Privacy policy
Last updated: 14 September 2026
This Privacy Policy is intended to inform users of the website https://mg-palmproperties.com about how their personal data is collected and processed, in accordance with the General Data Protection Regulation (GDPR) and applicable French regulations relating to the protection of personal data.
1. Data Controller
The data controller responsible for the processing of personal data collected through the website is:
SAS MG AGENCY
Share capital: €200
Registered office: 2400 CHEMIN DU RIOU, 06140 VENCE, France
SIREN: 981 443 690
RCS: Grasse 981 443 690
EU VAT number: FR0603.981443690
Telephone: +33 (0)6 99 85 83 69
Email: contact@mg-palmproperties.com
Hereinafter referred to as the “Data Controller”.
2. Personal Data Collected
When using the website, the Data Controller may collect certain personal data when users voluntarily provide such information.
Depending on the features used, the data that may be collected may include:
- first and last name;
- email address;
- telephone number;
- company and position, where applicable;
- information contained in messages submitted through contact forms;
- information necessary to process a contact or information request;
- technical data necessary for the operation and security of the website;
- browsing data, where the user has consented to the use of cookies or other tracking technologies requiring consent.
Only data necessary to achieve the purposes pursued is collected.
Users are advised not to provide sensitive personal data or data that is not necessary to process their request through the website’s forms.
3. Purposes and Legal Bases for Processing
Personal data collected through the website may be processed for the following purposes:
Management of Contact Requests
Data submitted through the contact form is used to:
- respond to requests addressed to the Data Controller;
- contact the user again where necessary;
- provide the requested information;
- prepare, where applicable, a commercial proposal;
- manage and follow up on a pre-contractual or commercial relationship.
The legal basis for this processing is, depending on the circumstances, the performance of pre-contractual measures taken at the user’s request or the legitimate interest of the Data Controller.
Data that is essential to processing the request is identified as mandatory on the relevant form.
Management of the Commercial Relationship
When the user becomes a customer, their data may be used to manage and monitor the commercial relationship, including to:
- manage communications with the customer;
- prepare and manage quotations and commercial proposals;
- manage orders and services;
- provide administrative and accounting follow-up;
- comply with applicable legal and regulatory obligations.
These processing activities may be based on the performance of the contract and compliance with legal obligations.
Direct Marketing
Where permitted by applicable regulations, personal data may be used for direct marketing purposes.
Where consent is required, it will be obtained prior to the relevant processing activity.
Users may object at any time to the use of their data for direct marketing purposes.
Audience Measurement and Website Improvement
Where audience measurement tools requiring consent are used, the data collected may be used to analyse website traffic and usage in order to improve its performance, content and user experience.
These processing activities are carried out in accordance with the rules applicable to cookies and other tracking technologies.
4. Mandatory or Optional Nature of Data
Where a form is available on the website, the fields necessary to process the request are identified as mandatory.
All other fields are optional.
Failure to provide mandatory information may prevent the Data Controller from responding to the user’s request or providing the requested service.
The principle of data minimisation means that only data that is adequate, relevant and necessary for the intended purpose is collected.
5. Data Recipients
Personal data collected through the website is intended for the Data Controller and persons authorised to access it as part of their duties.
It may also be transferred, where necessary, to technical service providers acting on behalf of the Data Controller, including for:
- website hosting;
- technical management and maintenance;
- sending or receiving emails;
- form management;
- audience measurement services or other services integrated into the website, where applicable.
These service providers only access data to the extent necessary to perform their duties and in accordance with applicable data protection requirements.
Personal data is not sold or rented for commercial purposes.
6. Transfers of Data Outside the European Union
Certain technical service providers used by the website may be established outside the European Union or may process certain data from a country outside the European Union.
Where such transfers take place, the Data Controller ensures that they are carried out in accordance with GDPR requirements, including through an adequacy decision or appropriate safeguards where necessary.
Information regarding any international transfers may be obtained by contacting the Data Controller at the address provided in this Privacy Policy.
7. Data Retention Period
Personal data is not retained for longer than necessary to fulfil the purposes for which it was collected, subject to legal obligations requiring certain retention periods.
By way of indication:
Contact requests and prospects: data may be retained for the time necessary to process the request and, where no commercial relationship is established, for a maximum period of 3 years from the last contact with the prospect, unless otherwise required or permitted by applicable regulations.
Customers: data necessary for the management of the commercial relationship is retained for the duration of the contractual relationship, and subsequently for the periods necessary to comply with legal obligations, including accounting and tax obligations.
Data necessary to protect the rights of the Data Controller: certain data may be retained for the applicable statutory limitation period.
Cookies and tracking technologies: their retention period depends on their nature and purpose and is specified, where applicable, in the cookie management tool.
Retention periods are defined according to the purposes pursued and do not constitute a general retention period applicable to all data.
8. Data Security
The Data Controller implements appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Access to data is limited to persons who need it in the course of their duties.
However, no transmission or storage of data over the Internet can be considered completely secure. The Data Controller therefore cannot guarantee the absolute security of information transmitted.
9. Your Rights
In accordance with applicable regulations, and subject to the circumstances and conditions provided for by the GDPR, you have the following rights:
Right of Access
You may request confirmation as to whether your personal data is being processed and, where applicable, obtain access to your personal data and information relating to its processing.
Right to Rectification
You may request the correction of inaccurate or incomplete personal data.
Right to Erasure
You may request the deletion of your personal data where the conditions provided for by applicable regulations are met.
Right to Restriction of Processing
You may request the restriction of processing of your data in the cases provided for by the GDPR.
Right to Object
You may object to certain processing of your personal data, particularly where such processing is based on the legitimate interests of the Data Controller.
You may also object at any time to the use of your data for direct marketing purposes.
Right to Data Portability
Where the conditions provided for by the GDPR are met, you may request to receive the personal data you have provided in a structured, commonly used and machine-readable format, or request that it be transmitted to another data controller.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
10. Exercising Your Rights
To exercise your rights or obtain any information regarding the processing of your personal data, you may contact the Data Controller:
SAS MG AGENCY
2400 CHEMIN DU RIOU
06140 VENCE
France
Email: contact@mg-palmproperties.com
Telephone: +33 (0)6 99 85 83 69
Requests may be submitted electronically or by post.
Where necessary and proportionate, the Data Controller may request additional information to verify the identity of the person making the request.
Requests are processed as soon as possible and, in principle, within one month of receipt. This period may be extended by two months where the complexity or number of requests so warrants, in accordance with the provisions of the GDPR.
11. Complaints to the CNIL
If, after contacting the Data Controller, you believe that your rights regarding your personal data have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority.
You may consult the CNIL website for information on how to lodge a complaint.
12. Cookies and Other Tracking Technologies
The website may use cookies and other tracking technologies.
Some cookies are strictly necessary for the operation of the website and may be stored or accessed without consent where they meet the exemption conditions provided for by applicable regulations.
Other cookies or tracking technologies, particularly those used for audience measurement, advertising, personalisation or by certain third-party services, are only used after the user’s consent has been obtained where legally required.
Consent must be freely given, specific, informed and unambiguous. Users must be able to accept or refuse cookies requiring consent with an equivalent degree of ease and must be able to modify or withdraw their choice at any time.
Simply continuing to browse the website does not constitute consent.
Where the website provides a cookie management tool, it allows users to view the categories of cookies used and modify their preferences.
Necessary Cookies
Strictly necessary cookies are used in particular to ensure the technical operation of the website, security or the retention of the user’s choices.
They may be used without consent where they meet the conditions provided for by applicable regulations.
Audience Measurement Cookies
If the website uses an audience measurement tool that requires consent, it will only be activated after the user’s consent has been obtained.
Third-Party Services
Certain website features may use third-party services that may store or access tracking technologies.
The services concerned are subject to the rules applicable to cookies and other tracking technologies and, where necessary, their activation is subject to the user’s prior consent.
13. Links to Third-Party Websites
The website may contain links to websites or services operated by third parties.
The Data Controller is not responsible for the data protection practices of such websites.
Users are advised to review the privacy policies of any third-party websites they visit.
14. Updates to this Privacy Policy
This Privacy Policy may be amended at any time to reflect changes in legislation, regulations, case law, technology or the functionality of the website.
The date of the latest update is indicated at the top of this page.
Users are advised to review this page regularly to stay informed of any changes.
15. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact:
SAS MG AGENCY
2400 CHEMIN DU RIOU
06140 VENCE
France
Email: contact@mg-palmproperties.com
Telephone: +33 (0)6 99 85 83 69