Privacy
policy.

The data controller is Elinora Luxury Real Estate, SASU, 231 Rue Saint-Honoré, 75001 Paris, France, registered with the Paris Trade and Companies Register under number 942 789 736.

Contact for any question relating to personal data: contact@elinoraluxuryrealestate.com.

The maison is not required to appoint a data protection officer under article 37 GDPR; an internal privacy lead handles all requests.

Identification and contact data: title, first and last name, email address, telephone number, country of residence, language.

Project data: nature of your enquiry, indicative budget, destination, type of property, timing, information about a property you own (address, surface area, characteristics) and anything else you choose to share.

Application data (Careers page): background, experience, message and any attachments.

Account data, where member access is granted: identifier, email address, authentication data and connection logs.

Strictly necessary technical data: truncated IP address, device and browser type, security logs.

No special-category data within the meaning of article 9 GDPR is requested. Documents required for anti-money-laundering purposes (identity document, proof of source of funds) are requested only at the contractual onboarding stage, never through website forms.

Responding to your enquiries and preparing a possible contractual relationship — pre-contractual steps taken at your request (art. 6.1.b) and our legitimate interest in managing our contacts (art. 6.1.f).

Performing the mandates and services entrusted to the maison — performance of the contract (art. 6.1.b).

Managing applications received — pre-contractual steps and legitimate interest in recruitment (art. 6.1.b and 6.1.f).

Complying with legal obligations: accounting retention, loi Hoguet obligations, anti-money-laundering vigilance (art. 6.1.c and articles L.561-1 et seq. of the Monetary and Financial Code).

Sending, where applicable, editorial communications or confidential opportunities — your consent (art. 6.1.a), which can be withdrawn at any time.

Measuring website audience and improving the experience — your consent collected through the cookie banner (art. 6.1.a).

Securing the website and preventing abuse — legitimate interest (art. 6.1.f).

Fields marked as required in our forms are necessary to handle your enquiry; without them we cannot respond. All other information is optional and serves only to understand your project better.

Your data is accessible to the management of the maison and to authorised persons only, all bound by a duty of confidentiality.

Where strictly necessary for your project, it may be shared with notaries, lawyers, advisers, surveyors, architects, technical experts, management partners and service providers involved in the file.

Technical processors: website hosting and delivery (Lovable Labs Incorporated, Cloudflare, Inc.), database, authentication and application storage (Supabase, infrastructure located in the European Union), professional email. Each processor is bound by a contract compliant with article 28 GDPR.

No personal data is sold, rented, exchanged or transferred for third-party marketing purposes.

Application data is hosted within the European Union. Certain technical providers may nevertheless be established in the United States.

Such transfers are governed by the appropriate safeguards of Chapter V GDPR: European Commission standard contractual clauses, additional technical measures (encryption, minimisation) and, where applicable, certification under the EU-US Data Privacy Framework. A copy of these safeguards is available on request.

Enquiries that do not lead to a contractual relationship: three years from your last contact.

Clients and principals: the duration of the contractual relationship, then five years from its end under civil limitation rules and loi Hoguet obligations; ten years for accounting records (art. L.123-22 of the Commercial Code).

Documents collected for anti-money-laundering purposes: five years from the end of the business relationship (art. L.561-12 of the Monetary and Financial Code).

Unsuccessful applications: two years from the last contact, unless you agree to a longer period.

Consent to non-essential cookies: six months. Cookies and trackers: thirteen months maximum.

Security logs: twelve months maximum.

Appropriate technical and organisational measures are implemented: encryption in transit (HTTPS/TLS), encryption at rest for databases, strict access segregation through row-level security policies, reinforced authentication for administrative accounts, logging, regular backups and confidentiality undertakings.

In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed without undue delay in accordance with article 34 GDPR, the French supervisory authority (CNIL) being notified within 72 hours.

No decision producing legal effects concerning you is taken solely on the basis of automated processing, and no advertising profiling is carried out within the meaning of article 22 GDPR. Every project qualification is performed by a person.

Editorial communications and confidential opportunities are sent only to persons who have given their agreement or who have approached the maison in connection with a project, in accordance with article L.34-5 of the French Postal and Electronic Communications Code.

Every message includes a simple, free means of opting out; a request sent to contact@elinoraluxuryrealestate.com has the same effect.

The website and services of Elinora Luxury Real Estate are not intended for persons under the age of eighteen. No data is knowingly collected from minors; any data transmitted in error will be deleted upon notice.

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time without affecting the lawfulness of prior processing, and the right to issue directives concerning the fate of your data after your death (art. 85 of the French Data Protection Act).

These rights may be exercised by email at contact@elinoraluxuryrealestate.com or by post to Elinora Luxury Real Estate, 231 Rue Saint-Honoré, 75001 Paris. A response is provided within one month, extendable by two months where the request is complex. Proof of identity may be requested in case of reasonable doubt.

You may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

The use of cookies and trackers is described in our Cookie Policy. No non-essential tracker is placed before your consent, which you may change or withdraw at any time via the "Manage cookies" link in the footer.

This policy may be updated to reflect legal, technical or organisational developments. The applicable version is the one published on this page, bearing the update date shown above.