This policy explains how EXPERTISEZ S.A.S. collects, uses, retains and protects the personal data of Encherissez.com Users.
It applies in particular to valuation requests, auction registrations, absentee bids, telephone bids, payments, contact requests and subscriptions to electronic communications.
The controller of personal data collected through Encherissez.com is:
Please do not provide data that is unrelated to your request, particularly sensitive information concerning your health, opinions, beliefs or private life.
| Purpose | Examples of use | Main legal basis |
|---|---|---|
| Valuation requests | Reviewing photographs, responding to a request and, where appropriate, proposing a method of sale. | Steps taken at your request before entering into a contract. |
| Auction administration | Registration, absentee bids, telephone bids, successful bids, invoicing, collection and delivery. | Performance of a contract or pre-contractual steps. |
| Customer verification | Checking identity, authority to act, guarantees and compliance with due-diligence obligations. | Legal and regulatory obligations. |
| Payments and accounting | Payment processing, invoicing, refunds, unpaid amounts and accounting records. | Performance of a contract and legal obligations. |
| Security and fraud prevention | Protecting the Website, detecting unusual access, preventing incidents and preserving evidence. | Legitimate interests and legal obligations. |
| Customer service and complaints | Answering questions, resolving difficulties and managing disputes. | Performance of a contract and legitimate interests. |
| Audience measurement | Understanding how the Website is used and improving its operation. | Consent where legally required. |
| Marketing communications | Sending information about auctions, specialist areas or services according to selected preferences. | Consent or legitimate interests where permitted by law. |
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Required fields are identified on the relevant forms. If the required information is not provided, we may be unable to answer a request, accept an auction registration, execute a bid or complete a transaction.
Data required to comply with a legal obligation cannot be deleted or treated as optional while that obligation remains applicable.
Within the limits of their duties and where necessary, your data may be accessed by:
We do not sell personal data. Providers acting on our behalf are required to comply with appropriate security and confidentiality obligations.
Certain service providers or auction platforms may process data from a country outside the European Economic Area.
Where a transfer requires additional safeguards, it is governed by a mechanism recognised under the GDPR, such as an adequacy decision, standard contractual clauses or another appropriate safeguard.
You may request further information about applicable safeguards by writing to contact@expertisez.com .
Retention periods are determined according to the purpose of the processing, applicable limitation periods and legal obligations.
| Category | Retention period or criterion |
|---|---|
| Valuation requests and prospective clients | During the processing of the request and for up to three years after the last active contact, unless a contractual relationship or different obligation applies. |
| Clients, sellers and successful bidders | During the contractual relationship and for the applicable legal limitation periods thereafter. |
| Invoices and accounting records | Ten years in accordance with French accounting obligations. |
| Anti-money laundering due diligence | Five years after the end of the relationship or completion of the transaction, as applicable. |
| Newsletter data | Until consent is withdrawn or, for a prospective client, three years after the last active contact. |
| Data-subject requests | For the time required to process the request and then for the period necessary to demonstrate the response provided. |
| Technical and security logs | For a period proportionate to security, diagnostic and evidential needs. |
At the end of the applicable period, data is deleted, anonymised or placed in a restricted archive where continued retention is required for legal or evidential purposes.
The Website may use cookies that are strictly necessary for its operation and, subject to your choice, audience-measurement trackers or trackers connected with third-party services.
These trackers may be used for security, remembering your choices, operating forms and managing sessions. Where strictly necessary for a service requested by the User, they do not require consent.
Non-essential trackers are only placed following a positive action by the User. Refusing must be as simple as accepting, and refusal does not prevent access to the Website’s essential functions.
Continuing to browse does not constitute consent. You may withdraw or change your choice at any time through the cookie-management tool available on the Website.
The current list of trackers, providers, purposes and retention periods is displayed directly in the consent-management tool. This list must reflect the trackers actually used at the time of your visit.
Expertisez S.A.S. implements technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
These measures may include access controls, secure connections, backups, logging of certain access and contractual obligations imposed on service providers.
As no system can guarantee absolute security, measures are adapted to the level of risk and the development of relevant threats.
Depending on the processing concerned and subject to the conditions laid down by law, you may exercise the following rights:
Requests may be sent to contact@expertisez.com or by post to EXPERTISEZ S.A.S., 75 boulevard Haussmann, 75008 Paris, France.
To protect your data, proof of identity may be requested where there is reasonable doubt about your identity. The document will only be retained for the time necessary to complete the verification and process the request.
We generally respond within one month. This period may be extended by two months because of the complexity or number of requests, provided that the data subject is informed.
Under the French Data Protection Act, you may issue instructions concerning the retention, deletion and disclosure of your personal data after your death.
These instructions may be general or specific and may appoint a person responsible for their implementation. In the absence of instructions, your heirs may exercise certain rights within the limits provided by French law, particularly for the administration and settlement of your estate.
For any question or request concerning your personal data:
EXPERTISEZ S.A.S.
75 boulevard Haussmann
75008 Paris – France
Email: contact@expertisez.com
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data-protection authority: Commission nationale de l’informatique et des libertés .
This policy may be amended to reflect changes to the Services, providers or applicable law. The date of the latest update is shown at the top of the page.
Where a change substantially affects how personal data is used, appropriate information will be provided to the individuals concerned. Continued use of the Website does not replace consent where consent is legally required.
The precise list of cookies and service providers must be kept synchronised with the tools actually installed on Encherissez.com. It cannot be determined reliably from the previous Privacy Policy dated 2020.