This policy informs you of the processing of personal data that SOTHYS PARIS carries out as part of the operation of the website, hereinafter the “Website”, in its capacity as data controller within the meaning of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016, known as “GDPR”.

We attach great importance to the protection of the personal data of users of the Website and, to this end, we have implemented the following policy:

What is personal data?

This refers to any data likely to directly (ex: a name) or indirectly to a natural person (ex : an identifier, a code).

What data does we collect?

As part of your user experience of our Website, we collect personal data about you.

You can provide us with your personal data in different ways via our Website:

  • Either directly: request for information, creation of an account.
  • Or indirectly: cookies.

We make sure to collect only data that is strictly necessary to be able to offer you a user experience that is as pleasant as possible and adapted to your needs and to be able to provide you with the services to which you have subscribed.

For this purpose, your consent is always required except in cases where we are in the context of the execution of a contract concluded with you (sales contract for example).

The fields that must be filled in are marked with an asterisk.

The data that may be collected are as follows:

Situation that may give rise to the collection of personal dataNature of data collectedPurpose of the processing carried out by usNature of user consentData retention period
Creating a professional account on the website  User name, passewordManage customer relations  Performance of a sale contract3 years from the end of the business relationship  
EnquiriesSurname, first name, email addressSend you an answerConsent3 years from the last relaunch
Navigation (data collected by cookies)  (On these points, see cookies policy)

It should be noted that the retention periods indicated cover retention in active database and internal archives.

Who is the data controller?

The data controller corresponds to the person who determines the purposes and means of the processing. It is directly responsible for compliance with personal data protection obligations.

Sothys Paris is responsible for the treatment.

Recipients of your data

Only members of Sothys Paris’ internal services may be required to process some of your personal data for the purposes of the execution of the contract, the management of the customer relationship and the management of the Website.

Data security and retention

We ensure the confidentiality of your personal data and put in place technical means to ensure the conservation of these.

Your data is stored on protected software with restricted and controlled access.

What are your rights?

In accordance with the regulations in force, you have a right of information (receive concise, transparent, understandable and easily accessible information in clear and simple terms), a right of access to your personal data, rectification, opposition, erasure and limitation thereof, by contacting the address:  For any request to be admissible, you must attach a copy of your identity document.

In case of exercise of your right of opposition and / or deletion and / or portability of data concerning you, we will be unable to perform certain services.

In addition, you have the possibility to withdraw your consent to the collection and processing of your personal data at any time.

You also have the right to lodge a complaint with the CNIL and/or to take any legal remedy.