1. Data Controller Identification
The entity responsible for processing personal data on this platform is:
CERISE SAS
A simplified joint-stock company (SAS) with share capital of 25,000 €
SIREN: 497 520 411 • Code APE: 6832A
Registered Office: LE CERISIER, 44330 LA CHAPELLE-HEULIN, FRANCE
Managing Director: Dominique Houdmond
Electronic contact: [email protected]
2. Scope and Legal Basis of Data Processing
CERISE SAS processes personal and business information strictly in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Law No. 78-17 of January 6, 1978 as amended (Loi Informatique et Libertés).
Data is processed on the following lawful bases:
- Pre-Contractual Measures and Contract Performance (Art. 6.1.b GDPR): Managing consultation inquiries, preparing property management mandates, and delivering due diligence audits.
- Legal Obligations (Art. 6.1.c GDPR): Fulfilling statutory accounting, tax, anti-money laundering (AML / LCB-FT under the French Monetary and Financial Code), and cadastral records keeping.
- Legitimate Interests (Art. 6.1.f GDPR): Safeguarding platform infrastructure, preventing fraud, and optimizing informational performance.
3. Categories of Data Collected
We collect and process only strictly necessary information:
- Identification and Contact Details: Full name, professional title, official email address, telephone number, and business entity denomination.
- Property Asset Information: Property location, surface area, number of units, and commercial objectives submitted voluntarily via inquiry forms.
- Technical and Connection Data: Anonymized IP addresses, browser user-agent headers, and interaction metrics processed through essential and analytical session cookies.
4. Data Retention Periods
Personal data is retained only for as long as necessary to achieve the stated purposes:
- General Inquiries / Prospective Consultations: Retained for a maximum period of 3 years following last active correspondence.
- Contractual & Mandate Records: Retained for 10 years following contract termination in compliance with French Commercial Code (Art. L. 123-22).
- Technical Log Files: Kept for a maximum period of 12 months for security and audit integrity.
5. Data Security & Confidentiality
CERISE SAS employs robust technical and organizational security measures, including TLS 1.3 cryptographic protocols, encrypted email servers, strict physical access controls at our headquarters in La Chapelle-Heulin, and role-based data partitioning. Data is never sold, leased, or transferred to unvetted third parties or countries outside the European Economic Area (EEA) without adequate protection standards.
6. Your Rights under the GDPR
Under European and French law, you maintain the following fundamental rights:
- Right of Access (Art. 15 GDPR): Obtain confirmation as to whether your data is being processed and obtain a copy.
- Right to Rectification (Art. 16 GDPR): Request immediate correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to be Forgotten", Art. 17 GDPR): Request deletion of data where statutory retention grounds no longer apply.
- Right to Restriction of Processing (Art. 18 GDPR): Limit processing during verification or dispute resolution.
- Right to Data Portability (Art. 20 GDPR): Receive data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21 GDPR): Object at any time to data processing based on legitimate interest.
To exercise any of these rights, please submit a written request accompanied by proof of identity to our Data Protection Officer at: [email protected]. You also have the right to lodge a formal complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés — CNIL, www.cnil.fr).