Privacy Policy

CRYSTAL ESTATES – French Riviera values your privacy and is committed to ensuring that the collection and processing of your data through our website comply with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Informatique et Libertés).

This privacy policy defines and informs you about how CRYSTAL ESTATES – French Riviera uses and protects the personal information and data you provide to us and applies when you use our products and services.

If changes are made to how your data is used, this privacy notice will be updated.

1 - Personal Data

We collect and use only the personal data necessary for the performance of our activities to offer you personalized and quality products and services.

We may collect various types of personal information depending on the service needs, including:

• Contact and identification information (name, surname, place and date of birth, address, email(s), phone(s), ...)
• Authentication information when using our online services (client spaces, browsing, etc.): IP address, logs, device used, ...
• Information related to searches and needs
• Banking information for clients in property management and rental
• Information about real estate properties and assets
• Data related to habits and preferences, including statistical data on the use of our services or interactions with our services.

The data we use may be collected directly from you or indirectly from partners, suppliers, clients, including non-client individuals such as prospects or guarantors.

2 - Use and Purpose of Collected Data

Personal data is primarily used for:

• Providing the information or services you requested.
• Performing a contract with you under a mandate.
• Personalizing your experience and addressing your individual needs.
• Providing personalized content.
• Improving our digital services, websites, and applications.
• Enhancing customer service and handling your needs.
• Contacting you about events, new offerings, and services related to our business.

In general, the collection and processing of your data serve the legitimate interests of CRYSTAL ESTATES – French Riviera to ensure the highest quality of our services, provide clients, prospects, partners, suppliers, and users with the best possible follow-up, and improve the operation of our communication tools and business applications.

What happens if you do not provide the information we request?

We need certain personal data to perform the services you requested. For example:

• When we sell a property on your behalf, we need to know your contact details to keep you informed about visits, offers, and the progress of the sale.
• If you ask us to find a property that meets specific access conditions, we may need to know more details about your situation to find a suitable property.

We also need certain information to comply with our legal obligations. For example, we may need to obtain your identity documents to meet fraud prevention and anti-money laundering requirements.

If you do not provide the required information for these purposes, we may be unable to perform our contract with you and may not be able to offer or continue offering certain services. We will explain when this is the case when collecting your data.

3 - Retention Period

We keep your personal data only for the duration necessary to comply with applicable legal and regulatory requirements and for the purpose of the data collection as described in section 2.

For clients, most data is retained for the duration of our contractual relationship and up to 10 years after the end of the contract.

For prospects, information is retained for up to 3 years from the date of collection or our last contact.

Your personal information is retained for no more than 36 months, unless:

• You exercise, under the conditions outlined below, any rights granted to you by law.
• A longer retention period is authorized or required by a legal or regulatory provision.
• This retention period may be extended if you continue the commercial relationship.

During this period, the website implements organizational, software, legal, technical, and physical measures to ensure the confidentiality and security of your personal data, preventing damage, deletion, or unauthorized access by third parties.

4 - Access Rights

By current European regulations, you have the following rights regarding your data, which you can exercise by writing to the address mentioned below:

• Right of access (Article 15 GDPR) and rectification (Article 16 GDPR), updating, or completion of User data.
• Right to restrict or erase personal data (Article 17 GDPR) when data is inaccurate, incomplete, ambiguous, outdated, or when its collection, use, communication, or storage is prohibited.
• Right to withdraw consent at any time (Article 13-2c GDPR).
• Right to limit data processing (Article 18 GDPR).
• Right to object to the processing of User data (Article 21 GDPR).
• Right to data portability (Article 20 GDPR), when data is processed automatically based on consent or a contract.
• Right to define the fate of User data after death and to choose which third party should receive such data.

For more information: https://www.cnil.fr/comprendre-vos-droits

For questions regarding this Privacy Policy or to exercise your access rights concerning the processing of your data, you can contact us at:

By email: info@crystal-riviera.com
Or by mail, with a signed request and a copy of an identification document, to:
CRYSTAL ESTATES – French Riviera – SAS ASTOR,
44 Boulevard Napoléon III, Abbaye de Roseland, Kalinka 4, 06200.
Tel: 06 23 57 67 18

Due to the security and confidentiality obligations related to the processing of personal data, we inform you that your request will be processed only after we verify your identity, typically by providing a scanned copy or photocopy of your valid identification.

Finally, CRYSTAL ESTATES – French Riviera commits to responding to your request for access, rectification, opposition, or any other request for information within a reasonable timeframe, which will not exceed one month from the receipt of your request.

If you believe that CRYSTAL ESTATES – French Riviera is not complying with its obligations regarding your Personal Information, you can file a complaint with the CNIL, the competent authority in France, via the following link: https://www.cnil.fr/fr/plaintes/internet

5 - Data Protection

CRYSTAL ESTATES – French Riviera implements a range of technical and organizational measures to ensure the security of personal data processing and the confidentiality of personal data.

In this regard, CRYSTAL ESTATES – French Riviera takes all necessary precautions to protect data, including preventing it from being altered, damaged, or accessed by unauthorized third parties (protection of premises, authentication systems with personal and secure access via identifiers and passwords, connection history).

We also protect your information offline. Only employees and services that need to perform specific tasks have access to personally identifiable information.

6 - Disclosure to Third Parties

We do not sell, trade, or transfer your personally identifiable information to third parties.

This does not include trusted third parties who help us operate our website, provide our services, and carry out our tasks, as long as these parties agree to keep this information confidential.

To perform our tasks, we may disclose your data only in specific cases to:

• Entities within our company.
• Service providers and subcontractors performing services on our behalf.
• Independent agents, intermediaries, or brokers with your explicit consent: consent form, contractual clause.
• Business partners in the context of mandate delegation, cross-promotion of real estate listings, or advertising.
• Financial, judicial, or state authorities, or public bodies on request and as permitted by regulation.
• Certain regulated professions, such as lawyers and notaries.

7 - Data Transfer Outside the European Economic Area

CRYSTAL ESTATES – French Riviera may use authorized providers to facilitate the collection and processing of the data you provided. These providers may be located outside the European Union. CRYSTAL ESTATES – French Riviera has ensured that these providers implement adequate safeguards and comply with strict conditions regarding confidentiality, use, and protection of data. We specifically focus on ensuring there is a legal basis for any data transfer to third countries.

We may transfer, store, or process your personal data outside France and the European Economic Area (EEA). When the countries to which your personal data is transferred do not offer the same level of protection as French laws, we will ensure appropriate protective measures are implemented.

We will use one of the following protection measures:

• Transfer it to a non-EEA country with privacy laws that provide the same protection as the EEA. For more information, visit the European Commission’s website on justice.
• Enter into a contract with the recipient, ensuring they protect the data according to the same standards as the EEA. For more information, visit the European Commission’s website on justice.
• Transfer it to organizations that are part of Privacy Shield. This is a framework setting privacy standards for data exchanged between the U.S. and EU countries, ensuring these standards are similar to those used within the EEA. For more information, visit the European Commission’s website on justice.

8 - Cookies

We use different cookies on our site to improve site interactivity and our services.

What is a "cookie"?

A "cookie" is a small file, typically consisting of letters and numbers, sent by the internet server to the cookie file of your browser located on your computer’s hard drive.

Our cookie policy helps you better understand the provisions we implement regarding browsing our website. It informs you about all cookies present on our website, and their purpose, and provides instructions on how to configure them.

Use of cookies

When browsing the site, cookies are placed on your computer, mobile device, or tablet.

A cookie is information stored on your device by the server of the visited site. Certain parts of the site may not function without the user's consent to cookies.

The information collected through this process helps us improve your online experience and assists us in tailoring content for you.

Our cookies are used for the following purposes:

• Technical performance of the site and its operation.
• Browsing preferences.
• Marketing.
• Statistics and analytics of users and their habits.

You can modify your browser settings to disable cookies. However, this may limit your access to certain functionalities of our website.

For more details on cookies, please refer to our Cookies Policy on our website.