Protection of personal data

In accordance with Article 5 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the firm undertakes to collect only data that is adequate, relevant and strictly necessary for the purpose for which they are processed (data minimization). Thus, our firm limits the collection of personal data to the minimum required by the regulation to carry out its activity.

• Collection of personal data for client relations and follow-up

The purpose of this data collection is to enter into a relationship with our clients and to follow up on them, as well as to invoice our fees.
The basis for the lawfulness of the collection is Article 6 §1 c) of the GDPR. This collection is necessary to comply with a legal obligation to which the firm is subject.
The data collected are first and last names, nationality, date and place of birth, gender, height, eye color, signature (data on identity documents). The data collected also includes telephone number, postal and e-mail addresses.
The collection of this data is mandatory.

Customers have the right to access, rectify and delete their personal data, as well as to limit the processing. Customers may also request to object to the processing of data concerning them.
The processing does not result in the transfer of data outside the European Union.
The data is kept for the time necessary to achieve the purpose for which it was collected. Beyond that, the data is archived for the period during which the firm's responsibility can be called into question (5 years), for the retention period provided for by law in the fight against money laundering and the financing of terrorism (5 years) or in accordance with the statute of limitations for lawyers' fees (5 years for a legal entity client).
The data is protected by computer data backup and software protection measures (antivirus).

• Collection of data for the management of the missions entrusted by the clients to the firm

The purpose of this data collection is to manage the missions entrusted by the clients to the firm.
The basis for the lawfulness of the collection is Article 6 §1 b) of the GDPR. This collection is necessary for the performance of an assignment entrusted to the firm, a contract to which the client is bound with the firm (fee agreement), or pre-contractual measures taken at the request of the client/prospect.
The data collected are the elements appearing on the clients' curriculum vitae (except for the personal data collected in application of the first processing relating to the legal obligations to which the firm is subject), the extracts from the clients' criminal records provided in the context of the processing of the clients' application files, the declarations of convictions appearing in the forms completed by the client for the purposes of submitting an application to practice a regulated activity.
As part of this processing, the client consents to the collection by the firm of sensitive data relating to criminal convictions, offences or related security measures in order to carry out the tasks entrusted to the lawyer by law.
The collection of this data is mandatory.
Customers have the right to access, rectify, delete and limit this data.
The processing does not result in the transfer of data outside the European Union.
The data is kept for the duration of the contractual relationship with the firm and the client. The data is protected by computer data backup and software protection measures (antivirus).

• Data collection for recruitment and management of employees and external service providers

The purpose of this data collection is the recruitment and management of employees (lawyers or interns) or external service providers (consultants, lawyers, other professionals), as well as the management of suppliers.
The basis for the lawfulness of the collection is Article 6 §1 b) of the GDPR. This collection is necessary for the performance of a contract to which the data subject is bound with the firm or for the performance of pre-contractual measures taken at the request of the data subject.
The data collected are the surname and first names, nationality, date and place of birth, gender, height, eye color, signature (data on identity documents). The data collected may include telephone number, postal and e-mail addresses, SIREN/SIRET number, bank statement, any other information on the curriculum vitae of the persons concerned (if applicable).
The collection of this data is mandatory.
Customers have the right to access, rectify, delete and limit this data.
The processing does not result in the transfer of data outside the European Union.
The data is kept for the duration of the contractual relationship with the firm and the person concerned. Beyond that time, the data is archived for up to 10 years in accordance with legal and regulatory obligations in force.
The data is protected by computer data backup and software protection measures (antivirus).