Privacy policy

Privacy policy

RISING STONE attaches great importance to protecting and respecting the privacy and personal data (“Personal Data”) of the users of its website (hereinafter the “Site”).

RISING STONE undertakes to implement adequate measures for the protection, confidentiality and security of Personal Data in accordance with the regulations in force in France and the European Union, in particular the General Regulation on the Protection of Personal Data EU 2016/679 of 27 April 2016 and the national laws adopted as part of its application.

The present charter (the “Charter”) informs users of the practices and processing inherent in the collection and use of Personal Data by RISING STONE as data controller.
Consequently, RISING STONE invites users to read this document carefully in order to know and understand the processing of Personal Data.

By browsing the Site, users accept this Charter and the general conditions of use.

Article 1. Personal data collected

Users are asked to provide their Personal Data in digital format when using the Site.

1.1 Principles applicable to the collection of Personal Data

In general, users can browse the Site without necessarily having to provide RISING STONE with Personal Data. RISING STONE only collects the Personal Data necessary to carry out the processing that it implements (“privacy by design”) and ensures them a high level of protection (“privacy by default”). In this respect, the processing operations requiring the collection of data are as follows:

  • Responding to requests for information (contact forms for requests for information and/or additional photos of a property).
  • Participating in surveys to improve the RISING STONE customer relationship and experience.
  • Sending newsletters and informative or commercial e-mail alerts.
  • Applying for jobs.

In this case, the personal information collected from users is at least: (i) Last name(s), (ii) First name(s), (iii) Email address, (iv) Telephone number, (v) Postal address, (vi) Country. This Personal Data is then kept for the time necessary to fulfil the user’s request. If it is not actually used, it is deleted within the timeframe recommended by the CNIL, i.e. after three years from the date it was collected by the Site, subject to legal possibilities and obligations in terms of archiving, obligations to retain certain data and/or anonymisation.

1.2 Site user browsing information

When using the Site or certain services linked to the Site, certain data is collected automatically such as: (i) IP address, (ii) reference of the browsing software used, (iii) browsing data (date, time, content consulted, search terms used, etc.), (iv) operating system references. Among the technologies used to collect this information, RISING STONE may use “php” sessions which store each user’s data using a unique session identifier. These php sessions keep the data in memory only as long as the user is browsing.
The data collected during browsing is therefore deleted when the user’s browser is closed, or, where applicable, within a maximum period of thirteen months from the time it was collected.

Article 2. Legal basis for the collection and processing of personal data

RISING STONE processes Personal Data in the cases authorised by the regulations in force and under the following conditions:

  • Obtaining users’ free, specific, informed and unambiguous consent to the processing of their Personal Data (it should be noted that for minors under the age of 18, consent must be given by the legal representative).
  • Collection of Personal Data required to fulfil users’ requests.
  • Compliance with RISING STONE’s legal and/or regulatory obligations (such as the fight against fraud and corruption).
  • Protection of RISING STONE’s legitimate interests (such as protecting the security of its computer network).

Article 3. Recipients of the personal data collected

Only authorised personnel of the RISING STONE group and its service providers may have access to the Personal Data collected and be required to process it, without prejudice to its possible transmission to the bodies responsible for a mission of control or inspection in accordance with the legislation and/or regulations in force or for the purposes of responding to a judicial or administrative decision. Authorised personnel are subject to an obligation of discretion. RISING STONE undertakes not to market the Personal Data collected to third parties.

Article 4. Transfer of personal data

The Personal Data collected from users of the Site is kept exclusively in France and is not transferred outside the European Union. In the event of recourse to affiliates or service providers located outside the European Union, RISING STONE undertakes to verify that appropriate measures have been put in place to ensure that users’ Personal Data benefit from an adequate level of protection.

Article 5. Data security

RISING STONE collects and processes users’ Personal Information with the utmost confidentiality and in compliance with relevant laws. Users are protected against unauthorised access, modification, disclosure or destruction of their Personal Information. Where disclosure of Personal Data to third parties is necessary and authorised, RISING STONE will ensure that such third parties provide the same level of protection for the Personal Data concerned as that provided by RISING STONE, and will require contractual guarantees to ensure that the Personal Data is processed exclusively for the purposes agreed by the users, with the required confidentiality and security (in particular by means of European Commission standard clauses, Internal Company Rules or the Data Protection Shield set up between the European Union and the United States of America). RISING STONE implements technical and organisational measures to ensure that Personal Data is kept securely for the time necessary to fulfil the purposes for which it is to be used. Users’ attention is drawn to the fact that no transmission or storage technology is totally infallible. Therefore, in the event of a proven breach of Personal Data likely to give rise to a high risk for the rights and freedoms of users, RISING STONE will inform the competent supervisory authority of this breach in accordance with the procedures provided for by the applicable regulations. Users are responsible for exercising caution to prevent any unauthorised access to their Personal Data and in particular to their computer and digital terminals (computer, smartphone, tablet in particular).

Article 6. Links to other websites

The Site may occasionally contain links to the sites of partners or third-party companies which have their own data protection charter. RISING STONE has no control over the content of these sites and declines all responsibility for the use made of information collected when users click on these links. RISING STONE therefore invites users to familiarise themselves with the data protection policies implemented by the publishers of these sites before sending them any nominative information concerning them.

Article 7. Users’ rights

Users are reminded that they have the following rights, subject to the limitations provided for by the legislation in force:

7.1. Right to information on the processing of Personal Data

RISING STONE undertakes to use its best efforts to provide concise, transparent and accessible information on the conditions under which users’ Personal Data is processed.

7.2. Right of access to Personal Data

Each user has access to the Personal Data being processed by RISING STONE and has the right to receive a copy in electronic form (for any additional copies, RISING STONE will be entitled to charge a fee based on the administrative costs incurred).

7.3. Right to erasure (“right to be forgotten”) and rectification of Personal Data

Each user has the right to request the deletion and/or rectification of Personal Data concerning him or her when such data is erroneous or obsolete. It is specified that RISING STONE may retain certain Personal Data when required to do so by law or in the event of a legitimate reason.

7.4. Right to object

Users may object at any time for legitimate reasons:

the use of their Personal Data for direct marketing purposes or the re-use of their Personal Data for processing other than that consented to, except in the event of RISING STONE fulfilling one of its legal obligations.

7.5. Right to limit the processing of Personal Data

Users have the right to request that the processing of their Personal Data be limited to that which is necessary. This right is applicable only:

  • If the user disputes the accuracy of his/her Personal Data
  • If the user can establish that the processing of his or her Personal Data is unlawful and requests that its use be restricted rather than erased.
  • If RISING STONE no longer needs the user’s Personal Data but it is still necessary for the user to establish, exercise or defend legal claims.
  • If the user objects to processing based on the legitimate interest of the controller, during the verification as to whether the legitimate grounds pursued by the controller prevail over those of the user.

7.6. Right of complaint to a supervisory authority

If users consider that the efforts made by RISING STONE to preserve the confidentiality of Personal Data do not guarantee respect for their rights, they may lodge a complaint with the competent supervisory authority (CNIL or any other authority mentioned on the list available from the European Commission).

7.7. Right to the portability of Personal Data

Users have a right to the portability of their data, allowing them to obtain their Personal Data from RISING STONE in a structured, commonly used and machine-readable format and to request that this Personal Data be transmitted to another data controller.

7.8. Right to decide what happens to Personal Data after death

Users also have the right to organise the fate of their Personal Data after their death by adopting general or specific directives which RISING STONE undertakes to respect.
In the absence of such directives, RISING STONE recognises the possibility for heirs to exercise certain rights, in particular the right of access if it is necessary for the settlement of the deceased’s estate and the right of opposition.

7.9. Conditions for exercising rights

To exercise their rights, users are invited to contact the RISING STONE Personal Data Protection Officer in accordance with the procedures described in article 10.
To help them exercise their rights, the CNIL provides model letters on its website (www.cnil.fr). Before processing the user’s request(s), RISING STONE may check their identity by asking them for proof of identity. The Personal Data Protection Officer will reply to their request(s) as soon as possible and in any event within one (1) month of proof of identity being provided. If necessary, this period may be extended by a further two (2) months depending on the complexity and number of requests, in which case RISING STONE undertakes to inform users of the extension and the reasons for the postponement.

Article 8. Modification of the personal data protection charter

RISING STONE reserves the right to make changes to this Privacy Policy at any time in order to comply with changes in legislation and regulations and/or to improve its policy on the processing and protection of Personal Data. In the event of modification, a new version will be updated and put online with the date of “Last update.”

Article 9. Applicable law and competent court

This Charter is governed by French law, including the provisions applicable to the rules of private international law. In the absence of amicable agreement, jurisdiction is given to the courts within the jurisdiction of the Chambéry Court of Appeal, notwithstanding plurality of defendants and/or the introduction of third parties, to hear any dispute relating to the use of the site and/or the validity, performance and interpretation of these GCU.

Article 10. Contact

If you have any questions about this Charter and would like to rectify, add to or update it, please contact RISING STONE:

  • By sending an email to the Data Protection Officer at contact@rising-stone.com.
  • Or by completing the following online contact form www.rising-stone.com.
  • Or by sending a letter to the following address RISING STONE – For the attention of the Data Protection Officer, Ms Alexia Dantigny – 200, RUE DES JEUX OLYMPIQUES – 73550 MERIBEL LES ALLUES.