Data protection

BNP Paribas Real Estate attaches great importance to the protection of your personal data. This is why BNP Paribas Real Estate has adopted, together with the BNP Paribas Group, major principles for the protection of your data, which you can find in our Personal Data Privacy Charter available on the group.bnpparibas website.

The purpose of this Notice is to provide you with detailed information on how Sustainable Development / CSR, one of BNP Paribas Real Estate’s Functions, (“we”) protect your personal data.

We are responsible for the collection and processing of your personal data that we use in the course of our business. The purpose of this notice is to inform you about the personal data we collect about you, why we use it, with whom we share it, how long we keep it, what your rights are and how to exercise them.

Additional information may be provided to you, where appropriate, when you sign up for a particular product or service.

This notice applies if you are:

A person who interacts directly or indirectly with us (via the contact form on our site), or who consults our site;
A user of social networks, who may post a publication related to the activity of BNP Paribas Real Estate.

When you provide us with personal data about other people, please ensure that you inform them of the disclosure of their personal data and invite them to read this notice. We will ensure that we do so as soon as possible (e.g. when we have the person’s contact details).

1. What personal data do we use about you?

We collect and use the personal data that are necessary for our activities, in particular in order to offer you personalized and quality products or services.

We may collect different types of personal data about you, including

Identification information (for example, name, first name);
Contact information (e.g., e-mail address);
Information related to your digital activities (e.g., IP address, browsing activity, geolocation).

We never ask you to provide us with personal data relating to your racial or ethnic origin, your political opinions, your religious or philosophical beliefs, your trade union membership, your genetic data or your sexual orientation, unless this is required to comply with a legal obligation.

2. Why and on what legal grounds do we use your personal data?

a) To comply with our legal or regulatory obligations

We use your personal data to comply with various legal and regulatory obligations to which we are bound, including

Responses to official requests from duly authorized public or judicial authorities.

b) To pursue our legitimate interests

We use your personal data for the purpose of defending our rights, and also in order to:

Manage information technology, including infrastructure management (e.g. shared platforms), service continuity and IT security ;
Establish anonymized statistical models and/or tests (e.g., A/B testing) in order to improve our offering of new or existing products and services or the experience on our sites;
Answering your questions;
Improving and personalizing your experience on our sites and applications;
Your personal data may be aggregated into anonymized statistics.

c) To honor your choice where we have asked for your consent to a specific processing

3. With whom do we share your personal data?

In order to accomplish the above purposes, we disclose your personal data only to:

Judicial or financial authorities, state agencies or public bodies, upon their request and to the extent permitted by regulation.

4. Transfers of personal data outside the European Economic Area (EEA)

No transfer of personal data outside the European Economic Area (EEA) will be made.

5. How long do we keep your personal data?

We will retain your personal data for the period of time required to comply with applicable laws and regulations or for the period of time required to meet our operational requirements, such as proper account maintenance, facilitating customer relationship management and responding to legal or regulatory requests.

In all cases, your personal data is retained for the period necessary to fulfill the purposes of the processing.

6. What are your rights and how can you exercise them?

You have rights that allow you to exercise real control over your personal data and how we process it.

If you wish to exercise your rights, you can contact our Data Protection Officer:

Permanent Control – Data Protection Notice

Group Communication

ACI Code: CVA06A

Millénaire 4 – Parc du Millénaire

35 rue de la Gare

75019 Paris

France

Please include a copy of your identity card where necessary.

6.1. You may request access to your personal data

If you wish to have access to your personal data, we will provide you with a copy of the personal data you have requested as well as information about its processing.

Your right of access may be limited in cases where laws and regulations require it. This is the case of the regulation on the fight against money laundering and terrorist financing, which prohibits us from giving you direct access to your personal data processed for this purpose. In this case, you must exercise your right of access with the CNIL, which will request the data from us.

6.2 You can request the correction of your personal data

You may request the correction of your personal dataWhen you believe that your personal data is inaccurate or incomplete, you may request that it be amended or completed accordingly. In some cases, supporting documentation may be required.

6.3 You can request the deletion of your data

If you wish, you may request the deletion of your personal data, to the extent permitted by law.

6.4 You may object to the processing of your personal data based on a legitimate interest

If you do not agree with a processing activity based on a legitimate interest, you may object to it, on grounds related to your particular situation, by informing us specifically of the processing activity at issue and the grounds for the objection. We will stop processing your personal data unless there are compelling legitimate reasons to do so or it is necessary to establish, exercise or defend legal claims.

6.5 You may suspend the use of your personal data

If you question the accuracy of the personal data we use or object to the processing of your personal data, we will verify or review your request. When we review your request, you may request that we suspend the use of your personal data while we review your request.

6.6 You may withdraw your consent

If you have given your consent for the processing of your personal data, you can withdraw it at any time.

6.7 You can request the portability of part of your personal data

You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format. Where technically feasible, you may ask us to transfer this copy to a third party.

6.8 How to file a complaint with the CNIL

In addition to the rights mentioned above, you can file a complaint with the CNIL (Commission Nationale de l’Informatique et de Libertés).

7. How can I be informed of changes to this data protection notice?

In a world where technology is constantly evolving, we will update this Notice regularly.

We invite you to consult the latest version of this document on our sites, and we will inform you of any significant change through our website or via our usual communication channels.

8. How to contact us ?

If you have any questions about the processing of your personal data, you can contact our Data Protection Officer