When you visit the website mg-plasseraud.com, Marie-Gabrielle Plasseraud (hereinafter “Marie-Gabrielle Plasseraud” or “we”) collects and processes personal data. Such data is also collected and processed in connection with our activities as lawyers registered with the Paris Bar.
Personal data means any information that allows a natural person to be identified, directly or indirectly, such as a name, an identification number, location data, an online identifier, or one or more elements specific to that person’s identity (hereinafter “Personal Data”).
This privacy policy (hereinafter the “Privacy Policy”) explains what data we collect, why we collect it, and what your rights are.
Processing means any operation applied to Personal Data, by automated means or otherwise (hereinafter “Processing”), including in particular: collection, recording, organisation, storage, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, restriction, erasure or destruction of Personal Data.
The Data Controller is Marie-Gabrielle Plasseraud, Attorney, SIREN number 808228068, with registered office at 84 rue d’Amsterdam, 75009 Paris, France.
We implement appropriate technical and organisational measures to ensure the security of your Personal Data and to prevent any unauthorised access, use, disclosure or alteration.
We collect and use the following categories of data:
Mandatory fields are indicated when you provide us with your data. They are flagged by all appropriate means.
We do not collect any sensitive Personal Data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual orientation) (hereinafter “Sensitive Personal Data”).
If Sensitive Personal Data is processed, we will delete it as soon as possible.
In addition, certain technical data is automatically collected via cookies on our website. To learn more and to understand your rights, please consult the Cookie Policy.
We collect your Personal Data in the following circumstances:
Any Processing of Personal Data is based on one of the legal grounds set out in Article 6 of the General Data Protection Regulation (hereinafter the “GDPR”).
The table below summarises our processing activities and their legal bases.
Processing purposes | Legal bases |
Providing legal services to the data subject or their organisation | Performance of a contract – Article 6(1)(b) GDPRFor our clients or prospects, performance of the contract or of pre-contractual measures taken at your request.
Legal obligation – Article 6(1)(c) GDPRCompliance with our accounting and tax obligations imposed by law, including the keeping of accounts and professional fee invoices. |
Registering or onboarding the data subject or their organisation as a client | |
Delivering and administering legal services in accordance with client instructions | |
Managing the client relationship: billing, accounting, cost recovery | |
Conducting internal checks and avoiding conflicts of interest | Legal obligation – Article 6(1)(c) GDPRCompliance with our legal, regulatory and professional obligations, particularly those arising from anti-money laundering and counter-terrorist financing regulations, the professional conduct rules of the legal profession set out in the National Internal Regulations (Règlement Intérieur National), and applicable international and commercial sanctions regimes. |
Complying with our legal and professional obligations: mandatory anti-money laundering and counter-terrorist financing checks, fraud prevention and compliance with international sanctions | |
Exercising or defending our rights in legal proceedings; complying with a court order or arbitral tribunal order | |
Managing applications, assessing profiles and conducting the recruitment process | Performance of a contract – Article 6(1)(b) GDPRPerformance of pre-contractual measures taken at your request, in particular for the receipt and processing of applications received. |
Protecting the security of our professional communications and information systems | Legitimate interest – Article 6(1)(f) GDPROur legitimate interest in ensuring the security and confidentiality of our professional exchanges, information systems, and data entrusted to us in the course of our work. |
Preventing and detecting threats, fraud and malicious activities that may affect the firm or its clients | |
Sending marketing or informational communications, including newsletters or invitations to firm events, to prospects and clients | Legitimate interest – Article 6(1)(f) GDPROur legitimate interest in ensuring communication, marketing and information to our clients and prospects. |
Identifying website usage issues and improving content and navigation | Legitimate interest – Article 6(1)(f) GDPROur legitimate interest in improving the user experience on our website, optimising the presentation of our services and ensuring proper technical operation. |
Monitoring and analysing website performance |
Processing carried out in connection with our legal work is further covered by legal professional privilege.
We retain your Personal Data for the period necessary considering the purpose for which it was collected:
These periods may be extended where required by statutory archiving obligations, the establishment of proof of a right or contract, applicable limitation periods, potential disputes, or guidelines issued by the competent data protection authorities.
You remain at all times the sole owner of your Personal Data and may exercise the following rights under applicable law:
(i) a dispute as to their accuracy, for the time needed to verify them;
(ii) unlawful processing where you prefer to restrict use rather than request erasure;
(iii) where we no longer need your Personal Data but you still require it for the establishment, exercise or defence of your legal claims;
(iv) the exercise of your right to object, during the verification period to determine whether the legitimate grounds we pursue override yours.
To exercise any of these rights, please contact Marie-Gabrielle Plasseraud at the following email address: contact@mg-plasseraud.com.
If you believe your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) at the following address:
CNIL, Service des plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
In the context of the tools we use (see Article 8 – Recipients with Access to Personal Data), your Personal Data may be transferred outside the European Union. Such transfers are secured by the following means:
You may obtain a copy of the instruments enabling transfers of your Personal Data outside the European Union by contacting us.
In addition, analytical data collected via cookies may be shared with service providers (e.g. Google) for the sole purpose of analysing our website’s performance.
Your Personal Data will only be communicated, where applicable, to the following recipients:
These recipients have access only to the Personal Data strictly necessary for the performance of their tasks and undertake not to use it for any other purpose. They are bound by a confidentiality obligation.
We select our service providers with the greatest care, ensuring that they provide sufficient guarantees, in terms of security, to meet the requirements of applicable law.
Furthermore, in accordance with applicable legislation, we may be required to disclose your Personal Data to competent authorities upon request, including public bodies, officers of the court, and ministerial officers, to fulfil our legal obligations.
This Privacy Policy may be updated by us to best reflect any changes in the way we collect and process your Personal Data. Any amendment is published on this page with the revision date.