1. Data controller
Lunoa SAS is responsible for processing your personal data. Our Data Protection Officer (DPO) can be reached at: contact@lunoa-bank.com
2. Data collected
As part of our services, we collect the following data:
- Identification data: name, first name, date and place of birth, nationality, photo
- Contact data: postal address, email address, phone number
- Financial data: transaction history, balance, IBAN, card data
- Connection data: IP address, connection logs, browsing data
- Biometric data (optional): fingerprint or facial recognition for authentication
3. Purposes of processing
Your data is processed for the following purposes:
- Opening, managing and closing your bank account
- Execution of payment transactions
- Fraud prevention and anti-money laundering (legal obligations)
- Identity verification in accordance with KYC obligations
- Improving our services and personalising your experience
- Commercial communication (only with your explicit consent)
4. Legal basis for processing
- Contract performance: payment processing, account management
- Legal obligation: anti-fraud and anti-money laundering, tax obligations
- Legitimate interest: service security, fraud prevention
- Consent: marketing communications, use of non-essential cookies
5. Retention period
Your data is retained:
- For the entire duration of your contractual relationship with Lunoa
- 5 years after account closure for anti-money laundering data
- 10 years for accounting and financial data (legal obligation)
- 3 years for commercial prospecting data after the end of the commercial relationship
6. Data sharing
Your data may be shared with:
- Our technical service providers (hosting, payment processing) under GDPR-compliant subcontracting contracts
- Competent authorities in case of legal obligation
- Our network of partner points for cash transaction management
We never sell your personal data to third parties for commercial purposes.
7. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right of rectification: correct inaccurate data
- Right to erasure: delete your data under the conditions provided by the GDPR
- Right to data portability: receive your data in a structured format
- Right to object: object to certain processing
- Right to restriction: temporarily limit the processing of your data
To exercise these rights, contact our DPO: contact@lunoa-bank.com. In the event of a dispute, you may contact the competent supervisory authority.
8. Data security
Lunoa implements appropriate technical and organisational measures to protect your data: AES-256 encryption, two-factor authentication, continuous access monitoring, regular training of our teams.
