Thank you for your interest in our company. You are currently browsing our website or have just filled in a contact form. In this respect, and in accordance with the General Data Protection Regulation (GDPR), we invite you to read this data protection policy, which informs you of the way in which your personal data is collected and processed, as well as of the cookies placed during your browsing.
PERSONAL DATA PROTECTION POLICY
1. PURPOSE
This personal data protection policy (hereinafter the "Policy") applies, without restriction or reservation, between the Data Subject and the Company in its capacity as Data Controller. The Data Subject browses the Company’s website and may, if they so wish, fill in a contact form in order to be contacted again with a view to buying, selling or renting a property.
The purpose of the Policy is to provide information concerning the way in which the Data Controller may collect and process the Data Subject’s Personal Data, in accordance with the legislation in force and in particular the General Data Protection Regulation No. 2016/679 and Law No. 78-17 (hereinafter the "Legislation"). This Policy also sets out the rights that Data Subjects hold over their Personal Data pursuant to the Legislation.
2. DEFINITIONS
Words and groups of words used in the Policy and whose first letter is capitalised have the meaning given to them below, whether used in the singular or the plural.
"Data Subject": means any natural person who browses the Company’s website and, where applicable, fills in a contact form there, with a view to obtaining information, buying, renting or selling a property, as long as they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
"Personal Data": means any information relating to the Data Subject and making it possible to identify them, directly or indirectly.
"Partners": means any natural or legal person, including real estate sites/portals, real estate agencies, agency networks, craftsmen, notaries, trustees, insurance firms and banks with whom the Company may collaborate in the course of its activity and who may receive communication of Personal Data.
"Data Controller": means the Company, which alone or jointly with others, determines the purposes and means of the Processing.
"Company": means the company Uzege Immobilier with a capital of 10000.000000, registered in the Trade and Companies Register under the number SAINT QUENTIN LA POTERIE 818 893 323 00035 and whose registered office is located at 172 avenue du 14 Juillet 30700 SAINT QUENTIN LA POTERIE, this company acting both for itself and for the member companies of its group as Data Controller.
"Processor": means any natural or legal person, public authority, agency or other body other than the Data Controller which processes Personal Data on behalf of the Data Controller.
"Third Party": means any natural or legal person, public authority, or other body other than the Company, its eventual Processors and Partners and the persons who are under their direct authority, who are authorised to process Personal Data.
"Processing": means any operation or set of operations performed or not using automated processes and applied to Personal Data or sets of Personal Data, such as collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, alignment or interconnection, restriction, erasure or destruction.
3. PERSONAL DATA PROCESSED, PURPOSES AND RETENTION
The Company processes the Data Subject’s Personal Data with a view to offering them its real estate services, and in particular purchase, sale or rental. In this process, the Data Subject has voluntarily communicated Personal Data to the Company so that the latter may contact them again.
| Purpose of the Processing | Data concerned | Legal basis | Retention period |
|---|---|---|---|
| Creation and management of Data Subjects’ accounts | First name, surname, email address, postal address, telephone, date of creation/deletion of the account, collection of consent, message, characteristics of the project and of the properties | Performance of the contract | For the duration of the contract |
| Commercial prospecting | First name, surname, email address, postal address, telephone, characteristics of the project and of the properties | Consent of the Data Subject | 3 years from the last contact initiated by the Data Subject |
| Management and follow-up of commercial relations | First name, surname, email address, telephone, message, characteristics of the project and of the properties, collection of consent | Performance of the contract | For the duration of the contract |
| Management of requests to exercise rights | Email address, telephone, copy of an identity document | Legal obligation | 5 years from the closure of the request |
| Management of job applications | Curriculum vitae data | Consent of the Data Subject | Up to 2 years from the last contact with the applicant |
In addition, the following Personal Data may be processed by the Data Controller:
[IL REVIENT À LA SOCIÉTÉ DE COMPLÉTER CETTE PARTIE SI NECESSAIRE]
The Company reserves the right to anonymise the data being Processed before deleting it.
4. MODALITIES OF COLLECTION AND PROCESSING OF PERSONAL DATA
The Data Subject’s Personal Data is collected while browsing the Company’s website, by means of cookies and other trackers under the conditions set out in Article 10 of this Policy, as well as, where applicable, through the information they voluntarily provide by filling in the contact form made available to them. No data is collected without the Data Subject’s knowledge.
5. RECIPIENTS OF PERSONAL DATA
The Company, its eventual Processors and, where applicable, the Company’s Partners, are the sole recipients of the Personal Data, in particular with a view to carrying out the Company’s services and to preventing and combating fraud.
The Company undertakes to require from its Processors and Partners sufficient guarantees as to the implementation of appropriate technical and organisational measures so that the Processing meets legal and regulatory requirements and guarantees the protection of the Data Subject’s rights. The Company works in particular with the following Processors and/or Partners: [IDENTIFIER LES SOUS-TRAITANTS ET/OU PARTENAIRES DE LA SOCIÉTÉ]
The Company may also communicate to any Third Party the Personal Data being Processed where a legal obligation to do so exists.
6. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
[À COMPLÉTER PAR LA SOCIÉTÉ SI CONCERNÉ]
In the event that certain tools or service providers used by the Company involve a transfer of Personal Data outside the European Union, the Company ensures that such transfer is governed by appropriate safeguards in accordance with Chapter V of the GDPR (in particular standard contractual clauses adopted by the European Commission or an adequacy decision).
7. RIGHTS OF THE DATA SUBJECT OVER PERSONAL DATA
The Data Subject benefits, according to the conditions and modalities and within the limits defined by the Legislation, from the following rights regarding Personal Data:
- Right of access: the Data Subject may obtain confirmation as to whether or not Personal Data concerning them is processed by the Company and, where it is, access to the said Personal Data, as well as certain information relating to the Processing of Personal Data and to the characteristics of such Processing;
- Right to rectification: the Data Subject may request the correction of Personal Data which they consider to be incomplete or inaccurate;
- Right to erasure: the Data Subject may, in certain cases provided for by the Legislation, request the erasure of their Personal Data (except where it is necessary for the performance of contractual relations with the Company, or necessary for the Company to comply with its legal or regulatory obligations);
- Right to restriction of Processing: the Data Subject may request the restriction of the Processing of their Personal Data and, in certain cases, request the marking of their Personal Data in order to limit any future Processing;
- Right to portability of Personal Data: the Data Subject may, in certain cases and under certain conditions provided for by the Legislation, request to receive the Personal Data concerning them or, where technically possible, that it be transferred to a third party in a machine-readable form (this right applies only to Processing based on the Data Subject’s consent or on the performance of contractual relations, carried out using automated processes);
- Right to withdraw consent: the Data Subject may withdraw their consent where the Processing is carried out on that basis, without such withdrawal affecting the lawfulness of the Processing carried out before its withdrawal;
- Right to define directives relating to the storage, erasure or communication of Personal Data after death: in the event of death brought to the Company’s knowledge, the Personal Data will be deleted (unless retention is necessary for reasons relating to legal and regulatory obligations and/or statutory limitation periods), after having been communicated, where applicable, to a third party possibly designated by the Data Subject;
- Right to object: the Data Subject may, in certain cases and under certain conditions provided for by the Legislation, object to the processing of their Personal Data. This right is absolute and unreserved where the processing is based on commercial prospecting: the Data Subject may object to it at any time and without justification. For other processing based on legitimate interest, objection is possible on grounds relating to their particular situation.
These rights are exercised by email at the following address: contact@uzege-immobilier.fr.
Upon receipt of such a request, it will be answered as soon as possible and in any event within a maximum period of one month from receipt of the request. Where necessary, this period may be extended by two months, taking into account the complexity and the number of requests received, in which case the applicant will be informed thereof.
In the event of reasonable doubt as to the identity of the Data Subject, they may be asked to provide additional information to confirm their identity and, where the situation so requires, a photocopy of an identity document bearing their signature. In such a case, the response times will be suspended pending receipt of the additional information necessary to identify the Data Subject.
The request may be submitted by the Data Subject or by a person specially mandated for that purpose, provided that this person provides proof of their identity and of the identity of the principal, of their mandate as well as of its duration and precise purpose. The mandate must also specify whether the agent may be the recipient of the response.
The Data Subject has the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the competent supervisory authority in France, at any time and independently of any prior step taken with the Data Controller. The CNIL may be contacted via its website https://www.cnil.fr or by post: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
8. SOLICITATION OF THE DATA SUBJECT
As part of its relationship with the Data Subject, the Company may send them commercial solicitations relating to its services and, where applicable, to those of the member companies of its group, regarding the purchase, sale or rental of real estate. These solicitations may be carried out by telephone and/or by electronic means (email) provided that the Data Subject has consented thereto.
9. TRACKING PIXELS IN EMAILS
Emails sent by the Company to the Data Subject may contain tracking pixels in order to know whether an email has been opened and on what date. These pixels, which pursue an exclusive purpose of security or of proper receipt of emails (deliverability), are exempt from consent in accordance with Article 82 of Law No. 78-17 of 6 January 1978 as amended. The Company therefore informs the Data Subject thereof.
10. COOKIES AND OTHER TRACKERS
While the Data Subject browses the Company’s website, cookies and other trackers may be placed on their terminal (computer, telephone, tablet, etc.). A cookie is a small file stored on the terminal which makes it possible, in particular, to recognise the Data Subject, to analyse their browsing and to adapt the content offered to them.
10.1. Purposes of cookies
The cookies placed by the Company pursue the following purposes:
- cookies strictly necessary for the operation of the site and for the provision of the services expressly requested by the Data Subject (for example, the operation of the contact form or the storage of their choices);
- audience measurement cookies intended to ascertain the Data Subject’s browsing within the site, in order to improve its operation and content;
- cookies allowing the reuse of browsing data within the MyAdapt solution, in order to offer the Data Subject properties and services matching their interests.
10.2. Consent of the Data Subject
In accordance with Article 82 of Law No. 78-17 of 6 January 1978 as amended, only cookies strictly necessary for the operation of the site or for the provision of a service expressly requested by the Data Subject are exempt from consent. The other cookies, in particular non-exempt audience measurement cookies and those allowing the reuse of data within the MyAdapt solution, are placed only after the prior consent of the Data Subject has been obtained. This consent, which results from a positive act, is obtained by means of a banner displayed on the first visit, allowing the Data Subject to accept or refuse cookies purpose by purpose, just as easily. The absence of a choice or the continuation of browsing cannot constitute consent.
10.3. Management and withdrawal of consent
The Data Subject may at any time modify their choices or withdraw their consent, as easily as they gave it, in particular through the cookie management module permanently accessible on the site. The withdrawal of consent does not affect the lawfulness of the processing carried out before it. The retention period of cookies not requiring the Data Subject’s consent does not exceed thirteen (13) months from the date they are placed. As regards the other cookies, their retention period does not exceed six (6) months.
11. SECURITY OF PROCESSING
The Company takes the appropriate technical and organisational measures to ensure a level of security suited to the Personal Data and to protect it against destruction, loss, alteration, misuse and unauthorised access, modification or disclosure, whether such actions are intentional or accidental.
The purpose of these measures is in particular to ensure the confidentiality, integrity, availability and resilience of information systems. They include, in particular, the encryption of data in transit and at rest, access control, regular backup policies and the awareness-raising of staff authorised to access Personal Data.
12. EVOLUTION OF THE POLICY
The Company reserves the right to modify this Policy from time to time. In the event of a substantial modification, the Data Subject will be informed of the new Policy. The Data Subject is invited to consult this Policy regularly in order to be aware of any modifications. The Data Subject may send their questions about this Policy to the following email address: contact@uzege-immobilier.fr.
