Privacy policy

This page explains how this site processes your personal data when you use it, in accordance with the General Data Protection Regulation (GDPR) and the French “Informatique et Libertés” law.

1. Data controller

The data controller is GROUPE CSPM FRANCE – CSPM ASSURANCES, an insurance brokerage company (full details in the legal notice). For any question about your data: contact@cspm.fr.

2. Data we collect

• Through the call-back and appointment forms: your activity or situation, last name, first name, phone number, e-mail address (optional), preferred time slot and type of appointment, address of the location if we travel to you.
• Technical data linked to a request: IP address, browser, page the request came from, date and time. They are used for security and to fight spam.
• Your cookie choices (see the cookie policy).

We do not ask you for any health data or sensitive data in these forms. Please do not enter any in the free-text fields.

3. Why we use it and on what legal basis

• Calling you back, reviewing your insurance request and arranging an appointment: pre-contractual steps taken at your request (art. 6.1.b GDPR) and your consent (form checkbox, art. 6.1.a).
• Site security and fighting spam: legitimate interest (art. 6.1.f).
• Audience measurement and marketing (only if such services are enabled): your consent (art. 6.1.a), which you can withdraw at any time.
• Complying with our legal and regulatory obligations as an insurance intermediary: legal obligation (art. 6.1.c).

We do not use your data to make automated decisions that produce legal effects concerning you.

4. Who receives your data

• Authorised teams at CSPM Assurances & Crédits (Cannes and Paris agencies).
• Our technical service providers, who act on our behalf: website host and e-mail service (Hostinger).
• Insurance companies and partners, only to the extent necessary to review your file and with your agreement.

We do not sell your data.

5. How long we keep it

• Call-back and appointment requests not followed by a policy: 3 years from our last contact with you.
• If a policy is taken out: for the duration of the policy, then for the applicable legal retention and limitation periods.
• Technical data (IP address, browser) linked to a request: kept with the request, for no longer than the same period.
• Cookie choices: 6 months, after which we ask you again.

6. Where your data is stored

Data is hosted by Hostinger International Ltd. If data were to be transferred outside the European Union, it would be covered by appropriate safeguards provided for by the GDPR (for example the European Commission’s standard contractual clauses).

7. Your rights

You have the following rights over your data: access, rectification, erasure, restriction, objection, portability, as well as the right to withdraw your consent at any time and to set directives on what happens to your data after your death.

To exercise them, write to contact@cspm.fr, stating your request. We may ask you for proof of identity if in doubt. We reply within one month.

If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – cnil.fr/fr/plaintes.

8. Security

The site is served over HTTPS. Access to requests is restricted to authorised persons and protected by a password. We limit the data collected to what is necessary.

9. Cookies

Details are in our cookie policy. You can change your choices at any time using the “Manage my cookies” link at the bottom of every page.

10. Updates

We may update this policy, for example if we add a service. The version in force is always the one on this page.

Additional information

Recipients and processors

Your data may be passed on, to the extent necessary for your request, to the insurance companies and partners approached, to our host (HOSTINGER INTERNATIONAL LTD, Cyprus, European Union), to our e-mail providers and, if you have consented, to audience measurement and advertising services (notably Google). Service providers act on our instructions, or for their own purposes where they are themselves data controllers.

Transfers outside the European Union

Where one of these services involves a transfer of data outside the European Union (for example Google services, only if you accept them), that transfer is covered by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses).

Automated calculations and adviser involvement

Online pricing tools (including those offered by our partners) may automatically calculate a price from the information you enter. Any policy remains subject to the insurer’s acceptance of the risk. You can ask at any time for a CSPM adviser to step in, express your point of view and contest a result, by writing to contact@cspm.fr.

Sensitive data

Some files (for example those of places of worship or associations) may indirectly reveal religious beliefs. This information is processed only to review your request, on the basis of your express consent (notably by signing the review and placement mandate), and is passed only to the recipients strictly necessary. Please send only the documents requested.

Minors

This site is intended for adults. It is not meant to knowingly collect data from minors under 15 without the agreement of their legal representative.

Telephone canvassing

You can object to telephone canvassing by registering free of charge with Bloctel (www.bloctel.gouv.fr).

Data protection officer

CSPM has not appointed a data protection officer. For any question about your data, write to contact@cspm.fr. You can also lodge a complaint with the CNIL (www.cnil.fr).