Privacy & GDPR
Your data, under your control
The practice collects the strict minimum required to process your request. No data is resold, shared with commercial third parties, or used for marketing.
Data controller
Cabinet ACJ Expertises (registered company: MY MAISON DU SUD), represented by Anne-Cécile Judais. Contact: [email protected]
Data collected
Contact form: name, role, email, phone (optional), matter type, free-text message. Phone and email exchanges: information you provide to scope the engagement. No advertising tracking cookies and no individual profiling; aggregated, anonymous audience measurement only (see "Hosting & sub-processors").
Purposes
Responding to your contact request. Conducting valuation missions you commission. Meeting accounting and professional obligations.
Legal basis
Article 6.1.b GDPR — performance of a contract (or pre-contractual measures at your request) — for the data required for the mission. Article 6.1.f GDPR — the practice's legitimate interest in responding to inbound enquiries — for data submitted through the contact form.
Retention
Contact requests without follow-up: 3 years from last exchange. Mission files: 10 years from delivery of the report (professional and tax obligations).
Recipients
Data remains internal to the practice. It may be shared with third parties strictly necessary to the mission (instructing notary, instructing counsel, tax authority within the legal framework) — always with prior notice to you.
Hosting & sub-processors
The site and contact-form processing are hosted by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA), acting as a processor under Article 28 GDPR. Form submissions are stored in a Cloudflare D1 database and notified by email via Cloudflare Email Routing. Anti-spam protection uses Cloudflare Turnstile (no tracking cookie); audience measurement uses Cloudflare Web Analytics (no cookie, no identifying personal data). Any transfers outside the EU are governed by the European Commission's Standard Contractual Clauses and Cloudflare's Data Processing Addendum.
Your rights
Under GDPR you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to [email protected]. You may also file a complaint with the CNIL — cnil.fr.
Cookies
The site sets no advertising or third-party audience-tracking cookies. Audience measurement (Cloudflare Web Analytics) and anti-spam protection (Cloudflare Turnstile) operate without cookies. Only strictly necessary cookies (language preference) may be set, with no consent required.
Security
Exchanges are encrypted in transit (HTTPS). Form submissions are stored in an access-restricted Cloudflare D1 database. Physical files are kept securely at the practice. Digital backups are encrypted at rest.