Privacy Policy
1. Introduction
Haussrel attaches particular importance to protecting your privacy. This policy explains what data we collect when you use our website and platform, how we process it, and which rights you may exercise. It is drawn up in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French Data Protection Act.
2. Data controller
Haussrel acts as the data controller for the data collected through this site and the platform. For any question about the processing of your data, you may write to our data protection officer at [email protected].
3. Data we collect
We collect the data you provide at registration — first name, last name, email address, phone number and country of residence — together with technical data gathered automatically, such as IP address, browser type and the pages you visit. As part of our due diligence obligations, we also collect the proof of identity and address needed to verify your account.
4. Purposes of processing
Your data is used to create and administer your account, verify your identity, provide you with support, improve our services, send you operational communications about your account, and satisfy our legal and regulatory obligations.
5. Legal bases
Depending on the purpose, processing rests on the performance of our contract with you (Article 6.1.b GDPR), compliance with a legal obligation (Article 6.1.c), notably in respect of anti-money-laundering, our legitimate interest in securing and improving our services (Article 6.1.f), or your explicit consent where that is required (Article 6.1.a).
6. Data security
We apply appropriate technical and organisational measures, including encryption in transit and at rest, strict need-to-know access control and periodic security reviews, to protect your data against unauthorised access or disclosure.
7. Recipients and processors
We do not sell your personal data. We may share it with trusted providers acting on our behalf, notably for identity verification and payment processing, strictly limited to what is necessary for them to carry out their task and under a processing agreement compliant with Article 28 GDPR.
8. Transfers outside the European Union
Your data may be processed in countries outside the European Economic Area. Where that happens, we frame the transfer with appropriate safeguards — standard contractual clauses adopted by the European Commission, or an adequacy decision — ensuring a level of protection substantially equivalent to that guaranteed within the Union.
9. Retention periods
We retain your data for the lifetime of your account, then for the period imposed by our legal and regulatory obligations, notably five years after the end of the business relationship under anti-money-laundering and counter-terrorist-financing rules. Unconverted prospect data is deleted no later than three years after the last contact.
10. Your rights
You have the right to access your data, to have it rectified or erased, to restrict processing, to data portability, to object to processing, and to lay down directives on what happens to your data after your death. To exercise any of these rights, write to [email protected]. We reply within the one-month period set by the GDPR.
11. Complaint to the CNIL
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the supervisory authority competent in France.
12. Cookies and trackers
We use cookies to operate the site, remember your preferences and measure audience. Cookies that are not strictly necessary are set only after you consent, and you may withdraw that consent at any time. You can also manage them from your browser settings, bearing in mind that disabling some of them may affect how the site works.
13. Protection of minors
Our services are intended exclusively for adults and we do not knowingly collect data concerning anyone under eighteen. Were we to discover such data, we would delete it immediately.
14. Changes to this policy
This policy may change to reflect regulatory developments or the evolution of our services. Any substantial modification will be signalled by a message to the email address linked to your account, and the update date shown at the top of this page will be amended accordingly.