The entity responsible for your personal data is the firm Flichy Grangé Avocats located at 66 avenue d’Iéna, 75016 Paris.
In addition, in application of the rules of ethics of the legal profession, Flichy Grangé Avocats complies with the obligations of professional secrecy and confidentiality.
I - WHAT TYPE OF PERSONAL INFORMATION DO WE COLLECT ?The information described below is in addition to all the personal data that we are required by law to process in a given situation.
A - CUSTOMER AND PROSPECT DATARegarding our customers, the data processed may be your business contact details or the details of your organization's individual contacts (such as first and last name, telephone numbers, job title and e-mail or postal addresses). They are processed for the needs of our professional relationship and its effective management. Also concerned are the bank details of the legal or natural person that we must charge for our services performed, in order to comply with our legal and regulatory obligations and ensure the payment of our work. If necessary, we may also have additional information that someone in your organization has expressly chosen to communicate to us for the purposes of conducting our interventions..
Regarding prospects, the data processed may be business contact details such as email and postal addresses, the duties performed in the organisation, as well as the first and last name. They are used for marketing and information purposes.
B - Data of an applicant to our recruitment offers :The data processed are usually your contact information such as your first and last name, your email address and the information provided in your cover letter and your résumé (curriculum vitae) that we obtained in response to our recruitment offers and that are important for processing and assessing the relevance of your application.
C - Users data of the flichy grange avocats website :We collect a limited amount of data from the users of our website corresponding to the information required to process their requests. This typically involves the last name, first name, and email address of the user, their résumé (curriculum vitae) and their cover letter in the case of an applicant responding to our recruitment offers on our website.
II - HOW DO WE COLLECT YOUR PERSONAL DATA ?
A - CUSTOMER AND PROSPECT DATAWe collect these personal data in two ways:
- personal data we receive directly from you;
- personal data we receive from other sources;
1 - Personal data we receive directly from you :We receive data directly from you in several ways:
- when you contact us actively, usually be telephone or email ; and/or;
- when we contact you by telephone, by email or any other means of communication.
- when you answer satisfaction surveys
2 - Personal data we receive from other sources :From published directories or information available on the internet, social networks, etc.
B - USERS data OF OUR WEBSITE :When you visit our website, we collect your data when you submit a request via one of our contact forms or via cookies.
III - HOW DO WE USE YOUR PERSONAL DATA ?The data obtained are used to manage our relationship.
A - CUSTOMER DATAWe use this information for:
- processing the files you submit and the processing needed to establish, exercise or defend a legal claim;
- the firm's marketing activities to keep you informed of legal news and news of our firm or its members through its newsletters, invitations to events or training sessions, through sending greetings by email or by post;
B - MARKETING DATAFor business relationship development, we use this information for the firm's marketing activities to keep you informed of legal news and news of our firm or its members through its newsletters, invitations to events or training sessions, through sending greetings by email or by post;
C - USERS data OF OUR WEBSITEWe use your data to assist us in improving your user experience of our website, for example in analysing your recent search criteria to provide you with the most relevant information.
IV - WITH WHOM DO WE SHARE YOUR PERSONAL DATA?Where applicable and in compliance with applicable regulations, we may share your personal data, in various ways and for various reasons, with the following limited categories of people :
- Within Flichy Grangé Avocats, with the relevant departments (recruitment, billing, marketing…) and with the person in charge of your dossier (partner, associate, assistant, trainee);
- The persons and organisations that have information concerning your application when you apply for a job in the firm, for example employment and recruitment agencies of your previous employers (reference check);
- Regulators or other authorities, where the law or a regulation requires us to share such data (for example, at the request of a tax authority, in connection with a planned dispute or to comply with our legal and regulatory obligations);
- Third-party service providers performing functions on our behalf including service providers or support services (translation service, IT service providers, ...), the judicial administration, court officers, other lawyers, experts, agents, bailiffs, professional bodies;
- National or international organizations conducting rankings of law firms so they may contact you to ask whether you are satisfied with our services (the data transmitted concerns only your last name, first name, email address and position in your organization).
V - HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?We are committed to taking all the necessary and appropriate measures to protect the personal data we possess from any accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access. We do so by putting in place a set of appropriate technical and organizational measures, particularly with the firm's information system provider. These measures include, in particular, the physical protection of premises, the implementation of authentication methods with personal and secure access via confidential identifiers and passwords, daily backups of the firm’s information system and its data, secure access to the firm's website and information system.
VI - HOW LONG DO WE RETAIN YOUR PERSONAL DATA?We process your personal data throughout our relationship and we generally retain it for an appropriate period of time after the end of the relationship, based on legal requirements and our legitimate needs. The amount of time we retain your data varies according to the type of data and the legal and regulatory requirements. For example, we may be required to retain certain data that may prove relevant for any potential litigation (taking into account the relevant limitation periods).
The retention period may therefore vary from 2 to 10 years.
2 years as of the last contact if you have applied for a job or 10 years from the termination of the contractual relation to take into account the limitation periods in the law profession for example.
VII - HOW CAN YOU ACCESS, CHANGE OR DELETE PERSONAL DATA THAT YOU HAVE PROVIDED TO US?One of the main objectives of the General Data Protection Regulation is to protect and clarify the rights of EU citizens with respect to data privacy. This means that you retain various rights to your data even after they have been provided to us.
To contact us concerning your rights, you may email us at email@example.com. We will process your request as soon as possible and within one month at the latest (subject to the exceptions to which we are entitled).
A - RIGHT TO OBJECTThis right allows you to object at any time, for reasons related to your particular situation, to the processing of personal data about you based on grounds related to your legitimate interest, the execution of a mission of public interest or for marketing purposes;
There can be no exception to this right when the processing is carried out for marketing purposes. In other cases, however, it is possible that we might object to your right of objection provided we can demonstrate the compelling higher interest of our processing;
B - RIGHT TO WITHDRAW YOUR CONSENTLorsque nous avons obtenu votre consentement pour traiter vos données à caractère personnel pour une ou plusieurs finalités, vous pouvez retirer ce consentement à tout moment sauf s’il existe une autre base légale à ce traitement.
C - RIGHT TO ACCESS YOUR DATAYou may request confirmation so as to know whether the personal data concerning you is being processed or not.
You may also gain access to your data by requesting a copy under the following conditions :
- your request must be formulated in writing and accompanied by the copy of a signed, valid identity document.
- this right of access may not concern information or data that are confidential or the communication of which is not authorized by law.
D - RIGHT TO ERASUREYou have the right to request erasure of your personal data in the following cases:
- the data are no longer necessary for the purposes for which it was initially collected and/or processed ;
- you withdrew your consent for the processing of your data, and there is no other legal base for the processing ;
- the data were processed unlawfully (i.e., not in compliance with the General Regulation on Data Protection)
- you objected to the processing necessary for the purposes of the legitimate interests pursued by the firm, and there are no compelling legitimate grounds.
- you objected to the processing for marketing purposes.
E - RIGHT TO RESTRICTION OF THE PROCESSING:You have the right, in certain cases provided below, to obtain the restriction of the processing of your data, which can only be stored, with no other operation allowed in principle.
Circumstances in which you have the right to request the restriction of the processing of your personal data:
- you contest the accuracy of the personal data that we process about you ;
- you object to the processing of your personal data for the purposes of the legitimate interests of the firm.
- we no longer need to process your personal data, but you require the data for the establishment, exercise or defence of a legal claim.
F - RIGHT TO RECTIFICATIONYou also have the right to request rectification of any inaccurate or incomplete personal data that we have about you.
G - RIGHT TO PORTABILITY OF YOUR DATAYou have the right to receive the data that you provided in a structured, commonly used and machine-readable format. This right can be exercised for example to change service providers provided the data processing is based on consent or a contract. .
H - POST-MORTEM RIGHTYou have the right to provide guidelines regarding the storage, erasure and communication of your data post-mortem
I - RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITYIf you consider that the processing of your personal data violates the European data protection regulations, you also have the right to lodge a complaint at the CNIL at the following address :
CNIL – Service des plaintes
3, place de Fontenoy - TSA 80715 – 75334 PARIS cedex 07.
If you wish to exercise any of these rights or withdraw your consent to the processing of your personal data (where consent is our legal basis for the processing of your personal data), you may contact us at the following email address firstname.lastname@example.org or by post at :
Flichy Grangé Avocats, données à caractère personnel
66 avenue d’Iéna, 75116 Paris.
VIII - HOW DO WE STORE AND TRANSFER YOUR DATA INTERNATIONALLY?Your data are stored in France and the firm does not transfer data abroad, except for our international clients or for clients whose dossier requires the referral of a foreign colleague. Thus we may be required to send your bills internationally or transmit your contact information to the interlocutors of our international alliance for example.
In these latter cases, and in cases where personal data protection legislation differs from that of the European Union, the law firm will take appropriate security measures to ensure their integrity and protection.
IX - LEGAL BASES FOR THE PROCESSING OF YOUR DATA
A - Legitimate interestsArticle 6 (1) (f) of the General Data Protection Regulation provides that we may process your data if it “is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
That may include, for example, purposes of managing our pre-contractual or contractual relation or for marketing purposes.
As seen above, you have the right to object to the processing of your personal data on this basis.
B - ConsentArticle 4, paragraph 11, of the General Data Protection Regulation provides that consent (opt-in) means “any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”
In the event the processing of your personal data is based on consent, you have the right to withdraw it at any time by clicking on the link at the bottom of our emails, by email to the address email@example.com or by post to Flichy Grangé Avocats, 66 avenue d’Iéna, 75016 Paris.
C - Legal obligationsWe also have legal and regulatory obligations with which we must comply. Article (6) (1) (c) of the General Data Protection Regulation stipulates that we may process your personal data when that processing “is necessary for compliance with a legal obligation to which the controller is subject”.
We may share your data in the context of crime detection or tax collection or with various bodies.
D - Establishment, exercise or defence of a legal claimIt may be necessary for us to process sensitive personal data related to the exercise or defence of a legal claim. Article 9 (2) (f) of the General Data Protection Regulation allows it when the processing “is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.”
That may occur, for example, when we handle the dossiers you have entrusted to us in the context of a court proceeding or when we are required by law to preserve or disclose certain information as part of the judicial process.