Privacy policy
GDPR structure ready to complete with controller contact details and approved retention periods.
Data controller
Complete the identity and contact details of the controller and, where relevant, the Capifrance data-protection contact.
Data processed
Forms may collect identity, contact details, commune, property features, search criteria, budget, finance status, application information, contact preferences, language and consent evidence.
Purposes
Answer an enquiry, assign a project to an adviser, prepare a valuation or search, process an application and, only with separate consent, send editorial or marketing communications.
Legal bases
Responding to an enquiry relies on pre-contractual measures or legitimate interest depending on context. Telephone contact and marketing communications rely on the choices explicitly recorded in the form.
Recipients
Data is only shared with advisers, leads or specialists required for the project. An application is shared with a coach only after specific authorisation.
Retention
Define and document retention periods for each prospect type, application, consent record and legal obligation before production launch.
Your rights
Provide the address for access, rectification, erasure, restriction, objection, withdrawal of consent and complaints to the competent authority.