Privacy Policy
Last updated: December 2024
1. Introduction and Scope
L'Immobilière de la Croix-Rousse ("we", "us", "our") is committed to protecting the privacy and personal data of visitors to our website boi356humanei.eu (the "Website"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Website or interact with us.
This policy applies to all personal data processed through our Website, including data submitted via the contact form and data collected automatically through cookies and similar technologies.
We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the French Data Protection Act (Loi Informatique et Libertés), and other applicable data protection legislation.
2. Identity of the Data Controller
The data controller responsible for processing your personal data is:
- Legal Name: L'Immobilière de la Croix-Rousse
- Legal Form: SARL (Société à Responsabilité Limitée – French Limited Liability Company)
- SIREN: 822 201 653
- SIRET (Head Office): 82220165300018
- VAT Number: FR79822201653
- Registered Address: 41 Rue Philippe de Lassalle, 69004 Lyon, France
- Main Activity: Real estate agency (NAF 68.31Z)
Important Notice: L'Immobilière de la Croix-Rousse is a French real estate agency. We are not a bank, credit institution, payment service provider, or investment firm. We do not offer financial products or services to the public.
3. Categories of Personal Data Collected
We collect and process the following categories of personal data:
3.1 Contact Form Data
When you submit an enquiry through our contact form, we collect:
- Full name
- Email address
- Country of residence
- Message content
3.2 Technical and Log Data
When you visit our Website, our servers may automatically collect:
- IP address
- Browser type and version
- Operating system
- Referring website (if applicable)
- Pages visited and time spent on pages
- Date and time of access
- Device information
3.3 Cookies and Similar Technologies
We use cookies and similar technologies to ensure the proper functioning of our Website and, with your consent, to collect basic analytics data. For detailed information about the cookies we use, please refer to our Cookie Policy.
4. Legal Bases for Processing
Under Article 6 of the GDPR, we process your personal data based on the following legal grounds:
4.1 Consent (Article 6(1)(a) GDPR)
We rely on your consent for:
- The use of non-essential cookies (e.g., analytics cookies)
- Processing your contact form submission to respond to your enquiry
You may withdraw your consent at any time by contacting us or adjusting your cookie preferences.
4.2 Legitimate Interests (Article 6(1)(f) GDPR)
We rely on our legitimate interests for:
- Operating and maintaining the security of our Website
- Preventing fraud and protecting against malicious activity
- Understanding how visitors use our Website to improve user experience
- Storing essential technical data (e.g., server logs) for security purposes
4.3 Legal Obligation (Article 6(1)(c) GDPR)
We may process personal data where necessary to comply with legal obligations, such as responding to lawful requests from public authorities or retaining records for tax and accounting purposes.
5. Purposes of Processing
We process your personal data for the following purposes:
Responding to Contact Requests
To process and respond to enquiries submitted through our contact form.
Operating and Securing the Website
To ensure the Website functions correctly, to detect and prevent security threats, and to maintain system integrity.
Basic Statistics and Performance
To understand how visitors interact with our Website and to improve its content and functionality (only with your consent for non-essential analytics).
Legal Compliance
To comply with applicable laws, regulations, and legal processes.
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 3 years from the date of submission or last contact |
| Server logs (technical data) | 12 months |
| Cookie consent records | 12 months (then renewed upon new consent) |
| Analytics data (aggregated) | 26 months |
After the applicable retention period, personal data is securely deleted or anonymised.
7. Recipients and Data Processors
We may share your personal data with the following categories of recipients:
- Hosting Provider: Our Website is hosted by a professional hosting service that may have access to server logs and technical data as part of providing hosting services.
- Analytics Provider: If you consent to analytics cookies, aggregated and anonymised usage data may be processed by our analytics provider.
- Professional Advisers: Lawyers, accountants, or other professional advisers where necessary for legal, tax, or business purposes.
- Public Authorities: Government bodies, regulatory authorities, or law enforcement agencies where required by law.
All data processors are bound by contractual obligations to process personal data only on our instructions and in compliance with applicable data protection laws.
8. International Data Transfers
We primarily store and process personal data within the European Economic Area (EEA). However, some of our service providers may be located outside the EEA.
Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place to protect your data, such as:
- Transfers to countries with an adequacy decision from the European Commission
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other legally approved transfer mechanisms
You may request information about the safeguards in place for specific transfers by contacting us using the details below.
9. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data.
Right to Rectification (Article 16)
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data in certain circumstances (e.g., when the data is no longer necessary for the purpose collected).
Right to Restriction (Article 18)
You have the right to request restriction of processing in certain circumstances (e.g., while we verify the accuracy of your data).
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. For France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL). For Ireland, this is the Data Protection Commission (DPC).
To exercise any of these rights, please contact us using the details in Section 10 below. We will respond to your request within one month, unless the request is complex or we receive a high volume of requests.
10. Contact Details
For any questions about this Privacy Policy, to exercise your data protection rights, or for any privacy-related concerns, please contact us:
- Company: L'Immobilière de la Croix-Rousse
- Address: 41 Rue Philippe de Lassalle, 69004 Lyon, France
- Email: privacy@boi356humanei.eu
We aim to resolve any privacy concerns directly. However, you also have the right to contact your local data protection authority:
- France: CNIL – www.cnil.fr
- Ireland: Data Protection Commission – www.dataprotection.ie
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Disclaimer
This Privacy Policy is provided for informational purposes to explain our data processing practices. It does not create any contractual or legal rights beyond those provided by applicable data protection laws. L'Immobilière de la Croix-Rousse is a French real estate agency (SARL) engaged in real estate agency services. We do not provide banking, financial, or investment services. If you have any questions about this policy or our data practices, please contact us using the details provided above.