GDPR Compliance

Stone Investment is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This page explains how we process your data and the rights you have under the regulation.

Scope

This GDPR notice applies to all personal data processed by Stone Investment in connection with the services we provide, including our website, property listings, client communications, and related services. It applies to individuals located in the European Economic Area (EEA), the United Kingdom, and Switzerland.

Data Controller

The data controller responsible for your personal data is:

Stone Investment
Email: contact@stoneinvestment.fr

Legal Basis for Processing

We process your personal data on the following legal bases as defined by Article 6 of the GDPR:

Consent (Art. 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving our newsletter or marketing communications.
Contractual Necessity (Art. 6(1)(b)): Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract, such as property enquiries or valuations.
Legal Obligation (Art. 6(1)(c)): Where processing is necessary for compliance with a legal obligation, such as anti-money laundering regulations.
Legitimate Interests (Art. 6(1)(f)): Where processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights do not override those interests. This includes improving our services, fraud prevention, and direct marketing to existing clients.

Types of Data Collected

We may collect and process the following categories of personal data:

Identity Data: First name, last name, title
Contact Data: Email address, telephone number, postal address
Financial Data: Information relevant to property transactions and investment capacity
Technical Data: IP address, browser type, operating system, time zone, and cookie data
Usage Data: Information about how you use our website and services
Communication Data: Your preferences for receiving communications and your communication history with us

Data Processing Purposes

Your personal data is processed for the following purposes:

Providing property search, listing, and advisory services
Managing client relationships and responding to enquiries
Processing property transactions and related documentation
Sending relevant property alerts and market updates (with consent)
Improving our website, services, and user experience
Complying with legal and regulatory obligations
Preventing fraud and ensuring security

We may share your personal data with:

Service Providers: Third-party companies that provide services on our behalf (hosting, analytics, email delivery), bound by data processing agreements.
Professional Partners: Notaries, solicitors, and financial institutions involved in property transactions, only with your knowledge.
Regulatory Authorities: Where required by law or regulation.

Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods include:

Client data: For the duration of the business relationship plus the applicable statutory limitation period
Marketing contacts: Until you withdraw consent or 3 years from last interaction
Website analytics: 26 months maximum
Legal and regulatory records: As required by applicable law

Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data.
Right to Rectification (Art. 16): You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Art. 17): You have the right to request deletion of your personal data in certain circumstances (“right to be forgotten”).
Right to Restriction (Art. 18): You have the right to request restriction of processing in certain circumstances.
Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making (Art. 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us at contact@stoneinvestment.fr. We will respond to your request within one month. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.

We may request proof of identity before processing your request. There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.

Supervisory Authority

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In France, the relevant authority is:

CNIL (Commission Nationale de l’Informatique et des Libertés)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr

Updates to This Policy

We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact Us

For any questions regarding this GDPR notice or our data protection practices, please contact us at:

Email: contact@stoneinvestment.fr