Privacy policy
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the French Data Protection Act.
1. Definitions
For a proper understanding of this policy, the following terms are defined as follows:
- Personal data : any information relating to an identified or identifiable natural person, directly or indirectly (article 4.1 of the GDPR).
- Processing : any operation performed on personal data (collection, recording, organisation, storage, modification, consultation, use, communication, erasure, etc.).
- Data controller : natural or legal person who determines the purposes and means of the processing.
- Processor : natural or legal person who processes data on behalf of the data controller.
- Data subject : natural person whose personal data is subject to processing.
- Data Protection Officer (DPO) : person designated to inform, advise and monitor compliance with the regulations on data protection.
- Cookie : small file placed on your device when you visit a website, allowing information relating to your browsing to be stored.
- GDPR : Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
- CNIL : Commission Nationale de l'Informatique et des Libertés, the French supervisory authority for data protection.
2. Data controller
The controller of your personal data is:
- Identity : Maître Frédéric Capdevila, notary
- Address : 47 bd Marinoni, 06310 Beaulieu-sur-Mer
- Email : fm.capdevila@notaires.fr
3. Data Protection Officer (DPO)
For any question relating to the protection of your personal data, you may contact the data controller, who also acts as Data Protection Officer within the practice:
Email : fm.capdevila@notaires.fr
Mail : Office Notarial du Cap d'Or, 47 bd Marinoni, 06310 Beaulieu-sur-Mer
4. Data collected and mandatory or optional nature
As part of the use of this website, we collect the following data:
Via the contact form
- First and last name · mandatory to identify you
- Email address · mandatory to reply to you
- Phone number · optional
- Subject of the request · mandatory to route the processing of your request
- Content of the message · mandatory
Fields marked as mandatory are required to process your request. Without them, we will not be able to follow up on your enquiry. Optional fields may be provided at your sole discretion to enrich the context of your request.
Automatically during browsing
- IP address (anonymised for analytics cookies)
- Browser type and version
- Pages visited and visit duration (via analytics cookies, subject to your consent)
- Server logs (access logs), kept for security purposes
5. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Response to contact requests | Explicit consent (article 6.1.a GDPR) |
| Service improvement and audience measurement | Explicit consent (article 6.1.a GDPR) |
| Security and server logs | Legitimate interest (article 6.1.f GDPR) |
6. Retention periods
- Contact form data : 3 years from the last contact or interaction
- Server logs : 12 months
- Analytics data (cookies): 13 months maximum (see our cookie policy)
7. Recipients of the data
Your data may be communicated, within the strict limits of their attributions, to the following processors and technical service providers:
- The website host, for hosting and security needs
- The email service provider (message routing service), for receiving and sending contact confirmations
These providers act as processors and are subject to contractual obligations compliant with the GDPR. Your data is never sold to third parties.
8. Transfers outside the European Union
Data collected via this website is processed and hosted within the European Union. No transfer to third countries is carried out. Should a provider be located outside the EU, appropriate safeguards (standard contractual clauses of the European Commission) would be implemented and you would be informed.
9. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
- Right of access : obtain confirmation that your data is being processed and receive a copy thereof
- Right to rectification : correct inaccurate or incomplete data
- Right to erasure : request the deletion of your data, within legal limits
- Right to restriction of processing : obtain the temporary suspension of the processing of your data
- Right to data portability : receive your data in a structured, machine-readable format
- Right to object : object to the processing of your data based on legitimate interest
- Right to withdraw consent : at any time, without affecting the lawfulness of prior processing
- Right to set directives : you may set directives concerning the retention, deletion and communication of your personal data after your death (article 85 of the French Data Protection Act)
10. How to exercise your rights
To exercise any of these rights, you may send your request:
- By email : fm.capdevila@notaires.fr
- By post : Office Notarial du Cap d'Or, 47 bd Marinoni, 06310 Beaulieu-sur-Mer, specifying the subject of your request and enclosing a copy of your identity document
We undertake to respond to your request within one month of its receipt. This period may be extended by two months due to the complexity or number of requests.
You may also contact us directly via our contact form.
11. Right to lodge a complaint with the CNIL
If you consider that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
- Website : www.cnil.fr
- Address : CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
12. Data security
The notarial office implements all appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in particular: encryption of communications (HTTPS/TLS), access controls, logging of access to data and regular backups.
13. Automated decisions and profiling
No decision producing legal effects regarding you, or significantly affecting you, is taken on the basis of automated processing of your personal data (article 22 of the GDPR). The website does not carry out any profiling operations.
14. Protection of minors
This website is not intended for minors under 15 years of age. In accordance with article 8 of the GDPR and article 45 of the French Data Protection Act, consent to the processing of personal data of a minor under 15 must be obtained jointly from the minor and the holder of parental authority. If you believe that a minor has provided us with personal data without this dual authorisation, you may contact us at the details indicated above to request its deletion.
15. Modification of this policy
This privacy policy may be modified at any time to reflect a regulatory, technical or organisational change. Any substantial modification will be notified on this page and, if applicable, by visible information on the website. We invite you to consult this page regularly to take note of any changes.