1. Data controller
The data controller is Bluewavefr SAS, registered with the Lyon Trade and Companies Register under number 921 458 663, with its registered office at 27 rue de la République, 69002 Lyon. Data Protection Officer: dpo@bluewavefr.com.
Last updated: 12 January 2026
Privacy Policy
This policy describes how Bluewavefr SAS collects, uses and protects the personal data of its visitors and clients in connection with its financial advisory and administrative support services.
2. Data collected
We collect only the data strictly necessary to deliver our services: identity (first name, last name), contact details (email, phone), and information about your tax and social situation when essential to processing your aid application. No banking data is stored on our servers.
3. Purposes
Your data is processed in order to: a) respond to your contact requests, b) process your applications for aid, tax credits and subsidies, c) send you, with your explicit consent, our monthly newsletter, d) comply with our legal, accounting and tax obligations.
4. Legal bases
Processing is based on the performance of a contract or pre-contractual measures (Article 6.1.b GDPR), your consent (Article 6.1.a GDPR) for the newsletter and non-essential cookies, and compliance with legal obligations (Article 6.1.c GDPR).
5. Retention periods
Prospect data: 3 years from the last contact. Client data: duration of the contractual relationship plus the legal accounting retention period (10 years). Newsletter data: until you withdraw your consent.
6. Recipients
Your data is accessible only to authorised Bluewavefr advisors. It may be transmitted to relevant authorities (DGFiP, CAF, regional bodies, Bpifrance) strictly within the scope of processing your file. No data is transmitted to commercial third parties.
7. Hosting
All our servers are hosted in France by OVHcloud (Roubaix). No transfer outside the European Union is performed.
8. Your rights
In accordance with the GDPR and the French Data Protection Act, you have rights of access, rectification, erasure, restriction, portability and objection. You can exercise these rights at any time by writing to dpo@bluewavefr.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
9. Security
Bluewavefr implements state-of-the-art technical and organisational measures: TLS 1.3 encryption, strong authentication for advisors, access logging, annual security audits.