How Wise Building collects, uses and protects your personal data.
Last updated: June 9, 2026
English translation provided for information only. This document is a courtesy translation of the French original. In the event of any discrepancy or dispute over interpretation, the French version alone is legally binding. Read the French version.
Wise Building attaches the greatest importance to protecting the personal data of its clients and prospects, and to complying with applicable regulations.
This privacy policy applies to all Wise Building services, including the web platform and the mobile application available on the App Store (iOS) and Google Play (Android).
This privacy policy sets out our commitments and the measures we have put in place to guarantee the integrity, security, confidentiality and protection of your personal data processed in the course of our business, in accordance with the General Data Protection Regulation (GDPR), the French Data Protection Act (Loi Informatique et Libertés) and the French Act on Confidence in the Digital Economy (LCEN).
The entity that collects and processes your personal data is Wise Building, a simplified joint-stock company (SAS) with share capital of €13,359.32, whose registered office is at 57 rue de Châteaudun, 75009 Paris, represented by Pinet Consulting (838 434 397 Paris) acting as chairman, itself represented by Mr Anthony Pinet acting as managing director.
You can contact us at the following address: support@wisebuilding.fr
In the course of the processing we carry out, Wise Building collects and processes the following categories of data:
In providing its services to corporate clients, Wise Building acts as a processor within the meaning of Article 28 GDPR. In that context, the personal data of our clients’ employees and end users is processed solely on the documented instructions of the client, which acts as controller.
The processing carried out as a processor includes in particular:
This processing is governed by a data processing agreement (DPA) concluded with each client, setting out the purposes, the categories of data processed, the retention periods and the applicable security measures. Wise Building processes this data only for the purposes strictly necessary to provide the service, and uses it for no commercial or advertising purpose of its own.
In accordance with the GDPR, the data collected by Wise Building is used to fulfil the purposes for which it was collected, and retained for the periods set out in the table below:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Provision of building management products and services to businesses | Performance of the contract | 5 years from the end of the contract |
| Client relationship management — handling contracts, orders, invoices and ongoing contractual relations | Performance of the contract | 5 years from the end of the contract |
| Maintaining a database of clients and prospects | Legitimate interest | For clients: for the duration of the contractual relationship. For prospects: 3 years from the last contact |
| Handling information requests | Legitimate interest | Data is retained for as long as the request is being handled |
| Security management and technical monitoring to ensure the protection, stability and performance of the Solution | Legitimate interest | Data is processed for up to 1 year after the account is deleted |
| Managing unpaid invoices and any disputes | Legitimate interest | 5 years from the end of the contract |
| Handling requests to exercise data subject rights | Legal obligation | 5 years from the end of the calendar year of the request |
| Managing suppliers and partners | Contract and legitimate interest | 5 years after the contract expires |
| Accounting — purchase, delivery and receipt notes, client and supplier invoices, and so on | Legal obligation | 10 years from the close of the financial year |
Once the retention periods indicated have elapsed, your data is deleted from all Wise Building servers.
For more information on the cookies used by Wise Building, please refer to our cookie policy, which applies both to the web platform and to the mobile application. The mobile application uses only technical SDKs, and those needed to deliver the expected services (crash reporting, functional notifications); it uses no advertising or profiling trackers.
When we collect your personal data, we tell you which fields are mandatory and which are optional.
Mandatory data is necessary for our services to work and for the contract to be properly performed, and will be identified as such. If a mandatory field is not completed, Wise Building will be unable to deliver its services.
Optional data is data you may choose to provide in order to improve your user experience (for example job title, or displaying a profile photograph). Not providing it has no effect on performance of the contract or delivery of the service, but may limit how far our offering can be personalized.
The personal data we process is used only for purposes determined in advance and necessary to deliver and perform our services in connection with our business.
The following have access to your personal data:
Your data is also shared with audit functions, in particular the statutory auditor.
Some of your data may be transferred to companies outside the European Union or outside a country benefiting from an adequacy decision.
Where data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR, such transfers rely on the appropriate safeguards set out in Article 46 GDPR, adapted to each provider, in particular through standard contractual clauses approved by the European Commission.
Under data protection law you have a number of rights, in particular:
You have the right to request information about the nature of the processing carried out, the origin or type of data collected, and copies of all the information we hold about you.
You have the right to request correction of information you believe to be inaccurate. You also have the right to ask us to complete information you consider incomplete.
You have the right to ask us to delete your personal data in certain specific situations.
Where your data is processed on the basis of your consent or of Wise Building’s legitimate interest, you may obtain early deletion of your data. To exercise this right, simply inform us that you wish to withdraw your consent or to object to the processing of your data.
Apart from the exercise of this right, your data is deleted automatically once the retention period referred to above expires.
This right allows you to suspend the processing of your data after submitting a rectification request, for example. If you have concerns about the lawfulness of any of our processing, it allows you to ask our teams to stop processing your data without deleting it. It also allows you to “freeze” your personal data if you intend to bring legal proceedings to establish, exercise or defend your rights.
You have the right to object to the processing of your personal data in certain circumstances.
The right to object allows you to refuse to be included, or to remain included, in a data processing operation.
Users may object to any processing of their personal data and request its deletion, unless the company can demonstrate compelling legitimate grounds for the processing, or the processing is necessary for the establishment, exercise or defense of legal claims.
As regards direct marketing communications received from Wise Building, users may withdraw the consent they have given so as to stop receiving them. This right may be exercised at any time and will be reiterated in the messages users receive from Wise Building.
This right allows you to request access to your personal data, provided that data is processed on the basis of your consent or within a contractual relationship. The data will be provided to you in a machine-readable format.
In accordance with applicable data protection law, users have at all times a right to object, and rights of access, rectification, portability and erasure, as well as the right to object to the processing of data concerning them.
How you exercise your rights depends on the context in which your data is processed:
If you are a employee of a corporate client using the Wise Building platform in a professional capacity, your employer acts as the controller. Please address your request directly to your employer or to your organization’s privacy contact. As a processor, Wise Building undertakes to forward any request it receives directly to the client concerned within 72 hours.
In all cases, any user of the Wise Building platform may directly:
If you are a client, prospect, partner or supplier of Wise Building, you may exercise your rights by contacting our Data Protection Officer (DPO) at the following address: conformite@monexpertrgpd.com or by writing to support@wisebuilding.fr.
For any question relating to personal data protection, you may contact our Data Protection Officer (DPO), or write directly to the following address: support@wisebuilding.fr
If, after contacting us, you consider that your rights over your data are not being respected, you may lodge a complaint with the CNIL, the French data protection authority.
We reserve the right to amend this policy at any time, in whole or in part.
This version of the Wise Building privacy policy took effect on June 9, 2026.