PERSONAL DATA AND COOKIES POLICY

POLICY COVERING THE PROTECTION OF PERSONAL DATA APPLYING TO THE PRODUCTS AND SERVICES OF THE LYXOR GROUP

This policy applies to all personal data processed by entities belonging to Lyxor Group1 acting as the data processor.

The Lyxor Group attaches great importance to the protection of your personal data. Whenever you provide us with personal data, we will handle it in accordance with the Policy set out below and with the applicable legal and statutory provisions.

We act as the data processor when processing your personal data within the framework of our portfolio management activities. The main aim of this policy is to inform you about the purposes of such processing, how long we keep your data for, your rights and how to exercises these rights.

What personal data do we process?

We only collect the personal data necessary for the conduct of our activities and that allow us to introduce you to our products and services, whether you are a potential client, a client, a visitor to our websites or a service provider.

We may collect different categories of personal data such as, in particular, your last name, first name, IP address, postal and email address, telephone number, nationality, place and date of birth, ID card or passport number.

Why and on what legal bases do we use your personal data?

When you browse our website, we may collect some of your personal data and specifically your IP address. In some cases, you will also provide us with your last name, first name, telephone number and email address by completing forms or via contact pages, in particular for the following purposes:

• Managing your connection and browsing. Your personal data may be retained for a period of one (1) year, counting from the date on which your data were collected.
   
• Replying to your requests sent via the website. Your personal data may be retained for a period of three (3) years, counting from the last contact date;
   
• Providing news relating to our products and services by means of newsletters. Your personal data may be retained until you unsubscribe; and
   
• Commercial prospection. Your personal data may be retained for a period of three (3) years, counting from the date on which business relations ended, or the date on which a potential client last contacted us.

Furthermore, we may process your personal data for the following purposes:

• To comply with our legal and statutory obligations, among which:

• combatting money laundering and the financing of terrorism, and in particular verifying and updating "Know Your Customer – KYC" data. Your personal data may be retained, as part of the KYC process, for a period of six (6) years, counting from the date on which business relations ended;

• compliance with the applicable legislation governing international sanctions and embargos. Your personal data may be retained for a period of five (5) years, counting from the date on which business relations ended;
   
• combatting tax fraud, complying with obligations regarding tax returns and declarations. Your personal data may be retained for a period of ten (10) years, counting from the declaration;
   
• compliance with the regulations associated with financial markets by virtue of which we need, in particular, to:
   
• carry out due diligence operations. Your personal data may be retained for a period of five (5) years, counting from the date on which business relations ended;
   
• meet our reporting obligations to the competent Authorities. Your personal data may be retained for a period of five (5) years, counting from the date on which business relations ended;
   
• record conversations and communications regardless of their media (electronic or paper correspondence, faxes, telephone interviews, etc.) Depending on the cases covered by the regulations, your personal data may be retained for a period of seven years, counting from the date on which they were recorded;
   
• in replies to official requests from duly authorised public or judicial authorities. Your personal data may be retained for a period of five (5) years, counting from the date of the reply;
   

• To assist you and reply to your requests made via our websites or addressed to us by email or on the telephone, especially so as to provide you with information relating to our products and services. Your personal data may be retained for a period of three (3) years, counting from the date on which you last contacted us;
   
• To monitor and manage the business relations we have with each of our clients and potential clients. Clients' personal data may be retained for a period of three (3) years, counting from the date on which business relations ended; personal data relating to a potential client may be retained for a period of three (3) years, counting from the date on which they were collected or the date on which a potential client last contacted us.
   
• To provide you, under certain conditions, with the contact details of our portfolio managers. Your personal data may be retained for a period of three (3) years, counting from the date of your last connection to the relevant website;
   
• To provide news relating to our products and services by means of newsletters. Your personal data may be retained until you unsubscribe;
   
• To carry out commercial prospection, subject to you exercising your right of objection, by informing you, in particular, of our news, if that could be of interest to you (sales events, updates or additional publication about our products an services...). Your personal data may be retained for a period of three (3) years, counting from the date on which business relations ended, or the last date on which a potential client last contacted us;
   
• To combat fraud. Your personal data may be retained for a period of ten years, counting from the date on which the judicial file was closed;
   
• To manage our relations with the press. If you are a journalist, your personal data may be retained for a period of three (3) years, counting from the last contact date.

Your personal data are processed with respect for your fundamental freedoms and rights, with regard to:

• the execution of a contract,
   
• compliance with a legal or statutory obligation incumbent upon us,
   
• the pursuit of our legitimate interests, or
   
• obtaining explicit consent from you, which we will seek in the event of the personalisation, targeting and/or optimisation of our offers and services. You can, therefore, withdraw your consent at any time.

We may also aggregate your data in order to establish anonymised marketing reports.

Your personal data may be retained for the period necessary to achieve the purpose for which they were collected as referred to above, within the prevailing time limits. They will subsequently be deleted. Exceptionally, these data may be stored to manage ongoing complaints and disputes, as well as to meet our legal or statutory obligations and/or to reply to requests from duly authorised authorities.

Accounting data may be retained for a period of ten (10) years in accordance with the applicable legislation.

Communication with third parties

Lyxor is likely to communicate your personal data to its partners and distributors, as well as to its subcontractors and providers, within the limits necessary to achieve the purposes set out above.

Lyxor may also communicate your data to meet its legal or statutory obligations, or to respond to requests from authorities duly authorised to make such requests.

Transfer of personal data outside the EEA

Due, in particular, to the international dimension of Lyxor Group and in order to provide our services, the processing referred to above is likely to involve the transfer of personal data to non-member countries of the European Economic Area (EEA) whose laws on personal data protection differ from those of the European Union. In this case, a precise and demanding framework, complying with the models adopted by the European Commission, as well as appropriate security measures, have been put in place to ensure the protection of personal data.

Transfers of personal data outside the EEA take place in conditions and with guarantees suitable for ensuring the confidentiality and security of such data in accordance with the applicable legislation. To this end, we implement all the appropriate technical and organisational measures to ensure the security of your personal data which could be communicated to the authorised administrative and judicial authorities in the country concerned, in particular concerning the fight against money laundering and the financing of terrorism, the fight against fraud and the determination of a person's tax status.

What are your rights and how can you exercise them?

You have several rights when it comes to protecting your personal data:

• Rights of access and rectification,
   
• Right to erasure,
   
• Right to limitation in time with regard to data processing, and
   
• Right to data portability.

You can also object at any time, for reasons relating to your specific situation, to your personal data being processed. It is stated that the exercise of some rights may result, on a case-by-case basis, in it being impossible for Lyxor to provide a product or a service.

You can also, at any time and free of charge and without having to provide reasons for your request, object to your data being used for commercial prospection or being communicated to third parties for the same.

You can exercise your rights by contacting the Personal Data Protection Officer at the following address client-services-etf@lyxor.com.

You have the right to complain to the National Commission for Data Protection (Commission Nationale de l’Information et des Libertés (CNIL)), the supervisory authority responsible for ensuring compliance with personal data protection obligations.

How do we guarantee the security of your data?

We do our utmost to implement technical and organisational measures designed to protect your data. We insist that our staff and all third parties who work for us observe strict standards regarding the security and protection of information and meet contractual obligations under which they commit to protecting all personal data and applying strict measures regarding the transfer of data.

How can you find out about the changes to the Personal Data Protection Policy?

This Policy may be updated at any time without notice or systematic notification.

If you have printed or saved this Policy, please consult the latest version of the Policy available on our websites.

How can you contact us?

If you have any questions about the use of your personal data within the framework of this Policy, please contact the Data Protection Officer by writing to the following address client-services-etf@lyxor.com.

COOKIES GUIDE: Privacy Policy

The website uses cookies and similar technologies.

What is a cookie?

A cookie is a text file that may be stored on your internet browser when you visit a website. A cookie file allows its transmitter to identify the device on which it is stored, during the period of validity or storage of the said cookie.

Which cookies do we use?

We use the cookie types designed for the purposes set out below:

Required cookies

These cookies are necessary for our website to function properly. They contain uniquely identifying information and by disabling them or deleting them, certain processes may not work properly. These cookies relate strictly to the functioning of our website and do not require the information and prior consent of a user to be deposited on his or her terminal.

 

Functionality cookies

These cookies are not essential to the browsing of our website, but they help optimise its performance and give the user access to specific features. Placing cookies on the user’s device is the easiest and fastest way to customise and improve the user experience.

Analytics cookies

Analytics cookies are used to track visitors on our website. They are essential to help our team measure the performance of our websites and optimise it.

These cookies are:

Marketing cookies

These cookies are used to better target advertising to a user (behavioral targeting). They are served by our marketing partners and other third-party companies and help deliver a personalised user experience throughout the website.

These are some examples of marketing cookies:  

Third party cookies

The generation and use of cookies by third parties are governed by the cookies’ policies of these third parties. We provide information on the object of the cookies of which we are aware and on the choices you have regarding these cookies.

For the third-party cookies, there are two kinds of them:
 

• Google Analytics’ Cookies: They are on the website to track the pages viewed and the user events such as clicks, pdf views. Their purpose is to give a clear overview of the visitors’ journey, which is a fundamental factor for the continuous improvement of the website content.
• Marketing Cookies: They are mainly about product pages views that represent KPIs for marketing. Their goal is to identify the eventual products that can be interlinked from a user perspective to develop a recommendation system.

In Lyxor ETF’s website, there are cookies related to the following marketing companies:

• Doubleclick (owned by Google): domain is doubelclick.net
• Flashtalking: domain is flashtalking.com
• Hotjar: domain is hotjar.com
• Marketo: domain is lonrtp1.marketo.com

 

How to refuse / delete cookies?

Saving a cookie to a device is essentially dependent on the wishes of its user who can express his/her consent and modify it at any time, free of charge.

• If you have accepted the use of cookies in your web browser, cookies integrated in the pages and content that you have visited may be stored temporarily in a dedicated area of your device.
• If you refuse to allow cookies to be stored in your device, or if you delete those that are stored, you will no longer benefit from a number of our site's features.

This is how to accept/decline or delete the cookies on our website:

Setting up your browser

Most browsers accept cookies by default. However, you can decide to block these cookies or ask your browser to warn you when a site attempts to implement a cookie on your device.

To change your browser's cookie management, you can change the settings in the privacy tab.

Each browser is configured differently for managing cookies and choices. The configuration is described in your browser's help menu; consult it to find out how to modify your cookie preferences.

For Internet Explorer

In Internet Explorer, click the Tools button, then select Internet Options.
In the General tab, under Browsing History, click Settings.
Click the Show Files button.
Click the Name column header to sort the files in alphabetical order, and then go through the list until you see files beginning with the prefix "Cookie". (All cookies have this prefix and usually contain the name of the website which created the cookie).

For Firefox

Go to the "Tools" tab of the browser then select the Options menu.
From the panel to the left, select Privacy & Security
Go to the section Cookies and Site Data:

• To delete cookies: click on Clear data, select the data you would like to delete and click on Clear
• To manage cookies: click on Manage data then click on the cookie you would like to manage and then choose to Remove selected or Remove All.

For Safari (Safari 5.1 and later)

• In Safari, from the Safari menu, select Preferences....
• In the Safari preferences window, click Privacy.
• To manage cookie settings, next to "Block cookies", select “From third parties and advertisers”, Always, or Never.
• To view or remove individual cookies, click Details.... Select the cookie to delete and click Remove.
• To delete all cookies, select Remove All Website Data... In the window that appears, select Delete.

For Google Chrome

Click the Tools menu icon.
Select Options.
Click the Advanced Options table and go to the "Confidentiality" section.
Click the Show cookies button.
Select them and delete them.
Click "Close" to return to your browser.

Microsoft Edge

To delete cookies:

1. Open the new Microsoft Edge and then select Settings > Privacy and services.
2. Under Clear browsing data, select “Choose what to clear” button.
3. Under Time range, choose a time range.
4. Select Cookies and other site data, and then select Clear now.

To view cookies :

1. Open Microsoft Edge and then select Settings > Site permissions.
2. Select Cookies and site data. Here you can set specific controls for cookies.
3. Select See all cookies and site data to view all cookies saved on your device.

The cookie stored when using the sharing buttons is also included on this platform.

Important note: Taking your wishes into account depends on the use of cookies. If you delete all the cookies stored on your device (via your browser), we (or our providers) will not know you have chosen this option.

How to consent / manage cookies?

The user of a Lyxor ETF websites has the possibility to:

Accept all cookies

Lyxor ETF websites require a valid consent from the users to the cookies. Namely, the consent is (a) freely given (no cookies walls), (b) specific (users are able to consent the type of cookies, (c) informed (the information provided to the users is comprehensive and visible and (d) unambiguous (consent is given through a clear affirmative action by the user given prior notification of the consequences of his choice and having the means to exercise said choice).

Manage cookies

Lyxor ETF websites allow the user to manage the cookies per category (e.g. analytical cookies, functionality, marketing cookies, etc.) and freely decide which category to accept.

Reject all cookies

Lyxor ETF websites allow the user to refuse or to withdraw the consent at any time.

Links to websites managed by third parties

The Lyxor ETF website can, from time to time, contain links redirecting you to the websites of our partners, to advertising sites or other websites that can contain important information. If you use one of these links, please be aware that these sites have their own cookie policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

More information about cookies

See the CNIL website: http://www.cnil.fr/vos-droits/vos-traces/les-cookies/