Personal-Data Protection Policy 

Version dated 2021/04/26

Information about how Campuséa Management processes its users’ personal data in connection with how they use the Website  

Campuséa Management collects and processes the personal data of its prospects in accordance with the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”) and Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties (the “Information Technology and Civil Liberties” law). 

Campuséa Management publishes the website Campus.youfirst.co (the “Website”).  

This Policy is part of a transparency strategy and describes why and how Campuséa Management collects, processes and protects the personal data (the “Data”) of Website users (“Users” or “you”), in accordance with data protection regulations (the “Regulations”).  

Which data are collected?  

When creating an application file, Campuséa Management has to collect a variety of personal data from prospects for the purposes of considering the application and negotiating any potential leases.  

This includes official data about you, your income and bank details, as well as similar data about your guarantors.  

  • Identification data: surname, first name, date and place of birth, photo, signature, INSEE company identification number. 
  • Personal details: marital status, number of children, student status, employment status. 
  • Contact information: email address, telephone number, postal address. 
  • Information regarding employment: type of employment contract, start date, profession, name and address of your employer. 
  • Information on guarantors: identity, financial resources, bank details. 
  • Financial information: income and other resources, payment methods, company registration certificate (Kbis), account balances. 


This data is included in the account, which can be accessed by the Users.  

In addition, Campuséa Management, as the Website administrator, processes data required for the technical management of the Website (access, user rights, hosting and maintenance, as well as Website and data security).  

Finally, Campuséa Management uses cookies on various pages, in order to enhance the user experience of the Website and ensure some of its features work properly. If you would like more information on cookies, please go to the following link: Cookies policy. 

We use Google Analytics for analysing our web traffic. This Google web analytics tool helps us to better understand how our Users behave. This tool generates usage statistics for our Websites, but does not personally identify Users. 

If you would like more information on Google Analytics, please go to the following link: https://support.google.com/analytics/answer/6004245?hl=en

Why are your personal data being processed? 

When you register with the Website and when you use it, Campuséa Management collects your Data in order to:  

Consider the prospect’s application, in particular their solvency and to manage and monitor our relationship with each other.  

The data collected are essential for these operations. 

What are the legal grounds for this data processing? 

As part of its work to ensure that the Website operates properly, Campuséa Management processes Website Users’ personal data on the following grounds: 

The processing is necessary for the implementation of pre-contractual measures and on grounds of legitimate interest  

How long will Users’ data be kept? 

Campuséa Management’s prospects’ data are kept for a limited period that corresponds to the purposes for which they were collected, in compliance with the regulations in force, and in order to fulfil Campuséa Management’s legal, contractual, fiscal and social obligations and to uphold its legitimate interests.  

Any personal data provided to us by our clients or prospects for the purpose of receiving promotional offers is retained as long as our relationship with the customer or prospect lasts and, at the latest, three years after we are last in contact with them. 

If applicants do not sign a lease, their data will be kept for three months from collection. 

After the end of these periods, the relevant data are deleted or anonymised, provided that they are no longer required for fulfilling a legal obligation or proving a right, and/or that there is no longer a legitimate interest in keeping them. 

What are Users’ rights over their data? 

In accordance with data-protection Regulations, and to the extent permitted by law, each User has: 

  • a right to access their data, in order to check that they are accurate and complete, in particular; 
  • a right to have their data corrected; 
  • a right to have their data deleted; 
  • a right to object to their data being processed or to restrict processing; 
  • data portability rights in respect of data they have provided to Campuséa Management; 
  • a right to set out specific or general instructions on what should be done with their data after they die. 

Users may exercise their rights by emailing our DPO at protectiondesdonnees@gecina.fr, or by sending a written request to: DPO Campuséa Management, 16 rue des Capucines, 75084 Paris Cedex 02, France. 

Requests from Users will be processed as soon as possible. Should there be any doubts about a requester’s identity, they will be asked to attach a copy of their proof of identity, so that the necessary checks can be carried out. 

Who can Users’ personal data be shared with? 

Users’ data are strictly confidential and may not be freely transferred to third parties. 

As regards use of the Website’s services, Campuséa Management will process Data about you on a confidential basis.  

However, some data may be disclosed to recipients/providers/suppliers/subcontractors, solely for the purpose of processing this data, including: 

  • Group employees responsible for considering your rental application  
  • website maintenance and administration: your Data collected through the online form may be transferred to our service provider for the purposes of maintenance and administration. The servers are located in France. 
  • legal reasons: your Data may be disclosed as a result of an official demand issued by a competent authority in this field. 

Where can Users’ personal data be found? 

Users’ data are mostly processed within the territory of the European Union and, as far as possible, not transferred to non-EU states. 

However, should this data be transferred to non-EU states, as part of Campuséa Management’s operations and objectives, Campuséa Management agrees, in such cases, to take every appropriate and reasonable measure, in accordance with the General Data Protection Regulation, so that the level of protection guaranteed under this regulation is not weakened. 

Amendments to the Personal-Data Protection Policy 

The Personal-Data Protection Policy currently appearing on the Website reflects Campuséa Management’s current confidentiality standards, which may be subject to amendments.  

Should this occur, Campuséa Management will publish these amendments on the Website. 

Who should you contact if you have any questions about your data? 

If you have any questions or complaints about your Data, please contact our DPO at protectiondesdonnees@gecina.fr  

In addition, you are also entitled to submit a claim to the Commission Nationale d’Informatique et des Libertés (National Commission for Information Technology and Civil Liberties), the regulatory authority responsible for enforcing the regulations on personal-data protection in France, at the following address: Nationale d’Informatique et des Libertés, 3 Place de Fontenoy — TSA 80715, 75334 Paris, Cedex 07, France.