August Debouzy Personal Data Protection Policy
At August Debouzy, we take the protection of your privacy and personal data very seriously.
This is why we are committed to implementing appropriate measures to ensure the protection, confidentiality and security of your personal data and to only processing and using such data in compliance with applicable laws, and in particular European Regulation 2016/679 of April 27 th , 2016 (hereinafter the “General Data Protection Regulation”), Act No. 78-17 of 6 January 1978 (the “French Data Protection Act”) and any other law or regulation that may supplement or replace it (hereinafter “Applicable Legislation”).
The purpose of this personal data protection policy (hereinafter the “Policy”) is to give you information on how we process your data and the commitments made by August Debouzy to ensure compliance with your personal data.
As used herein, the terms “controller”, “personal data”, “processing”, and “processor” have the meaning given to them in Article 4 of European Regulation 2016/679 of April 27 th , 2016 (hereinafter the “General Data Protection Regulation” or “GDPR”).
1. What personal data do we process?
1.1 Contact and business information
In the course of performance of agreements for legal services we enter into with our clients (”you” or “your company or organization”) and, more generally, of the matters on which you instruct us or in which you are involved, August & Debouzy & Associés law firm (hereinafter “August Debouzy”, “we” or “us”) collects and processes personal data concerning you and your company or organization, your employees, representatives, and/or directors for the purposes of managing our contractual relationship. The data we collect is strictly necessary for us to be able to provide you with our services.
In this context, August Debouzy, as the controller, implements processing in compliance with Applicable Legislation, for the purposes of client management (including for the purposes of contacting and communicating with clients, performing the matters entrusted to us, and in particular the provision of legal services, contract, billing and accounting management, and the monitoring of our contractual relationship), and more generally management of the operations necessary for us to communicate with you about the matters you have entrusted to August Debouzy or in which you are involved. The data collected can also serve for the purposes of carrying out analyses (e.g. of trends, progress on marketing actions, open and click-through rates).
Similarly, and unless you object, you may receive newsletters and informational content on different professional and legal topics, press releases, invitations to training or other events organized by August Debouzy, the foregoing in a purely professional context.
1.2 Visitors to the August Debouzy website
We collect personal data about the users of the Website when you (i) register or sign up for morning information meetings or August Debouzy newsletters.
In this context, August Debouzy, as controller, processes data in compliance with Applicable Legislation, for the purpose of enabling communications between you and August Debouzy. Once you have registered as a user on our Website, provided you do not subsequently object, you may receive newsletters and informational content on different professional and legal topics, press releases, invitations to training or other events organized by August Debouzy, the foregoing in a purely professional context.
2. What legal grounds do we rely on to use and process your personal data?
We rely on the following legal grounds:
3. How long do we keep your personal data?
We keep personal data collected and processed in this context, as well as the entire file associated with you or your company or organization during the entire period of our contractual relationship with you (or your company or organization) and for the applicable statute of limitation period for legal claims (5 years in this context). Your personal data can also be kept for a period of 10 years to comply with accounting and tax obligations.
4. Who has access to your personal data?
The personal data collected and processed in this context can be accessed by the competent internal departments, meaning our lawyers (and, as applicable, interns) handling you or your company or organization’s matters or requests, our billing department, our communication department and our IT department.
The information collected, including personal data, may be transmitted to third parties, acting as processors, under a processor agreement, for the performance of hosting, storage, communication, data processing, database management, IT maintenance or other services. These processors act only on instructions from August Debouzy and will only have access to your personal data to perform their services. Such processors will be under the same security and confidentiality obligations as August Debouzy.
5. Is your personal data transferred outside the European Union?
The personal data collected and processed in this context will be hosted in the European Union and will not be subject to any transfer outside the European Union.
a. What is a cookie?
A “cookie” is a text file stored on your hard drive by the server of the website you have visited. It typically contains the name of the server that placed it, a unique numeric identifier and an expiry date. The purpose of the cookie is to collect information about your browsing so as to offer you services adapted to your device (computer, mobile phone or tablet).
b. What cookies are used on our Website?
The cookies used on our Website are the following:
c. Why does August Debouzy use these cookies?
We use session ID and functionality cookies to enable the smooth operation of our Website, to facilitate browsing on it and to provide you with relevant information upon your return visits to our Website.
Similarly, we use audience measurement cookies to measure the traffic on our Website, the number of pages viewed and the frequency of return visits to our Website.
Your browser settings can be changed as follows:
If your browser is not featured in the above list, please go to the “settings” tab of your browser and to the “Options” or “Preferences” tab.
We draw your attention to the fact that your cookie settings may affect your conditions of access to our Website and its features and thus impair its performance.
When you unsubscribe by following the instructions given in this section, a cookie will be placed on your browser. This cookie needs to be kept on your browser for you to be recognized as having unsubscribed from our service. You will need to unsubscribe again if you delete that cookie from your browser, if you use a different browser or if you use another computer to access the Internet.
7. What are your rights?
In accordance with applicable legislation, you have a right of access, to rectification and to the erasure of personal data concerning you, a right to restriction of processing, and a right to object to the processing of data concerning you. You also have a right to the portability of the data you have entrusted to August Debouzy and the right to send August Debouzy special instructions regarding what should happen to your personal data after your death.
To exercise these rights, send us a request:
specifying your surname, name and address and accompanying your request by a copy of both sides of your identity document.
You can object to receiving newsletters, messages and invitations to training and other events organized by August Debouzy by sending an email to one of the addresses indicated above. Also, our marketing messages contain an “unsubscribe” option in case you no longer want to receive newsletters or invitations to events from us.
In case of any difficulty with the management of your personal data, you can lodge a complaint with the French Data Protection Authority (CNIL) or any other competent authority. Please contact us before lodging any complaint with the CNIL.
As a client, you are responsible for sharing this information with any of your employees, representatives and/or directors whose personal data may be processed by August Debouzy in the performance of matters on which you instruct us.