Privacy policy

    This page explains which personal data corsepatrimoineimmobilier.com collects, why, how long it is kept, who can access it and how to exercise your rights.

    Last updated: [À COMPLÉTER : date de validation]

    1. Data controller

    U GRANITU, simplified joint-stock company (SASU) with a share capital of €180,000, trading as Corse Patrimoine Immobilier, Ajaccio Trade Register 822 129 342.

    Publication director: Marie LOISEAU, President of U GRANITU.

    Contact: contact@corsepatrimoine.com · 04 95 52 01 05 · 9 Rue du Maréchal Juin 20137 Porto-Vecchio.

    Data protection officer: [À COMPLÉTER : nom ou absence de DPO désigné].

    2. Data collected, purposes and legal bases

    • Support request and contact forms (name, email, phone, town, relationship to the property, timeline, message): to answer your request. Legal basis: pre-contractual steps taken at your request.
    • Online valuation (property details and address, contact details): to prepare the valuation. Some answers are saved as you type, before final submission. Legal basis: pre-contractual steps.
    • Newsletter (email address, date, sign-up source, browser): to send you our properties and market analyses. Legal basis: your consent, which you may withdraw at any time.
    • Appointment booking (name, contact details, time slot, chosen adviser): to organise the appointment and send confirmation. Legal basis: pre-contractual steps.
    • Client, seller or buyer area (login, email, files, favourites, alerts): to provide the follow-up service. Legal basis: performance of the contract or mandate.
    • “Marina” assistant (messages, contact details you choose to share, information extracted from the conversation): to answer your questions automatically and pass your project to an adviser. Replies are generated by artificial intelligence. Legal basis: [À VALIDER : intérêt légitime ou mesures précontractuelles].
    • Cookie-free internal statistics: counts of pages and contacts (submitted forms, Call/WhatsApp clicks, alert subscriptions and confirmations), with the originating page and language. Events contain no name, email, phone, visitor or account identifier, referrer or URL parameter. Legal basis: [À VALIDER : intérêt légitime ou consentement].
    • Push notifications (browser subscription, optional search criteria): to alert you to new properties. Legal basis: your consent.
    • New-property email alert (email address, language, chosen search criteria, consent date): to notify you of new properties matching your search, at most once a day. The subscription is only activated after you confirm from the validation email (double opt-in). Legal basis: your consent, which you may withdraw at any time with one click from any email.

    3. Recipients and processors

    Your data is only accessible to authorised agency staff and the adviser handling your project. It is never sold.

    Technical providers acting on our behalf:

    • Supabase: database, authentication and storage (through the Lovable Cloud platform).
    • Cloudflare: website hosting and delivery.
    • Lovable: application hosting platform and AI gateway for the assistant.
    • Google: artificial intelligence model (Gemini) used to generate the assistant's replies.
    • [À COMPLÉTER : prestataire d'envoi des e-mails et de la newsletter].
    • Transfers outside the European Union: [À COMPLÉTER : localisation des serveurs et garanties applicables].

    4. Retention periods

    • Contact, support and valuation requests: [À COMPLÉTER : durée de conservation des demandes].
    • Newsletter: until you withdraw consent.
    • Appointments: [À COMPLÉTER : durée].
    • Client accounts: for the duration of the relationship, then [À COMPLÉTER : durée].
    • Assistant conversations: [À COMPLÉTER : durée de conservation des conversations et leads du chatbot].
    • Audience measurement: [À COMPLÉTER : durée de conservation des événements de fréquentation].
    • Push subscriptions: deactivated on request; [À COMPLÉTER : délai de suppression].
    • New-property email alerts: until you unsubscribe; subscriptions never confirmed are deleted within 30 days.

    5. Cookies and browser storage

    The site stores in your browser: your client-area session, preferred language, your choice regarding social media content, recent search criteria and draft requests (erased after 30 days). These are needed for the site to work.

    Social media content is only loaded after your consent, which you can change at any time from the legal notice page.

    6. Your rights

    You have the rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and to set instructions for your data after death.

    To exercise them: contact@corsepatrimoine.com or by post to 9 Rue du Maréchal Juin 20137 Porto-Vecchio. Proof of identity may be requested if in doubt.

    You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

    7. Security

    Exchanges are encrypted (HTTPS) and access to data is restricted by individual permissions. As no system is infallible, we will inform you of any incident affecting you, as required by law.

    Terms of use