The protection of your privacy and personal data is paramount at AUGUST DEBOUZY.
That is why we are committed to implementing all appropriate measures to ensure the protection, confidentiality, and security of your personal data and to process and use such data in accordance with applicable provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR "), Law No. 78-17 of January 6, 1978 on information technology, files, and civil liberties, and Decree No. 2019-536 of May 29, 2019 (hereinafter collectively referred to as the "Applicable Regulations").
This data protection policy (the "Policy") applies to all users of the website https://www.august-debouzy.com/fr/ (hereinafter the "Users"), to AUGUST DEBOUZY's clients (hereinafter the "Clients") and to AUGUST DEBOUZY's prospects (hereinafter the "Prospects") (hereinafter collectively referred to as "you," "your," "yours") and aims to provide you with clear and comprehensive information on how AUGUST DEBOUZY processes your personal data. AUGUST DEBOUZY
For information purposes, personal data is considered to be any information relating to an identified or identifiable natural person: an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This Policy may be updated at any time. We will notify you of any substantial changes by the means of communication we deem appropriate. However, we recommend that you consult this Policy regularly to review the latest version.
1. Who is responsible for processing your personal data?
AUGUST DEBOUZY, a professional civil law firm, with its registered office at 7 rue de Téhéran, 75008 Paris, registered with the Paris Trade and Companies Register under number 400104303 ("AUGUST DEBOUZY" or "we," "us," "our") is the data controller of your personal data (i.e., the entity that determines the purposes and means of processing your personal data). "our," "ours") is the controller of your personal data (i.e., the entity that determines the purposes and means of processing your personal data) carried out (i) through the website https://www.august-debouzy.com/fr/ (the "Site") when you are a User, (ii) to manage the commercial relationship when you are a Client, (iii) to contact you and communicate with you when you are a Prospect.
2. For what purposes and on what legal basis is your personal data collected?
AUGUST DEBOUZY is committed to collecting and processing only personal data that is relevant, adequate, and strictly necessary for the purposes pursued, avoiding any excessive collection.
Below is a table listing information relating to the processing of your personal data, specifically:
- The various purposes pursued during processing (i.e., the objectives pursued when we process your personal data);
- The personal data collected;
- The legal basis on which we rely to carry out the processing; and
- The length of time we keep your personal data.
When your personal data is sent to us via a form, the mandatory nature of the information you must provide is indicated at the time of collection by an asterisk. Any failure to respond or any response deemed abnormal by AUGUST DEBOUZY may result in AUGUST DEBOUZY being unable to take your request into account.
When you apply for a job offer on the Site, please read our privacy policy applicable to candidates.
For Website Users
| Purposes of processing | Personal data collected | Legal basis for processing | Retention periods for personal data |
|---|---|---|---|
| To send Users our newsletters, our analyses of legal developments, our invitations to events and training courses, as well as any news relating to our services, and to offer Users the opportunity to be contacted by a lawyer | Last name, first name, email address, phone number, job title | AUGUST DEBOUZY's legitimate interest in promoting its services and developing its relationships | We keep your data for a period of 3 years following our last contact with the User |
| Responding to your questions/requests made via the contact form on the Website or by any other means | Depending on the subject of the User's request: last name, first name, email address, telephone number, company, profession, country, sector, content of the request, any other information provided by the User directly and voluntarily in connection with the User's request | AUGUST DEBOUZY's legitimate interest in developing its relationships and offering a high-quality service to Users of the Website | We retain your data for 5 years from the closure of the User's request |
| To enable Users to access the Site and use its various features | Data relating to the device used to access and use the Website: technical information concerning the characteristics and operating data of the User's device, the operator, the operating system, the device model, the IP address | AUGUST DEBOUZY's legitimate interest in being able to provide its Users with a functional Website | Cookies are stored for 13 months, and the information collected through these cookies is retained for 25 months |
| Ensuring the security of the Website | Login information and activity logs | AUGUST DEBOUZY's legitimate interest, more specifically its commercial and economic interest in providing its Users with secure services | The cookies placed have a lifespan of 13 months, and the information collected through these cookies is kept for a period of 25 months |
| Performing statistical analyses on the Website's performance in order to improve and optimize its functionality, content, and User navigation. To do this, we place audience measurement cookies (see our Cookie Policy for more details). |
User's IP address, visitor ID | User consent | The cookies placed have a lifespan of 6 months |
| Store your consent to the placement of cookies that are not strictly essential to the functioning of the Site | Connection logs. Data relating to the device used to access and use the Application: technical information concerning the characteristics and operating data of the user's device, the operator, the operating system, the device model, the IP address. |
AUGUST DEBOUZY's legitimate interest in being able to better understand how users use the Application in order to improve it and offer a functional application | Unless you withdraw your consent, it is retained for 6 months |
| Managing requests to exercise individual rights | First name, last name, contact details, any other personal data targeted by your request | Compliance by AUGUST DEBOUZY with its legal obligations under the Applicable Regulations | With regard to proof of identity (if required): deleted once the request has been processed (it may, however, be kept for longer, for 6 years from the closure of the request, if there is a high risk of litigation). Regarding data collected to manage the request: until the request is managed/closed. Regarding the response provided to you: 6 years from the closure of the request. Please note that if your request concerns the deletion of your data/objection to its processing in the context of our marketing activities, we will retain your data for 5 years in order to keep our opposition list up to date. |
For Clients
| Purposes of processing | Personal data collected | Legal basis for processing | Retention periods for personal data |
|---|---|---|---|
| Contacting and communicating with the Client in connection with the monitoring of the contractual relationship | Identity and contact details | Performance of the fee agreement between AUGUST DEBOUZY and Clients | We retain your data for 5 years from the end of the contractual relationship. |
| Preventing conflicts of interest | Identity data and data relating to the file | AUGUST DEBOUZY's legitimate interest in complying with its ethical obligations | We retain your data for 5 years from the end of the contractual relationship |
| Sending clients our newsletters, legal news analyses, invitations to events and training sessions, and any news relating to our services | Last name, first name, email address, telephone number, job title | AUGUST DEBOUZY's legitimate interest in promoting its services and developing its relationships | We retain your data for a period of 3 years from the end of the contractual relationship |
| Verify the Client's identity | Identity and contact details, any information relevant to regulations aimed at improving our knowledge of Clients | Compliance by AUGUST DEBOUZY with its legal obligations under Law No. 2016-1691 of December 9, 2016 on transparency, anti-corruption, and economic modernization | We retain your data for a period of 6 years from the end of the contractual relationship |
| To carry out the tasks entrusted to us, in particular the provision of legal services | Identity and contact details, any information relevant to the provision of legal services | The performance of the fee agreement between AUGUST DEBOUZY and its Clients | We retain your data for a period of 5 years from the end of the contractual relationship |
| Manage billing (processing invoices, payments, and collections) | Identity and contact details, financial and payment details | Compliance by AUGUST DEBOUZY with its legal obligations under the Commercial Code | We retain your data for a period of 10 years from the end of the financial year |
| Managing requests to exercise individual rights | First name, last name, contact details, any other personal data targeted by your request | Compliance by AUGUST DEBOUZY with its legal obligations under the Applicable Regulations | With regard to proof of identity (if required): deleted once the request has been processed (it may, however, be kept for longer, for 6 years from the closure of the request, if there is a high risk of litigation). Regarding data collected to manage the request: until the request is managed/closed. Regarding the response provided to you: 6 years from the closure of the request. Please note that if your request concerns the deletion of your data/objection to its processing in the context of our marketing activities, we will retain your data for 5 years in order to keep our opposition list up to date. |
For Prospects
| Finalités du traitement | Données à caractère personnel collectées | Bases légales du traitement | Durées de conservation des données à caractère personnel |
|---|---|---|---|
| Send Prospects our news updates, legal news analyses, invitations to events and training sessions, and any news relating to our services | Last name, first name, email address, phone number, job title | AUGUST DEBOUZY's legitimate interest in promoting its services and developing its relationships | We retain your data for a period of three years following our last contact |
| Manage requests to exercise individual rights | First name, last name, contact details, any other personal data targeted by your request | AUGUST DEBOUZY's compliance with its legal obligations under the Applicable Regulations | With regard to proof of identity (if required): deleted once the request has been processed (it may, however, be kept for longer, for 6 years from the closure of the request, if there is a high risk of litigation). Regarding data collected to manage the request: until the request is managed/closed. Regarding the response provided to you: 6 years from the closure of the request. Please note that if your request concerns the deletion of your data/objection to its processing in the context of our marketing activities, we will keep your data for 5 years from the date of your request in order to keep our opt-out list up to date. |
3. Who is your personal data intended for and to whom is it disclosed?
The personal data collected and processed by AUGUST DEBOUZY is accessible to the relevant internal departments, i.e., lawyers (and, where applicable, administrative staff such as interns or assistants) handling client requests, our billing department, our communications department, and our IT department, to the extent strictly necessary for the performance of their duties and in compliance with applicable ethical and legal obligations.
This data may be communicated to third parties, acting as subcontractors, bound by a subcontracting agreement, to perform hosting, contact management (CRM), billing management, communication/marketing, database management, website management, and IT maintenance services. These subcontractors act only on the instructions of AUGUST DEBOUZY and have access to your personal data only to perform their services. They are contractually bound by the same security and confidentiality obligations as AUGUST DEBOUZY.
Your personal data may be shared with co-organizers when you register for an event organized jointly with third parties. In this case, the co-organizer will be considered an independent data controller and will be responsible for informing you of how it will process your personal data.
In addition, your personal data may be shared with third parties for the following reasons:
- In response to legal or administrative proceedings of any kind or law enforcement measures requested by the competent authorities;
- To comply with legal obligations, to protect the rights and/or safety of an individual, to protect the rights and property of AUGUST DEBOUZY, and to prevent fraud, security, or technical issues.
4. Is your personal data transferred outside the European Union?
Your personal data processed by AUGUST DEBOUZY is hosted within the European Economic Area and is not transferred outside the European Economic Area.5. What are your rights regarding your personal data?
In accordance with the Applicable Regulations, you have the following rights over your personal data:
- If your personal data has been processed with your consent, you have the right to withdraw your consent at any time without affecting the consent given prior to withdrawal.
- You have the right to access the personal data we hold about you (provided that the request is not manifestly unfounded or excessive, in particular because of its repetitive nature) and to obtain a copy of it.
- You may request that your personal data be corrected if it is inaccurate or out of date and/or that it be completed (provided that the request is not manifestly unfounded or excessive, in particular because of its repetitive nature)
- You may request that your personal data be erased. However, this is not an absolute right, as we may be required to retain your personal data for legal or legitimate reasons. You may exercise your right to erasure in the following cases: if you have validly objected to the processing of your personal data or withdrawn your consent, when the personal data are not or no longer necessary for the purposes for which they were initially collected or processed, or when the personal data are subject to unlawful processing.
- You may request the restriction of processing. This right means that the processing of your personal data by us is restricted, so that we may store such data, but may not use or otherwise process it. This right applies in specific circumstances, namely (i) if you contest the accuracy of your personal data: processing is then restricted for a period enabling AUGUST DEBOUZY to verify the accuracy of the data; (ii) in cases where the processing is unlawful and you oppose the erasure of your personal data and instead request the restriction of its use; (iii) in cases where we no longer need the personal data for the purposes mentioned above, but it is still necessary for us to establish, exercise, or defend legal claims; and (iv) in cases where you have objected to processing based on the legitimate interests pursued by August Debouzy, you may request that processing be restricted for the period necessary to determine whether we can comply with your objection.
- You may object to the processing of your data. When we process your personal data on the basis of our legitimate interests, you may object at any time to the processing of your personal data for reasons relating to your particular situation, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where such data is necessary for the establishment, exercise, or defense of legal claims.
- You have the right to data portability: you have the right to receive the personal data concerning you that you have provided to us and that we hold about you, in a structured, commonly used and machine-readable format. This applies only to data that you have provided directly or indirectly and only when the processing is based on your consent or the performance of a contract and is carried out using automated processes.
- You also have the right to give general and specific guidelines on the fate of your personal data after your death.
Finally, you have the right to lodge a complaint with the National Commission for Information Technology and Civil Liberties (hereinafter the "CNIL"). However, we invite you to contact us at the address below before lodging any complaint with the CNIL.
To exercise all of these rights, you can send a request by mail to the following postal address: Direction Générale, RGPD, August Debouzy, 7 Rue de Téhéran, 75008 Paris, France, or by email to the following email address: rgpd@august-debouzy.com.
6. How to contact us
If you have any questions or comments about how we process and use your personal data, or if you wish to exercise any of your rights mentioned above, you can contact us at the following email address: rgpd@august-debouzy.com or write to us at the following address: Direction Générale, RGPD, AUGUST DEBOUZY, 7 rue de Téhéran, 75008 Paris.