Nota legale

Data dell’ultimo aggiornamento : 10/10/2025

Sis ID is a Fintech company specializing in the fight against bank transfer fraud (hereinafter “SIS”), committed to protecting your privacy and personal data.

This privacy policy aims to inform you in a clear and transparent manner (i) about how SIS collects and processes your personal data through this website (hereinafter the “Website”), and (ii) about the possibility of exercising your rights over this data.

By using the Website and providing SIS with your personal data, you agree to the practices described below.

Protection of your Personal Data and role under the GDPR

When you use the features offered by the Website, SIS may process personal data about you.

Personal data refers to any information relating to an identified or identifiable natural person, directly or indirectly (e.g., last name, first name, phone number, email address, IP address, online identifier, etc.) (hereinafter “Personal Data”).

SIS undertakes to take all necessary measures to ensure the security and confidentiality of your privacy and your Personal Data, in accordance with the legal and regulatory provisions in force applicable to the processing of personal data and, in particular, French Law No. 78-17 of January 6, 1978 on information technology, files, and civil liberties, as amended by French Law No. 2004-801 of August 6, 2004 (hereinafter “the French Data Protection Act”), and by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter “the GDPR”).

SIS acts as Data Controller insofar as it determines the purposes and means of processing your Personal Data.

Use of Personal Data and Legal Bases

The Personal Data processed by SIS is provided by you when you enter it while browsing the Website.

SIS may collect the following Personal Data:

• Contact details such as: surname, first name, position, company, postal address, telephone number, and email address;
• Information about you that is publicly available;
• Technical data relating to your browsing device and access data automatically collected when you interact with SIS services: IP address, connection logs, geographical location, browser type, connection duration, traffic data, etc.

SIS does not process any sensitive data within the meaning of the GDPR (e.g., racial or ethnic origin, political opinions, health, sexual orientation, etc.).

SIS only processes your Personal Data for the purposes set out in this privacy policy or those specifically indicated at the time of collection, in accordance with the provisions of the GDPR.

The table below details the categories of Personal Data processed, the purposes of the processing, and the corresponding legal bases.

Purposes of processing	Legal bases	Data processed
Download SIS e-books, white papers, and resources	Consent	Last name*, first name*, email address*
Manage newsletter subscriptions	Consent	Last name*, first name*, email address*
Management of contact forms and requests for information	Legitimate interest, performance of pre-contractual measures, performance of the contract	Last name*, first name*, email address*, phone number
Ensuring the security of SIS services and information systems	Legitimate interest	Last name*, first name*, email address*, phone number, company
Improving the quality of SIS products and services and ensuring their management	Legitimate interest, performance of the contract	Traffic data
Informing the user of new features or services developed in connection with the Website that may improve the user experience	Performance of the contract, legitimate interest	Last name*, first name*, email address*
Testimonial on the Website	Consent	Last name*, first name*, email address*, professional position
Management of cookies and other trackers	Consent	IP address, logs, and connection terminals you use, geographic location, browser type, connection duration, traffic data, etc.
Traffic statistics and audience measurements	Consent	Last name*, first name*, email address*, and pages visited

* Mandatory Personal Data

Recipients of Personal Data processed

SIS only transmits your Personal Data to teams and departments authorized to know its content.

In certain cases, your Personal Data may be shared with SIS partners in the context of joint projects (white papers, e-books, etc.).

For certain features of the Website, your Personal Data may be further subcontracted. However, SIS will not disclose your Personal Data to external service providers for advertising purposes under any circumstances.

Your data protection rights

In accordance with applicable legislation, you may, depending on the legal basis for the processing in question, exercise all or part of the following rights:

• Right of access to the Personal Data collected about you;
• Right to request the rectification of Personal Data collected;
• Right to object to the processing of Personal Data collected;
• Right to request the erasure of Personal Data collected, if there is no legal reason why SIS should or could retain it;
• Right not to be subject to individual decision-making based solely on automated processing such as profiling;
• Right to withdraw your consent to the processing of Personal Data at any time (in such a case, it is likely that you will no longer be able to access all or part of certain services and/or features offered by the Site);
• Right to request the portability of the Personal Data collected;
• Right to lodge a complaint with the competent authority (Commission Nationale de l’Informatique et des Libertés in France).

You may exercise the above rights by sending an email to the following address: dpo@sis-id.com.

Personal Data hosting

Your Personal Data is hosted in the European Union.

Transfer of data outside the European Economic Area  

The Personal Data we collect for the purposes mentioned above may be transferred, stored, and/or processed outside the European Economic Area (EEA), in particular in the United States.

In the event that Personal Data is transferred outside the EEA, SIS ensures that:

• the entity processing the data is located in a country that offers a sufficient level of protection for Personal Data within the meaning of the European Commission (countries benefiting from an adequacy decision);
• or, failing that, the transfer is carried out in accordance with and on the basis of standard contractual clauses as published by the European Commission in their latest version and, where necessary, additional technical and organizational measures are implemented.

Duration of storage of Personal Data

Your Personal Data is not kept longer than necessary, in accordance with the purposes described in this policy, in accordance with the principle of storage limitation.

The length of time we store Personal Data may vary depending on the purpose of the processing and will be reviewed regularly.

Security of Personal Data

SIS implements appropriate technical and organizational measures to protect your Personal Data in order to prevent unauthorized access, loss, or alteration (integrity, security, confidentiality).

Cookie Policy

SIS’s cookie policy is available on our Website

Langage Notice

This privacy policy is provided in English for convenience. In the event of any inconsistency or ambiguity, the French version of the privacy policy shall prevail. The French version is available on our Website when you have selected French as the applicable language.

Changes to this privacy policy

As part of the development of this Website, as well as the implementation of new technologies and to improve our service to you, changes to this privacy policy may be necessary.

We invite you to regularly review this privacy policy, which may be updated at any time without notice.

These changes will take effect and be enforceable as soon as they are published.

If you have any questions about data protection at SIS, you can contact our data protection officer at any time by sending an email to the following address: dpo@sis-id.com.