C.I.G. Avocats endeavours to implement and comply with a data processing policy that complies with applicable regulations.
Definition of personal data
The term Personal Data refers to any information relating to a natural person. This may be a person who could be identified directly or indirectly, in particular by reference to their physical, physiological, economic, cultural or social identity.
The Personal Data held about you by the law firm falls within the following categories:
Some of this data may be considered sensitive and is treated with particular care by the law firm.
Collection of personal data
The law firm may collect your Personal Data in connection with, in particular, professional meetings, cases, partnerships, job applications, visits to our premises and use of the website.
Personal Data provided directly by you is data that you submit through forms, whether electronically on the website, in paper format, or in response to questions asked by lawyers or members of the law firm.
The law firm collects only the data necessary for its activities and implements data protection measures by design. Accordingly, the information collected is relevant, adequate and limited to what is necessary for the purposes for which it is processed.
Your Personal Data is processed by the law firm in the circumstances permitted by applicable regulations and, in particular, under the following conditions:
Information notices that comply with applicable law are provided in each case.
For minors under the age of 18, this consent must be given or authorised by the holder of parental responsibility. If that person discovers that the minor's Personal Data has been provided to the law firm without their consent, they may ask the law firm to delete that Personal Data by following the procedure described below.
Your Personal Data is collected for specified, explicit and legitimate purposes.
Depending on the circumstances, your Personal Data may be used to:
The law firm may also use your Personal Data for administrative purposes or for any other purpose required by applicable law.
No Data may be processed without a specific purpose. If your Personal Data is required for purposes other than those initially specified, it may be used only if the new purpose is compatible with the previous purpose (examples of compatible purposes include sending information on specific topics to our clients following the establishment of a contractual relationship).
As your Personal Data is confidential, it may be accessed only by persons duly authorised by the law firm, without prejudice to its possible disclosure to bodies responsible for supervisory or inspection duties in accordance with applicable regulations.
All persons with access to your Personal Data are bound by a duty of confidentiality.
These persons are duly authorised members of the law firm. Our service providers may also occasionally process Personal Data that is strictly necessary to perform the services entrusted to them (assignments, electronic and postal distribution, logistics and catering, etc.).
Where service providers located outside the European Union are used, the law firm undertakes to verify that appropriate measures have been implemented to ensure that your Personal Data benefits from an adequate level of protection, in particular through the European Commission's standard contractual clauses, Binding Corporate Rules or the data protection framework established between the European Union and the United States.
The law firm takes steps to protect and secure your Personal Data in order to ensure its confidentiality and prevent it from being altered, damaged, destroyed or disclosed to unauthorised third parties.
Where the disclosure of data to third parties is necessary and authorised, the law firm ensures that those third parties provide the data concerned with the same level of protection as that provided by the law firm and requires contractual safeguards to ensure, in particular, that the data is processed solely for the purposes to which you have previously agreed and with the required level of confidentiality and security.
The law firm implements technical and organisational measures to ensure that Personal Data is stored securely for the period necessary to fulfil the purposes pursued, in accordance with applicable law.
In accordance with applicable European regulations, in the event of a confirmed Personal Data breach likely to result in a high risk to the rights and freedoms of the persons concerned, the law firm undertakes to notify the competent supervisory authority and, where required by those regulations, the persons concerned (individually or collectively, as appropriate).
The law firm retains your Personal Data for the period necessary to fulfil the purposes pursued, subject to statutory archiving options, obligations to retain certain data and/or anonymisation.
Subject to the limitations provided for by applicable regulations, you have the following rights in relation to your Personal Data:
Right to information about the processing of your Personal Data
The law firm endeavours to provide you with concise, transparent, intelligible and easily accessible information, in clear and plain language, about the conditions under which your Personal Data is processed.
Right of access, rectification and erasure (or the “right to be forgotten”) of your Personal Data
The right of access allows you to obtain confirmation from the law firm as to whether or not your Personal Data is being processed, information about the conditions of that processing and, where applicable, a copy of that Data in a commonly used electronic format.
You also have the right to obtain the rectification or updating of your Personal Data by the law firm.
Lastly, subject to the exceptions provided for by applicable law, you have the right to ask the law firm to erase your Personal Data where one of the following grounds applies:
Your Personal Data must be erased in order to comply with a legal obligation.
Right to restriction of the processing of your Personal Data
Applicable regulations provide that this right to restriction of the processing of your Personal Data may be exercised in certain circumstances, including:
Right to data portability
Where processing is based on your consent or on a contract, this right to data portability allows you to receive your Personal Data in a structured, commonly used and machine-readable format, or to transmit that Personal Data to another data controller without hindrance from the law firm.
Where technically feasible, you may request that the law firm transmit this Personal Data directly to another data controller.
Right to withdraw consent to the processing of Personal Data
Where the law firm processes your Personal Data on the basis of your consent, you may withdraw that consent at any time using the means made available to you for that purpose (see below). However, in accordance with applicable law, the withdrawal of your consent applies only for the future and therefore does not affect the lawfulness of processing carried out before its withdrawal.
Right to lodge a complaint with a supervisory authority
If, despite the law firm's efforts to preserve the confidentiality of your Personal Data, you believe that your rights have not been respected, you are entitled to lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés.
If you have any questions about this Policy or wish to exercise any of the rights referred to above, you may send a request, accompanied by a copy of an identity document, to:
The law firm undertakes to respond to you as soon as possible.
If your request is submitted electronically, the information will also be provided to you electronically where possible, unless you expressly request otherwise.
If the law firm does not act on your request, it will inform you of the reasons and you will have the option of lodging a complaint with a supervisory authority and/or seeking a judicial remedy.