Privacy Policy
Effective date: 03/24/2021
Introduction
At BEANSTOCK, protecting your personal data is a priority.
During your use of the https://beanstock.com website (hereafter referred to as the "Site"), we may collect personal data concerning you.
The purpose of this policy is to inform you of the methods we use to process this data in accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter referred to as the "GDPR").
Who is the data controller?
The data controller is the company BEANSTOCK, a simplified joint-stock company registered with the RCS of Créteil under number 883 502 197 and whose registered office is located at 5 avenue du Général De Gaulle 94160 SAINT-MANDÉ (hereinafter referred to as 'We').
Collected data
What data do we collect?
A personal data is a data that allows to directly identify an individual or indirectly in combination with other data.
We collect data falling under the following categories:
Identification data (including your name, first name, email and postal address, phone number);
Connection data (for example IP address, logs);
Data relating to your investments.
Mandatory data is indicated when you provide us with your data. They are indicated by an asterisk and are necessary to provide you with our services.
Personal data preservation
On what legal basis, for what purposes and for how long do we keep your personal data?
Finalités
Bases légale
Durées de conservation
Fournir nos services disponibles sur notre Site (mise en relation entre investisseurs et conseillers en investissement immobilier, recherche d’investissements, constitution du dossier de prêt, gestion administrative, travaux, ameublement, mise en location, etc.)
Exécution de mesures précontractuelles prises à votre demande et/ou exécution d’un contrat que vous avez souscrit
Vos données sont conservées pour toute la durée de votre compte et augmentée d’un délai de 3 ans à compter de la suppression de votre compte.
En outre, vos données sont archivées à des fins probatoires pendant une durée de 5 ans.
Constituer un fichier de clients et prospects
Notre intérêt légitime à développer et promouvoir notre activité
Pour les clients : les données sont conservées pendant toute la durée de la relation commerciale et sont supprimées à l’expiration d’un délai de 3 ans à compter de la fin de la relation commerciale.
Pour les prospects : les données sont conservées pendant un délai de 3 ans à compter de votre dernier contact.
En tout état de cause, les données sont archivées à des fins probatoires pendant une durée de 5 ans.
Adresser des newsletters, sollicitations et messages promotionnels
Pour les clients et les professionnels du secteur immobilier : notre intérêt légitime à développer et promouvoir notre activité
Pour les prospects : votre consentement
Pour les clients : les données sont conservées 3 ans à compter de la fin de la relation commerciale.
Pour les prospects : les données sont conservées pendant un délai de 3 ans à compter de votre dernier contact.
Répondre à vos demandes d’information
Notre intérêt légitime à répondre à vos demandes
Les données sont conservées pendant le temps nécessaire au traitement de votre demande d’information et supprimées une fois la demande d’information traitée.
Se conformer aux obligations légales applicables à notre activité
Obligations légales et règlementaires
Les factures sont archivées pendant une durée de 10 ans.
Gérer les demandes d’exercice de droits
Obligations légales et règlementaires
Si nous vous demandons un justificatif d’identité : nous le conservons seulement pendant le temps nécessaire à la vérification d’identité. Une fois la vérification effectuée, le justificatif est supprimé.Si vous exercez votre droit d’opposition à exercer de la prospection : nous conservons cette information pendant 3 ans.
Recipients of your data
The following will have access to your personal data:
(i) Our company's personnel;
(ii) Our subcontractors: hosting provider, newsletter delivery provider, CRM tool & appointment management platform;
(iii) If necessary: public and private organizations, exclusively to fulfill our legal obligations.
Transfer of data outside the EU
Are your data likely to be transferred outside of the European Union?
Your data is stored and kept throughout the processing period on servers located within the European Union belonging to the company Amazon Web Services.
As part of the tools we use (see article on recipients regarding our subcontractors) your data may be transferred outside of the European Union. The transfer of your data in this context is secured through the following tools:
Either this data is transferred to a country that has been deemed to offer an adequate level of protection by a decision from the European Commission;
Or we have entered into a specific contract with our subcontractors governing the transfer of your data outside of the European Union, based on standard contractual clauses between a data controller and processor approved by the European Commission;
Or we use appropriate guarantees provided for by the applicable regulations.
Rights over your data
You have the following rights regarding your personal data:
Right to information: this is precisely why we have drafted this policy. This right is provided for by articles 13 and 14 of the GDPR.
Right of access: you have the right to access all of your personal data at any time under Article 15 of the GDPR.
Right of rectification: you have the right to rectify any inaccurate, incomplete or outdated personal data at any time in accordance with Article 16 of the GDPR.
Right to limitation: you have the right to obtain the limitation of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
Right to erasure: you have the right to demand that your personal data be erased and to prohibit any future collection for the reasons set out in Article 17 of the GDPR.
Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a violation of applicable laws. (Article 77 of the GDPR).
Right to define guidelines relating to the retention, erasure and communication of your personal data after your death, in accordance with Article 40-1 of the French Data Protection Act.
Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. This withdrawal shall not affect the lawfulness of processing carried out before the withdrawal.
Right to portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a machine-readable standard format and to require their transfer to the recipient of your choice.
Right to object: under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process your data despite this objection for legitimate reasons or to defend legal rights.
You can exercise these rights by writing to us at the contact details below. We may ask you on this occasion to provide us with additional information or documents to justify your identity.
Point of contact for personal data
Contact email: contact@beanstock.fr
Contact address: Beanstock, 5 avenue du général de Gaulle 94160 Saint-Mandé
Modifications
We reserve the right to modify this policy at any time in order to comply with any regulatory, jurisprudential, editorial, or technical developments. These modifications will apply from the date of entry into force of the modified version. Therefore, we invite you to regularly consult the latest version of this policy. However, we will inform you of any significant modification to this privacy policy.
Effective date: 24/03/2021