Contact form enquiries3 years from the last contact
Event photographs and videos5 years from the event
Invoices and accounting records10 years (Article L.123-22 of the French Commercial Code)
Connection logs12 months
List of persons who objected to marketing3 years from the objection

Data may be kept longer where necessary for the establishment, exercise or defence of legal claims.

7. Security

Investor Access implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or destruction, including access control, encrypted passwords, security updates and backups.

8. Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to data portability, as well as the right to object at any time to processing based on our legitimate interest, in particular to marketing. Where processing is based on your consent, you may withdraw it at any time. You may also set out instructions regarding the handling of your data after your death.

To exercise these rights, write to contact@investoraccess.fr or to Investor Access, 128 rue La Boétie, 75008 Paris, France. If we have reasonable doubts about your identity, we may ask for proof of identity. We will reply within one month.

You may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the supervisory authority of your country of residence.

9. Cookies

The Site only uses cookies that are strictly necessary for its operation: session, security, language preference and authentication on the platform. These cookies do not require your consent.

Fonts are hosted on our own servers, so no data is sent to third parties when they load. The Site does not use any audience measurement, advertising or social media cookies. Should such tools be added, your consent would be obtained beforehand and could be withdrawn at any time.

Links to LinkedIn or Google Maps take you to those services, which apply their own policies.

10. Changes to this policy

Investor Access may amend this policy, in particular to reflect legal changes or changes to its services. The date of the latest update is shown at the top of this page.

In case of discrepancy between the French and English versions, the French version prevails.