WHY AND ON WHICH LEGAL BASIS DO WE USE YOUR PERSONAL DATA?

In this section, we explain why we process your personal data and the legal basis for doing so.

3.1. Your personal data is processed to comply with our various legal and/or regulatory obligations 

Your personal data is processed, where necessary, to enable us to comply with the laws and/or regulations to which we are subject, including real estate, banking and financial regulations.

3.1.1. We use your personal data to: 

  • monitor and report risks (financial, credit, legal, compliance or reputational risks etc.) that the BNP Paribas Group could incur in the context of its activities; 
  • assist the fight against tax fraud and fulfil tax control and notification obligations; 
  • fulfil our obligations to declare and register transactions with the competent authorities (tax, judicial         , etc.);
  • record transactions for accounting purposes; 
  • prevent, detect and report risks related to Corporate Social Responsibility and sustainable development; 
  • detect and prevent bribery; 
  • detect and manage suspicious orders and transactions;
  • exchange and report different operations, transactions or orders or reply to an official request from duly authorized local or foreign financial, tax, administrative, criminal or judicial authorities, arbitrators or mediators, law enforcement, state agencies or public bodies. 

3.1.2. We also process your personal data for anti-money laundering and countering of the financing of terrorism purposes

As part of a banking group, we must have a robust system of anti-money laundering and countering of terrorism financing (AML/TF) in each of our entities managed centrally, as well as a system for applying local, European and international sanctions.

In this context, we are joint controllers with BNP Paribas SA, the parent company of the Group (the term "we" in this section includes BNP Paribas Real Estate Advisory Netherlands B.V. and BNP Paribas SA).

The processing activities performed to meet these legal obligations are detailed in Appendix A “Processing of personal data to combat money laundering and the financing of terrorism”.

3.2. Your personal data is processed to perform a contract to which you are a party or pre-contractual measures taken at your request 

Your personal data is processed when it is necessary to enter into or perform a contract to: 

  • evaluate  ifwe can offer you a product or service and under whichconditions; 
  • provide you with the products and services subscribed to under the applicable contract; 
  • respond to your requests and assist you.

3.3. Your personal data is processed to fulfil our legitimate interest or that of a third party

Where we base a processing activity on legitimate interest, we balance that interest against your interests or fundamental rights and freedoms to ensure that there is a fair balance between them. If you would like more information about the legitimate interest pursued by a processing activity, please contact us using the contact details provided in section 2 “HOW CAN YOU CONTROL WHAT WE DO WITH YOUR PERSONAL DATA”.

3.3.1. In the course of our business activity of real estate, we use your personal data to: 

  • manage the risks to which we are exposed: 
    • we keep evidence of operations, our advisory services provided and/or transactions to which we have provided an advisory role; 
    • we manage legal claims and defence our position in the event of litigation. 
  • enhance cyber security, manage our platforms and websites, and ensure business continuity.
  • enhance the automation and efficiency of our operational processes and customer services (e.g., automatic filing of complaints, tracking of your requests and improvement of your satisfaction based on personal data collected during our interactions with you such as phone recordings, e-mails or chats).
  • carry out financial operations such as debt portfolio sales, securitizations, financing or refinancing of the BNP Paribas Group.
  • conduct statistical studies and develop predictive and descriptive models for: 
    • commercial purposes: to identify the products and services that could best meet your needs, to create new offers or identify new trends among our customers, to develop our commercial policy taking into account our customers' preferences; 
    • safety purposes: to prevent potential incidents and enhance safety management; 
    • compliance purposes (e.g., anti-money laundering and countering the financing of terrorism) and risk management; 
  • organising promotional operations, conduct opinion and customer satisfaction surveys. 

3.3.2. We use your personal data to send you commercial offers by electronic means, post and phone 

As part of the BNP Paribas Group, we want to be able to offer you access to the full range of products and services that best meet your needs. 

Unless you object, we may send you these offers by electronic means, by phone or by post, for the products and services of the BNP Paribas Real Estate Group and those of the BNP Paribas Group and our trusted partners. 

3.3.3. We analyse your personal data to perform standard profiling to personalize our products and offers 

To enhance your experience and satisfaction, we need to determine to which customer group you belong. For this purpose, we build a standard profile from relevant data that we select from the following information: 

- what you have directly communicated to us during our interactions with you or when you subscribe to a product or service; 

- resulting from your use of our products or services such as those related to your accounts including the balance of your accounts, regular or atypical movements, the use of your card abroad as well as the automatic categorization of your transaction data (e.g., the distribution of your expenses and your receipts by category as is visible in your customer area); 

- from your use of our various channels: websites and applications (e.g., if you are digitally aware, if you prefer a customer journey to subscribe to a product, or service with more autonomy (selfcare)); 

Unless you object, we will perform this customization based on standard profiling. If you consent, we may go further to better meet your specific needs by offering you products and services tailored to you. 

3.4. Your personal data are processed if you have given your consent 

For some processing of personal data, we will give you specific information and ask for your consent. Of course, you can withhold your consent or, if given, withdraw your consent at any time. 

In particular, we ask for your consent for: 

  • tailor-made customization of our offers and products or services based on more sophisticated profiling to anticipate your needs and behaviours; 
  • personalization of our offers, products and services based on data -; 
  • use of your navigation data (cookies) for commercial purposes or to enhance the knowledge of your profile. 

You may be asked for further consent to process your personal data where necessary.