Privacy policy
Last updated: 21 October 2026
1. Data controller
ATENA FINANCES, a French SAS registered with the Paris Trade and Companies Register under number 882 370 745, with its registered office at 6 rue Jean Goujon, 75008 Paris, France, is the controller for the processing described here. Questions and rights requests may be sent to [email protected] or by post to that address, for the attention of Laurent Lachkar.
2. Data concerned
The form collects your name, email address and message, which are required to handle your enquiry. Company, telephone number and selected subject are optional. The language used is also transmitted. The form cannot be submitted without the required fields. Technical data, including IP address, browser characteristics, dates and request information, may be processed to route communications, protect the website and limit abuse. The website offers no user accounts or payments and does not request payment card details.
3. Purposes and legal bases
Form information is used to understand your needs, answer your enquiry and arrange further discussions. Where your enquiry concerns a potential engagement, processing is based on pre-contractual steps taken at your request; other enquiries are handled on the basis of Atena Finances’ legitimate interest in responding to its contacts. Website security and abuse prevention rely on the legitimate interest in protecting services and communications. Data may also be retained where necessary to meet a legal obligation or establish, exercise or defend legal claims. Sending an enquiry does not automatically subscribe you to a newsletter.
4. Recipients and service providers
Enquiries are intended for Laurent Lachkar and authorised Atena Finances personnel only. Technical providers may process data needed for their services: Cloudflare for website hosting, routing and security; Resend (Plus Five Five, Inc.) to send form notification emails; and SITE123 and its mail infrastructure to receive and store emails. Reading messages in Outlook also involves the email services configured for that purpose. Data is not sold. It may be disclosed to authorities where required by law.
5. Location and international transfers
Processing is not guaranteed to take place exclusively within the European Union. Cloudflare operates an international infrastructure; Resend states that it processes, among other things, message content and logs in the United States. Providers and their subprocessors may operate in other countries. Cloudflare’s and Resend’s processing terms provide transfer safeguards, including standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. You may request further details about applicable safeguards using the contact address above. Information about the safeguards applicable to email processing may also be requested from Atena Finances.
6. Retention
Enquiries that do not lead to a contract are retained for as long as needed to handle them and follow up discussions, for no more than three years after the last exchange with you, then deleted or anonymised unless longer retention is justified. If a client relationship is established, documents needed for the engagement, legal obligations or legal claims are subject to the relevant retention periods; accounting records, where applicable, are retained for ten years. Technical data and email delivery records are kept according to their purpose and provider settings; the three-year limit is not a standard retention period for all technical logs.
7. Security
Atena Finances uses appropriate security measures, including HTTPS encryption for exchanges with the website and restricted access to messages. No system guarantees absolute security. For initial contact, provide only relevant information and do not include sensitive data, passwords or detailed confidential documents.
8. Your rights
Subject to the conditions of the GDPR and French data protection law, you have rights of access, rectification, erasure, restriction and objection. Data portability applies where provided for by the GDPR. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. French law also allows you to give instructions concerning your data after death. Send requests to [email protected] and specify the right you wish to exercise. Proof of identity will only be requested where there is reasonable doubt. A response will normally be provided within one month; a reasoned extension may apply where legally permitted. You may lodge a complaint with the French data protection authority, the CNIL: https://www.cnil.fr/fr/plaintes.
9. Cookies and external links
The code of this website version does not include advertising tools, a LinkedIn tracking module or audience measurement tools that set non-essential cookies. Language selection uses links between pages. The security infrastructure may use strictly necessary technical mechanisms. If trackers requiring consent are introduced, they must remain disabled until you make an explicit choice, with refusal and withdrawal as accessible as acceptance. Continued browsing is not consent. LinkedIn is provided as an external link; its own privacy policy applies after you open it.
10. Updates
This policy describes the intended operation of the new website and may evolve as services change. The update date appears at the top of this page. Questions may be sent to [email protected].