Français | English

Privacy and Personal Data Protection Policy

Last updated: 10 September 2026

In brief

At pariscabane, we use the personal data necessary to support you in your property projects, to deliver our services, to comply with our legal obligations and, where the regulations allow, to keep you informed of our services.

We pay particular attention to the confidentiality and security of the information entrusted to us.

In practice:

  • we never sell your personal data;
  • we do not use advertising cookies, marketing pixels or advertising tracking tools on our website;
  • we use Plausible Analytics to measure overall website traffic without setting advertising cookies;
  • we use business/enterprise-tier offerings of our artificial intelligence tools, and contractually require these providers not to use the data we entrust to them to train their models;
  • no decision producing legal effects or significantly affecting you is taken about you on a wholly automated basis;
  • data used for marketing purposes is kept for limited periods;
  • where the law provides for it, you can exercise your right of withdrawal directly online;
  • you may exercise your rights at any time by writing to us at rgpd@pariscabane.fr.

1. Who processes your data?

pariscabane is a brand used by several legally distinct companies.

The website pariscabane.fr is published by:

LIMA SAS 75 rue Oberkampf 75011 Paris, France RCS Paris 881 928 451

LIMA SAS owns the pariscabane brand and is the controller for data relating to browsing, the operation and the security of the website.

The property services provided under the pariscabane brand are carried out by two legally distinct estate agencies, which use the brand under licence:

CARDEA SAS 75 rue Oberkampf 75011 Paris, France RCS Paris 821 926 185

CARDEO SAS 82 rue Lemercier 75017 Paris, France RCS Paris 918 653 833

Depending on which agency handles your file, CARDEA or CARDEO acts as the controller for the personal data relating to your property project.

For any question relating to the use of your data, or to exercise your rights:

rgpd@pariscabane.fr

or by post:

pariscabane – Personal Data 75 rue Oberkampf 75011 Paris, France

2. What data may we collect?

We only collect the data necessary for the purposes we pursue.

Depending on your relationship with us, this may include:

  • identity data;
  • contact details: address, telephone number, email address;
  • identification or authentication data;
  • data relating to your family or professional situation, where necessary for your project;
  • financial, banking or wealth-related data;
  • information relating to a property;
  • information relating to your sale, purchase, search, letting or property management project;
  • documents required to build and assess a file;
  • data required for our customer due-diligence and anti-money-laundering and counter-terrorist-financing obligations;
  • data relating to your interactions with our services, our communications or our digital tools, including, where you exercise an online right of withdrawal, the date and time of your request and the acknowledgement of receipt sent to you;
  • technical data relating to your use of our website.

We may also process the data of people who are not directly our clients, including, in particular:

  • prospective clients;
  • prospective buyers or tenants;
  • guarantors;
  • legal representatives;
  • shareholders or beneficial owners of legal entities;
  • agents acting on behalf of a party;
  • notaries, solicitors, accountants, managing agents, surveyors or other professionals involved in a transaction.

3. Where does your data come from?

Data may be collected directly from you, in particular when you:

  • contact us;
  • fill in a form;
  • ask for a valuation or information;
  • entrust a property project to us;
  • view a property;
  • put together a file;
  • sign an agency agreement or contract;
  • correspond with one of our staff;
  • exercise a right, in particular a right of withdrawal, through our online tools.

Some data may also come from external sources where their use is permitted, for example:

  • property listing websites;
  • websites and search engines;
  • social media, for information you have made public;
  • public registers and databases;
  • the Official Journal (Journal officiel);
  • the Trade and Companies Register (RCS);
  • property or administrative databases;
  • bodies or providers involved in fraud prevention or compliance with our regulatory obligations;
  • partners or individuals who refer a prospective client to us;
  • prospecting files compiled or used in accordance with the regulations.

The fact that a piece of information or a telephone number is public does not, however, necessarily mean that it may be freely used for marketing purposes.

4. Why do we use your data?

Your data may in particular be used to:

  • respond to your enquiries;
  • assess your property project;
  • offer you properties or services matching your search;
  • arrange viewings;
  • carry out valuations;
  • prepare, enter into and perform agency agreements, contracts or other documents;
  • manage a sale, purchase, letting or property management;
  • manage tenant or buyer applications;
  • manage our relationship with our clients, prospective clients and partners;
  • communicate with you in connection with a project or contract;
  • enable you, where the regulations require it, to exercise your right of withdrawal directly through our online tools;
  • manage invoicing, payments and debt collection;
  • carry out the administrative and accounting follow-up of our operations;
  • comply with our legal and regulatory obligations;
  • carry out the checks required for anti-money-laundering and counter-terrorist-financing purposes, customer due diligence and fraud prevention;
  • defend our rights and manage any complaints or disputes;
  • improve our services and tools;
  • carry out internal statistical analysis;
  • send you marketing communications where the applicable regulations permit it.

5. Marketing and commercial communications

The rules applicable differ depending on the means of communication used and on whether you are a consumer or a business.

5.1 Telephone

Since 11 August 2026, where you are a consumer, we may only contact you by telephone for marketing purposes if you have given your prior consent, except where the law permits a call in connection with the performance of an ongoing contract.

Giving us your telephone number does not, on its own, amount to consent to receive marketing calls.

When we seek your consent, we tell you in particular:

  • the identity of the business that may call you;
  • the nature of the services concerned;
  • the period for which you agree to be called, which cannot exceed one year;
  • your ability to withdraw your consent at any time;
  • the means by which you may do so.

Consent requires a positive act on your part and is never renewed by default.

You may withdraw your consent at any time and free of charge, in particular:

  • by telling us directly during a call;
  • by writing to us at rgpd@pariscabane.fr;
  • or by any other simple means made available to you.

We keep the records needed to demonstrate that your consent was obtained, in the manner and for the periods required by the regulations.

Where a call does not amount to marketing but responds to a request you have made to us, or is necessary for the follow-up of your project or the performance of a contract, the rules on consent to marketing do not apply in the same way.

5.2 Email and SMS

Where you are a consumer, sending marketing communications by email or SMS in principle requires your prior consent.

By way of exception, where you are already a client, we may send you certain communications concerning services similar to those you have already used with us, provided you were given the opportunity to object when your contact details were collected, and in every communication.

You may unsubscribe or object to these communications at any time.

5.3 Businesses

Where the contact details used are business contact details and the communication is linked to the recipient's professional activity, certain marketing activities may be based on our legitimate interest, subject to appropriate information being provided and the ability to object easily and free of charge.

5.4 Postal mail

We may use your postal address for marketing purposes where we have a legal basis to do so.

You may object to this at any time and free of charge.

5.5 Managing objections

Where you object to receiving marketing communications, or withdraw your consent, we may keep the information strictly necessary to ensure your choice continues to be respected.

This information will not be used for any other purpose.

6. On what legal bases do we process your data?

Depending on the purpose concerned, our processing relies on one of the following legal bases:

Performance of a contract or pre-contractual measures

For example, to:

  • respond to a request relating to a property project;
  • arrange certain requested services;
  • enter into or perform an agency agreement;
  • manage a property;
  • process a rental application;
  • follow up a property transaction.

Compliance with a legal obligation

In particular, for:

  • our accounting and tax obligations;
  • our obligations as an estate agent;
  • anti-money-laundering and counter-terrorist-financing requirements;
  • obligations to retain certain documents;
  • responding to authorised authorities;
  • providing an online right-of-withdrawal function, where the regulations require it.

Our legitimate interest

In particular, for:

  • ensuring the security of our systems;
  • improving our services;
  • preventing fraud;
  • managing and defending our rights;
  • carrying out certain statistical analyses;
  • certain marketing activities, where the regulations permit it.

Where we rely on our legitimate interest, we ensure that it does not disproportionately affect your rights and freedoms.

Your consent

We obtain your consent where it is required, in particular for certain telephone, email or SMS marketing activities.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

7. Online right of withdrawal

Where you enter into a distance contract with us by means of an online interface, and the regulations grant you a right of withdrawal, we provide you with a dedicated, free and accessible function allowing you to exercise that right directly online.

An acknowledgement of receipt is sent to you without delay, on a durable medium, following your request.

This right is exercised independently of the specific rules applicable to preliminary property sale contracts (unilateral or bilateral promises to sell, and sale agreements), which remain governed by the provisions specific to the French Construction and Housing Code.

8. Use of artificial intelligence tools

We may use artificial intelligence tools to assist us with certain tasks, in particular:

  • analysing or summarising documents;
  • administrative processing;
  • researching or organising information;
  • preparing communications;
  • assisting with the analysis of a file or a situation.

These tools are used solely to assist pariscabane staff.

Decisions affecting our clients, or producing legal or otherwise significant effects on them, remain subject to human oversight.

Where personal data is used with such tools, we implement technical, organisational and contractual safeguards appropriate to the nature of the data and the risks involved.

We consistently use business/enterprise-tier offerings of our artificial intelligence tools, and contractually require these providers not to use the data we entrust to them to train their models.

9. Who may we share your data with?

We never sell your personal data.

To the extent necessary for your project, our services or compliance with our obligations, certain information may nonetheless be accessible or disclosed to:

  • pariscabane's authorised staff;
  • the estate agents working with our agencies;
  • other parties to a property transaction, where necessary;
  • notaries;
  • solicitors;
  • bailiffs/enforcement officers (commissaires de justice);
  • accountants;
  • managing agents;
  • surveyors;
  • insurers and brokers;
  • guarantee bodies;
  • payment providers;
  • electronic signature providers;
  • IT and hosting providers, including those operating our customer relationship management tools and our online withdrawal functions;
  • administrative or judicial authorities and other duly authorised bodies.

These recipients only receive the information necessary to carry out their role.

Where these organisations act as processors on our behalf, we govern their involvement by contract in accordance with the applicable regulations.

In the event of a reorganisation, merger, acquisition or transfer of all or part of the business concerned, the necessary data may be transferred to the parties to the transaction, in accordance with the applicable regulations.

10. How long do we keep your data?

We only keep your data for as long as is necessary for the purposes for which it was collected, and thereafter, where necessary, in intermediate archiving for the periods required by the regulations or necessary to defend our rights.

Prospective clients

Data used for marketing purposes is kept, as a rule, for a maximum period of three years from its collection or from the prospective client's last contact with us.

A new period does not start merely because we made an approach that went unanswered.

Clients

Data necessary for the follow-up of the contractual relationship is kept for the duration of that relationship.

Certain data may then be kept in archive for the legal or limitation periods applicable, which may in particular reach five or ten years depending on the nature of the documents and obligations concerned.

Consent to telephone marketing

Consent allowing telephone marketing cannot be given for a period exceeding one year and cannot be renewed by default.

The information needed to prove this consent, in particular its content, date and time, is kept for three years from when it was obtained, in accordance with the regulations.

Where necessary, it may be archived beyond this period for the purpose of establishing, exercising or defending legal claims.

Exercise of the online right of withdrawal

The information needed to demonstrate the exercise of your right of withdrawal (date, time, acknowledgement of receipt) is kept for as long as necessary to evidence that exercise, within the limits of the applicable limitation periods.

Objections to marketing

The data strictly necessary to record your objection may be kept to ensure your choice continues to be respected.

Regulatory obligations

Certain information may be kept for the periods specifically provided for by the applicable texts, in particular for accounting, tax or anti-money-laundering and counter-terrorist-financing purposes.

Once the applicable periods have expired, the data is deleted or anonymised.

11. Transfers of data outside the European Economic Area

We favour, as far as possible, solutions that allow data to be processed within the European Economic Area (EEA).

Some of our providers may nonetheless process or make certain data accessible from a country located outside the EEA.

Where this is the case, we ensure that the transfer is based on a mechanism recognised by the applicable regulations, in particular:

  • an adequacy decision of the European Commission;
  • the standard contractual clauses adopted by the European Commission;
  • or any other mechanism ensuring an appropriate level of protection.

Further information on the safeguards applicable may be requested at rgpd@pariscabane.fr.

12. Security and confidentiality

We implement appropriate technical and organisational measures to protect data against, in particular:

  • unauthorised access;
  • loss;
  • alteration;
  • disclosure;
  • accidental or unlawful destruction.

Access to information is restricted to those who need it for their role or duties.

In the event of a personal data breach likely to result in a risk to individuals' rights and freedoms, we follow the notification procedures required by the regulations, in particular to the CNIL (the French data protection authority) and, where the regulations require it, to the individuals concerned. In such a case, we undertake to examine the causes of the incident and to take the necessary measures, within reasonable limits, to mitigate its negative effects.

These commitments cannot be treated as an admission of fault or liability regarding the occurrence of the incident in question.

13. Your rights

Subject to the conditions set out in the GDPR and applicable law, you may in particular have:

  • a right of access to your data;
  • a right of rectification;
  • a right to erasure;
  • a right to restriction of processing;
  • a right to object, where processing is based on our legitimate interest;
  • a right to data portability, in the cases provided for by the regulations;
  • the right to withdraw your consent where processing is based on it;
  • the right to object, at any time and free of charge, without having to justify your request, to your data being used for marketing purposes;
  • the right to issue instructions on the fate of your data after your death, under the conditions set out in French law;
  • the right to lodge a complaint with the CNIL.

To exercise your rights:

rgpd@pariscabane.fr

or:

pariscabane – Personal Data 75 rue Oberkampf 75011 Paris, France

We may ask you for information to verify your identity where necessary.

A copy of an identity document is only requested where there is reasonable doubt as to your identity and where this check is necessary and proportionate.

We respond to requests within the periods required by the regulations.

You may also lodge a complaint with:

Commission Nationale de l'Informatique et des Libertés – CNIL 3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07, France www.cnil.fr

14. Cookies and audience measurement

Our website does not use advertising cookies, profiling cookies, or tools designed to track your browsing for behavioural advertising purposes.

We use Plausible Analytics to measure overall use of our website.

Subject to the configuration actually used on the site, this solution does not set cookies that allow visitors to be tracked individually, and is not used by pariscabane to build individual advertising profiles.

Technical information strictly necessary for the operation, security and maintenance of the website may also be recorded in the technical logs of our infrastructure and providers.

Where we send you personalised links as part of your property search, we may record certain interactions with these links, in particular their opening or use, to confirm that our proposals have reached you and to improve the support we provide with your search.

This information is not used for behavioural advertising purposes.

Third-party sites accessible from our website apply their own privacy and cookie policies.

15. Changes to this policy

This policy was last updated on 10 September 2026.

We may amend it where necessary, in particular to reflect changes in our business, our tools, or the applicable regulations.