Processing of the personal data of the internet users and users of our services is subject to the European Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and to the French Act n°78-17 of 6 January 1978 on Information technology, Data files and Civil liberties, as amended (the “Information Technology Act”), (hereafter, the “Privacy Regulation”).
Pursuant to the Privacy Regulation, Paris Attitude is the controller of the users’ data processing collected upon their registration and during their use of the Website.
Personal data refers to any information regarding a natural person who can be directly or indirectly identified (“Personal Data”).
Each user can withdraw his/her consent by expressly requesting to cancel his user account.
3. Personal data collection and purposes
3.1 Personal Data collected
When a user creates a user account and uses our services, we collect the following Personal Data:
- information regarding your identity such as your situation, family name, given name, date of birth, nationality;
- your postal address, email address, telephone number;
- information regarding your real estate property (type and characteristics) or your search criteria;
- data about your professional life such as your training, professional experience;
- data regarding identity control, such as copies of identification documents (national identity card, passport);
- payment information such as your bank details;
- communication information with our consultants;
- feedback which you may leave regarding a property rental.
Mandatory fields in the registration form are identified with an asterisk.
3.2 Purpose of the data processing
Personal Data are collected for the following purposes:
- connecting landlord and tenant user profiles;
- real estate management;
- comments on our services;
- rental payment management;
- processing users’ feedback.
4. Legal basis for the data processing
Users’ data processing is based on the user’s consent upon the creation of his user account, and on the protection of the legitimate interests of Paris Attitude on the data processing or compliance with a legal or regulatory obligation.
The use of Personal Data may also be based on the protection of our legitimate interests regarding the use of our services such as responding to a user request, providing our services, or ensuring compliance with a legal or regulatory obligation such as:
- managing the client-prospect relation (e.g. answering your requests and setting up your user account);
- sharing information with our agents to allow them to contact you or to issue an estimate;
- sending newsletters, commercial solicitations and alerts corresponding to the user search criteria, by email or by telephone;
- securing the Personal Data (e.g. to prevent digital identity theft);
- resolving any dispute or resolving issues regarding the use of our services;
- improving the quality of our services (e.g. measuring the number of visits on our Website).
Paris Attitude shall not access nor use users’ Personal Data without their prior consent for purposes other than those necessary to perform its services.
5. Data transfer
5.1 Communication for external data processing
Paris Attitude may communicate users’ Personal Data to third party service providers who are duly authorized and trustworthy to process the data on behalf of and pursuant to the instructions of Paris Attitude.
These service providers intervene exclusively to provide the services (e.g. technical and hosting provider, estimate requests, client management and satisfaction surveys).
Paris Attitude does not transfer Personal Data to third parties for marketing or commercial purposes.
5.2 Communication for legal purposes
Paris Attitude reserves the right to communicate the Personal Data of a user in the following cases:
- legal obligation, application of a regulatory provision or of a court decision, or when such communication is necessary for the purpose of an investigation, injunction, or legal proceedings, in France or abroad, or
5.3 Transfers out of the European Union
In the event of Personal Data transfers to a hosting provider located outside of the European Union, Paris Attitude shall enter in an agreement with the hosting provider regarding GDPR compliance.
6. Data storage period
Personal Data that are collected are stored for the period of use of the service.
The data storage period of the Personal Data of a user may depend on the user profile and the type of processing.
Pursuant to applicable law, the Personal Data of the user are stored for a period of three years from his last activity on the Website.
Paris Attitude may also keep Personal Data after the end of use of the service to comply with applicable laws for claims management, in case of a dispute or to defend its interests.
7. Technical and organisational security measures
The user connection id to access the services or sections of the Website are strictly personal and confidential. For security reasons regarding the use of his account, the user shall not disclose his id to third parties. The user shall also be solely liable for all the consequences, whether contractual, financial or any other consequences which may result from third parties using his connection id. We reserve the right to suspend a user account if we have reasons to think that his connection id was hacked or used without his knowledge.
To ensure the security of Personal Data and their processing, Paris Attitude implements technical and organisational measures to prevent any unauthorized access or disclosure, modification, alteration, accidental or illegal loss, or destruction.
All our employees, as well as the service providers’ employees must enter into an agreement to comply with the security rules regarding data protection.
8. User’s rights
Each user whose Personal Data have been collected benefits from the following rights: the right of access to and rectification, the right to object, the right to purpose limitation, the right to data portability, the right to erasure of Personal Data, the right to object to a decision made exclusively of an automated processing (decisions based on profiling).
8.1 Exercise of the right to data portability
The right to data portability allows the user to recover part of his Personal Data to store them or to transfer them easily from an information system to another to be reused for personal purposes. The data concerned include Personal Data disclosed by the user at the time of registration and the data generated during the period of use of the service. The user can recover his Personal Data by sending an email to firstname.lastname@example.org. Paris Attitude will request the user to send a copy of an ID document for identification. Paris Attitude shall use this document for authentication purposes only and will destroy it as soon as the purpose has been fulfilled. Paris Attitude shall send the data files allowing the user to access the data by email.
8.2 Exercise of the other user rights
The rights can be exercised by sending an email to email@example.com or writing to Paris Attitude, 21, rue Vauvenargues - 75018 Paris.
If the data subject thinks that he didn’t contact Paris Attitude, that rights are not observed or that the access control process is not compliant with the data protection rules, he/she may send a claim online or via mail to the supervisory authority (CNIL).
9. Cookies policy
When you use the Paris Attitude Website, we collect information regarding your navigation in cookie files which are installed on your terminal, subject to the options that you will have selected regarding cookies and that you can modify at any time.
For more information, please read our Cookies Policy included in the User term and conditions, accessible from the Website.
10. Account closure and data deletion
Each user can close his account at any time by sending an email to firstname.lastname@example.org, subject to the complete execution of a then current rental. At the time fo the account closure, the Personal Data of the user will be deactivated and no longer accessible online. They will be erased according to the rules of data storage period as specified under the Data storage period paragraph.
11. Data controller
The data controller is Paris Attitude, SAS, a French company registered with the Paris Trade registry under number B439 328 410, with its registered office located at 21, rue de Vauvenargues - 75018 PARIS.