Privacy policy
This policy explains how Map Syndicat collects, uses, shares and keeps your personal data when you use the platform in France, and the rights you have over that data.
§1 Who we are
Map Syndicat is a map platform for France: property for sale and rent, and cars, with price data and city guides.
For any question about this policy, contact us at contact@mapsyndicat.com (see §13).
§2 Data we collect
We collect data in three groups:
We do not intentionally collect sensitive data, such as health data, religious or political beliefs, or biometric data. Please do not include sensitive information in messages to us.
- (a) Data you give us — messages you send us, including emails to contact@mapsyndicat.com: your name, email address, and anything you include in the message.
- (b) Data collected automatically: your searches, page views, analytics events, browser and device information, IP address, approximate location, and error logs.
- Cookie identifiers, as described in §4. No analytics or advertising cookies are set before you give consent.
- (c) Data from public sources: none. We do not collect listings, listing photos or seller data from public sources. The site publishes only its own price statistics and guides.
§3 No third-party listings
- This site shows no third-party listings. It publishes only its own price statistics and guides.
- No listing photos or seller data are collected.
§5 Why we use data and the legal basis
We use your data only for the purposes below. The legal basis for each purpose is shown under the GDPR, Article 6.
Where we rely on your consent, you can withdraw it at any time (see §9). Withdrawing consent does not affect use already made while consent was in place.
- Analytics: to understand use of the site and improve it. Legal basis: consent via the cookie banner, GDPR Article 6(1)(a).
- Price statistics and guides: the site publishes only its own price statistics and guides. We do not collect or show third-party listings, listing photos or seller data, so no legal basis for listing data applies.
- Contact emails: to answer your questions and requests. Legal basis: contract and legitimate interest, GDPR Article 6(1)(b) and 6(1)(f).
- Security logs: to keep the platform safe and prevent abuse. Legal basis: legitimate interest, GDPR Article 6(1)(f).
§6 Who we share data with
We do not sell your personal data.
We share data only with the service providers (processors) below, which process data on our instructions to run the platform:
When AdSense is live, Google and its advertising partners may receive cookie identifiers, page views and approximate location to serve and measure advertisements, but only if you have accepted advertising cookies (see §4). This is not a sale of your personal data.
| Provider | What it does | Data involved |
|---|---|---|
| Self-hosted server (VPS) | Hosting | IP address, page views |
| Supabase | Database and storage | Analytics events |
| Google (GA4 when enabled; AdSense when live) | Analytics and advertising | Cookie identifiers, page views, approximate location |
| OpenStreetMap / Esri | Map tiles | IP address, map viewport |
§7 International transfers
Our hosting and database are on our own server in France, in the European Union.
When you accept analytics or advertising cookies, Google may process cookie identifiers, page views and approximate location outside the European Economic Area, under Google's own terms.
§8 How long we keep data
When a retention period ends, we delete or anonymise the data. Anonymised analytics that no longer identifies you may remain (see §9).
- Third-party listings: none — the site publishes no third-party listings and keeps no listing photos or seller data.
- Analytics data: 14 months (proposed).
- Contact emails: 12 months (proposed).
- Security logs: kept only as long as needed to investigate and prevent abuse.
§9 Your rights and how to exercise them
To exercise any of your rights, email contact@mapsyndicat.com with the subject “Privacy request”.
We reply within one month for GDPR requests and within 45 days for California requests.
California notice: the categories of personal data we collect are identifiers (name, email address), internet activity (page views, searches, analytics events) and approximate location. The purposes are those listed in §5.
We do not sell your personal data. Global Privacy Control (GPC) signals are not yet honoured. Support for GPC signals will arrive with the certified consent management platform.
- Access: ask what personal data we hold about you.
- Correction: ask us to correct inaccurate data.
- Deletion: ask us to delete your personal data.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: withdraw consent for analytics cookies or advertising cookies at any time.
- California rights: the right to know what we collect and why, to delete your personal data, to correct inaccurate data, and to opt out of sale or sharing. We will not discriminate against you for exercising any of these rights.
§10 France — GDPR and the CNIL
Under the GDPR (Regulation (EU) 2016/679), you have the rights to be informed, to access your data, to rectify it, to erase it, and to object to its processing.
You can exercise these rights by emailing contact@mapsyndicat.com with the subject “Privacy request” (see §9).
You can also complain to the CNIL, the Commission Nationale de l'Informatique et des Libertés, the French data protection authority.
§11 Children
Our service is not directed at children under 16, and we do not knowingly collect personal data from children under 16.
If you are a parent or guardian and believe your child has provided us with personal data, email contact@mapsyndicat.com and we will delete it.
§12 Changes to this policy
We may update this policy from time to time.
For material changes, we will give notice before the changes take effect, so you can review them.
§13 Contact
For any question about this policy or your personal data, contact us at contact@mapsyndicat.com.
General questions: we aim to reply within 24–48 hours. Formal privacy requests: within one month (GDPR) or 45 days (California), as described in §9.