Data Protection Policy
Last updated : 28/03/2026
IM CONSEILS is committed to respecting privacy and protecting the data of its clients and prospects, and is dedicated to respecting the fundamental freedoms and rights of each individual.
This data protection policy reflects the commitments of IM CONSEILS in its daily activities for the responsible use of your personal data (hereinafter referred to as "personal data").
Personal data means any information that can be related to an identified or identifiable natural person, directly or indirectly.
This policy may be modified or supplemented at any time by IM CONSEILS, particularly to comply with any legislative, regulatory, case law or technological developments. In such cases, the date of its update will be clearly identified at the top of this policy.
Data Controller
IM CONSEILS
13 rue Faidherbe, 89000 Auxerre, France
Email: ion@ionconseil.com
Categories of Data Collected
Personal data may be collected directly from individuals or indirectly.
Standard Personal Data
In the course of its business, IM CONSEILS collects the following types of personal data:
- Identification (civil status, contact details)
- Personal life (lifestyle, family and marital status)
- Professional information
- Economic and financial information (assets, financial situation, income, tax returns, etc.)
Sensitive Data
In certain cases, IM CONSEILS also collects sensitive data, including:
- Social security number
- Health-related data (weight, height, health issues, disability, sick leave)
- Lifestyle habits (smoker/non-smoker, sports activities, travel abroad)
- Political exposure
Processing Purposes
IM CONSEILS collects your personal data in order to:
- Manage client requests and select suitable offers from its partners
- Maintain client relationships
- Conduct commercial prospecting activities
- Secure and improve the website
- Handle any requests relating to the use of personal data
Legal Basis for Processing
| Processing | Legal basis |
|---|---|
| Supplier management | Contract performance |
| Prospect management | Legitimate interest and consent |
| Client management | Contract performance and legal obligations |
Data Recipients
Within the strict limits of the processing carried out, we may share certain data with:
- Authorised personnel of IM CONSEILS in the performance of their duties
- Claims management delegates and insurance intermediaries
- Insurers
- Partners and service providers
- Subcontractors (IT maintenance, etc.)
- Persons involved in the contract (lawyers, accountants, etc.)
- Persons authorised as third parties (supervisory authority, auditors, etc.)
IM CONSEILS will not transfer personal data to third parties for their own use.
Data Transfers Outside the EU
IM CONSEILS undertakes not to transfer any of your personal data outside the European Union.
Data Subject Rights
In accordance with data protection regulations, you have the following rights:
- Right of access — obtain confirmation that your data is being processed and access it
- Right to rectification — obtain the correction of inaccurate or incomplete data
- Right to erasure — obtain the deletion of your data under certain conditions
- Right to restriction — request the suspension or extended retention of processing
- Right to object — object at any time to the processing of your data, particularly for commercial prospecting purposes
- Right to portability — receive your data in a structured, electronic format
- Post-mortem rights — define directives regarding the fate of your data after your death
Exercising Your Rights
You may contact IM CONSEILS at any time by post or email to exercise your rights:
IM CONSEILS
13 rue Faidherbe, 89000 Auxerre, France
Email: ion@ionconseil.com
IM CONSEILS undertakes to respond to your requests within one month of receipt. This period may be extended by two months in complex cases, with prior notification.
Data Security
Appropriate physical, logical and organisational security measures have been put in place by IM CONSEILS to ensure data confidentiality and prevent unauthorised access.
Data Retention
| Purpose | Retention period |
|---|---|
| Contract performance | 5 years after the end of the contract (10 years for life insurance contracts) |
| Prospect management | 3 years from the last action by the prospect |
Breach Notification
IM CONSEILS will notify the supervisory authorities within 72 hours in the event of a personal data breach likely to create a risk to your rights and freedoms. You will also be informed if this breach presents a high risk.