1. Data controller
The data controller is Corelogicfr SAS, registered office at 12 rue de la Paix, 75002 Paris, France, registered with the Paris Commercial Registry under number 928 451 736. For any question regarding the processing of your data, please contact our Data Protection Officer at dpo@corelogicfr.com.
2. Data collected
We collect only data necessary to deliver our services: first name, last name, email address, family and tax situation (only with your explicit consent), and history of exchanges. No banking data is collected through this site.
3. Purposes
Your data is processed in order to: (a) answer your advisory requests, (b) send you our monthly newsletter if you opted in, (c) improve the quality of our services, (d) comply with our legal and accounting obligations.
4. Legal bases
Processing relies on your consent (Article 6.1.a GDPR), the performance of a contract (6.1.b), compliance with legal obligations (6.1.c) and our legitimate interest in improving our services (6.1.f).
5. Retention periods
Prospect data: 36 months from the last contact. Client data: 10 years after the end of the contractual relationship, in accordance with French accounting and tax obligations. Audience measurement cookies: 13 months maximum.
6. Recipients
Your data is accessible only to authorised Corelogicfr advisors, our hosting provider OVH SAS based in France, and where applicable to the competent French administrations during the processing of your file (DGFiP, CAF, CNAV, etc.).
7. Transfers outside the EU
No personal data is transferred outside the European Union. Our servers and sub-processors are located in France.
8. Your rights
You have the right to access, rectify, erase, restrict, object, port your data, and define post-mortem directives. You may exercise these rights at any time by writing to dpo@corelogicfr.com. You also have the right to lodge a complaint with the French data protection authority CNIL (www.cnil.fr).
9. Security
We implement appropriate technical and organisational measures (TLS 1.3 encryption, sovereign hosting, strict access control, encrypted backups) to protect your data against any unauthorised access.