Privacy Policy

This policy explains how we collect, use, and protect your personal data when you visit our website. By using this site, you consent to the collection and use of your personal data as described in this policy, in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller
   The data controller responsible for the personal data collected on this site is:

   Company Name: Société par action simplifiée Parts des Anges et Vieilles Demeures
   Address: 865 Chemin de Baye et de Poupera, 84110 Vaison-la-Romaine
   Email Address: christophe.bristiel@gmail.com
   Phone Number: +33 6 79 26 42 34
   

2. Personal Data We Process
   As part of personal data processing, the Data Controller collects and processes the following data:

• Name, surname, postal address, email address, and phone number;

• IP address, unique session ID, and unique user ID.
  

3. Purposes of Processing
   We use personal data for the following purposes:

• Managing your requests and contacts: Responding to your inquiries or processing your orders.

• Improving user experience: Analyzing browsing data to optimize site functionality.

• Processing payments: Managing financial transactions for purchases made via our site.

• Marketing: Sending newsletters or promotional offers, if you have given your prior consent.
  

4. Legal Basis for Processing
   The processing of your personal data is based on the following legal grounds:

• Consent: When you agree to receive marketing communications or analytical cookies.

• Performance of a contract: To process your orders or respond to your inquiries.

• Legitimate interest: To improve the functionality of our site and understand how visitors use it.
  

5. Recipients of Your Data
   The personal data we collect, as well as any data collected subsequently, is intended for us as the Data Controller.
   We ensure that only authorized persons can access this data. Our service providers may receive this data to perform the services entrusted to them.
   Your personal data may be shared or combined with other entities within our group, including parent companies, affiliates, and subsidiaries of the Data Controller.
   These entities may receive your data for the purposes outlined in this privacy policy. These operations are carried out in compliance with applicable regulations and are designed to ensure the protection and respect of your rights.
   

6. Data Transfer
   As part of the services offered, we transfer your personal data to recipients located in the United States.
   Each of these transfers is governed by legal instruments that comply with applicable legal frameworks.
   Transfers to the United States are protected by appropriate safeguards. Standard contractual clauses proposed by the European Commission have been signed for all data transfers covered by this section.
   

7. Data Retention Period
   We retain your personal data only for the duration necessary to fulfill the purposes stated in this policy. The retention period varies depending on the nature of the data:

• Prospecting: 3 years from the last contact initiated by you or, where applicable, from the end of the commercial relationship, plus the duration of the statutory limitation periods.

• Customer: For concluded contracts, data is retained for the entire duration of the business relationship, plus the duration of statutory limitation periods.

• Cookies: Refer to the cookie policy, depending on the type and function of the cookie.

• Requests for access, rectification, erasure, or limitation: Data related to identity documents and information needed to process these requests are retained for 1 year from receipt of the request.

• Requests made via the contact form: Retained for the duration of the request processing, plus the statutory limitation period.

• Newsletter: Until withdrawal of your consent or, failing that, 3 years from the last contact initiated by you.
  Retention periods may be extended by applicable statutory limitation periods.
  

8. Your Rights

8.1 How to Exercise Your Rights
You can exercise your rights by emailing us at: christophe.bristiel@gmail.com
Please include your full name and the address to which you want the response sent.
In principle, you can exercise all your rights free of charge. However, for access rights, you may be asked to pay reasonable administrative costs for any copies of data you request.
Regarding the right to information, the Data Controller is not required to respond if you already have the information you are requesting.
The Data Controller will inform you if it cannot respond to your requests.
These rights are not absolute and are subject to conditions under:

• The applicable local data protection or privacy law; and

• The laws and regulations applicable to you.
  The Data Controller wishes to inform you that failure to provide or modify your data may have consequences for processing certain requests under contractual relationships, and your request regarding the exercise of your rights will be retained for follow-up purposes for 6 years for the exercise of the right to object and 1 year for other rights.
  The detailed rights you have are outlined below.

8.2 Your Right to Information
You acknowledge that this privacy policy informs you of the purposes, legal basis, interests, recipients or categories of recipients with whom your personal data may be shared, and the possibility of data transfers to third countries or international organizations.
In addition to this information, and in order to ensure fair and transparent processing of your data, you confirm that you have received additional information regarding:

• The retention period of your personal data;

• The existence of rights recognized in your favor and how to exercise them.
  If we decide to process data for purposes other than those stated, you will be informed of all information related to these new purposes.

8.3 Your Right of Access and Rectification
By exercising this right, you will be informed whether your personal data is being processed, and if so, you have access to your data and the information regarding:

• The purposes of processing;

• The categories of personal data concerned;

• The recipients or categories of recipients, especially those located in third countries;

• When possible, the retention period of the personal data or, if not possible, the criteria used to determine this period;

• The existence of the right to request rectification or erasure of your personal data, the right to request restriction of processing, the right to object to such processing;

• The right to lodge a complaint with a supervisory authority;

• Information about the source of the data when it was not collected directly from the individual;

• The existence of automated decision-making, including profiling, and in such cases, relevant information regarding the logic involved, as well as the significance and consequences of this processing for the individual.

You can request that your personal data be rectified or completed if it is inaccurate, incomplete, ambiguous, or outdated.

8.4 Your Right to Erasure of Your Data
You can request the erasure of your personal data when one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

• You withdraw the consent previously given;

• You object to the processing of your personal data where there is no legal basis for the processing;

• The processing of personal data does not comply with applicable laws and regulations; and

• Your personal data was collected when you were a minor.
  However, this right will not apply when the retention of your personal data is necessary under the law or regulations, particularly for the establishment, exercise, or defense of legal claims.

8.5 Your Right to Restrict Processing
You can request the restriction of the processing of your personal data in cases provided by law.

8.6 Your Right to Object to Data Processing (Opt-out)
You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the Data Controller.
In case of direct communication, this right can be exercised by any means, including by clicking the unsubscribe links at the bottom of communications sent to you.

8.7 Your Right to Data Portability
You have the right to data portability. The data to which this right applies includes:

• Only your personal data, excluding anonymized data or data unrelated to you;

• Declarative personal data as well as operational data; and

• Personal data that does not infringe on the rights and freedoms of third parties, such as those protected by business secrecy.

This right is limited to processing based on consent or contract, as well as personal data you have generated yourself.
This right excludes derived data or inferred data created by the Data Controller.

8.8 Your Right to Withdraw Consent
When data processing is based on your consent, you can withdraw it at any time. We will then stop processing your personal data without affecting prior operations for which you had consented.

8.9 Your Right to File a Complaint
You have the right to lodge a complaint with the competent supervisory authority without prejudice to any other administrative or judicial remedy.

8.10 Your Right to Posthumous Directives
You have the right to set posthumous directives concerning the retention, deletion, and communication of your personal data after your death, with a certified third-party who will ensure the enforcement of the deceased's wishes, in compliance with applicable legal requirements.

8.11 Your Right to Object to Telemarketing
You are informed that if you do not wish to receive commercial calls, you have the right to object to telemarketing by entering your landline and/or mobile phone numbers on the free opposition list available at www.bloctel.gouv.fr.
Please note that the processing of your request will take effect within 30 days from the confirmation of your registration. This registration is valid for 3 years.

9. Data Security
   We take the protection, integrity, and confidentiality of your data very seriously. Therefore, we have implemented technical and organizational measures to ensure an appropriate level of security and protect your data against loss, alteration, unauthorized access, or disclosure to third parties.
   However, despite our efforts, no security measure can guarantee protection against all risks of misuse or hacking, for which, as the data controller, we cannot be held responsible.
   In the event of a data breach, and in compliance with applicable data protection regulations, we will notify the CNIL. If the breach poses a high risk to your rights and freedoms, we will inform you as soon as possible, in accordance with the regulations in force.
   

For any questions about this privacy policy or to exercise your rights, please contact us at: christophe.bristiel@gmail.com