Introduction

When the website mg-plasseraud.com (hereinafter “our site”) is used, personal data may be collected and processed by Marie-Gabrielle Plasseraud (hereinafter “Marie-Gabrielle Plasseraud” or “us” or “we”). 

Personal data is any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity (hereinafter the “Personal Data”).

As part of our advisory and/or litigation activity as lawyers registered with the Paris Bar, we may collect and process information about you. For example, by browsing or filling in our contact form, you may send us your Personal Data.

This Privacy Policy (hereinafter the “Privacy Policy”) informs you about how we collect and process your Personal Data. It is intended to provide you with information about your rights and how to exercise them. It may be changed by us, over time, so as to better reflect any changes we make to the way we collect and process your Personal Data. 

1. Use of Your Personal Data:

We use your Personal Data for the following purposes:

• To conduct internal audits and avoid conflict of interest situations.
• To provide you or your organization with legal services.
• To register you or your organization as a client.
• To provide and administer legal services as directed by you.
• To administer and manage our relationship with you, including billing, payment processing, accounting, fee collection and activities related to the business relationship with you or your organization.
• To comply with our legal obligations, including maintaining records or conducting any necessary audits (e.g., ethical obligations, attorney liability, anti-money laundering, fraud and crime prevention and detection, or in connection with international or trade sanctions).
• To protect the security of our communications and other systems and to prevent and detect security threats, fraud or other criminal or malicious activity.
• To exercise or defend our legal rights, or to comply with the order of any court or other judicial or arbitral authority.
• To communicate with you to invite you to our events and to keep you informed of legal developments and matters of interest or announcements regarding our teams, and for other marketing and informational purposes.
• For other purposes ancillary to any of the above purposes or for any other specific purpose for which your Personal Data has been provided to us.

Our processing is carried out on sound legal grounds, including:

• Because the processing is necessary for the performance of the contract between us.
• To comply with our professional, regulatory and legal obligations and to monitor the quality of our internal processes.
• Because our legitimate interests, or those of a third-party recipient of your Personal Data, make the processing necessary, provided those interests are not overridden by your interests or fundamental rights and freedoms.
• Because you have expressly given us your consent to process your personal data in this way, in particular when signing our engagement letters.

It should be noted that most of the Personal Data processing carried out by the firm is covered by professional secrecy.

2. Data controller mentioned in the Privacy Policy

Processing is any operation or set of operations, carried out by automated means or otherwise, and applied to data or sets of Personal Data (hereinafter the “Processing”).

For example, the following operations are considered as Processing: collection, recording, organisation, structuring, storage, adaptation, modification, consultation, use, communication by transmission, dissemination or any other form of making available, alignment or interconnection, limitation, erasure or destruction of data or sets of Personal Data.

The Data Controller mentioned in the Privacy Policy is Marie-Gabrielle Plasseraud, a lawyer whose SIREN identification number is 808228068, and whose registered office is located at 84 rue d’Amsterdam, 75009 Paris, France.

As a Data Controller, we implement appropriate technical and organisational measures to protect your Personal Data from such things as alteration, accidental or unlawful loss, use, disclosure or unauthorised access.

3. Types and Purposes of the Processing of Personal Data

Personal data relating to adults

Our services are primarily aimed at individuals who have reached the age of majority and who are able to subscribe to pre-contractual and/or contractual obligations relating to consultation and/or litigation. You must therefore be over the age of 18 in order to provide us with your Personal Data. 

We may therefore process your Personal Data for the following purposes (hereinafter referred to as the “Purposes”):

• the identity and contact details of natural persons: your surname, your first name, telephone number, e-mail address and personal postal addresses for the provision of our services;
• the identity and contact details of legal entities: the company name of your company, its registration number in the Trade and Companies Register (RCS) and its value added tax (VAT) number for the provision of our services.

Personal data relating to minors 

Our services are primarily aimed at individuals who have reached the age of majority and who are able to subscribe to pre-contractual and/or contractual obligations relating to consultation and/or litigation, in our capacity as lawyers registered with the Paris Bar. You must therefore be over the age of 18 in order to provide us with your Personal Data. 

Minor users under the age of 18 cannot, therefore, have recourse to Marie-Gabrielle Plasseraud Avocats’ services, even if they have managed to obtain the prior consent of their legal representative and are thus authorised to transmit their Personal Data to us. As a result, we confirm that we do not collect or process any Personal Data from minors.

Personal Data Excluded

We confirm that we do not collect any Personal Data that is classed as sensitive. Sensitive Personal Data is data with a racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, health data or data concerning sex life or sexual orientation (hereinafter “Sensitive Personal Data”).

In the event of Inadvertent Processing of Sensitive Personal Data, we undertake not to carry out any Processing and to delete the said data as soon as possible.

4. Compliance with your rights relating to Personal Data

You remain at all times the sole owner of your Personal Data and may exercise one or more of the following rights under the applicable regulations, namely:

• access to your Personal Data: we will provide you with a copy of all Personal Data that we have on our website, systems, files, records, etc. This allows you to verify that the Processing of your Personal Data is lawful;
• rectification of your Personal Data: we will make the relevant corrections to your Personal Data in accordance with your instructions if it is incomplete or inaccurate. We may need to verify the accuracy of the new data you provide to us;
• erasure of your Personal Data: we will delete all of your outdated, irrelevant Personal Data after the exercise of your right to object, in the event of unlawful Processing of your Personal Data that we hold on our website, systems, files, records, etc. Please note that we will not necessarily respond to your request for erasure, for specific legal reasons which will, however, be made known to you, if necessary, in response to a request from you to that effect;
• the restriction of the processing of your Personal Data in certain specific cases: (i) if you dispute the accuracy of your Personal Data, for a period enabling us to verify its accuracy; (ii) the processing of your Personal Data is unlawful and instead of its erasure you require us to restrict its use; (iii) we no longer need your Personal Data but it is still necessary for the purposes of establishing, exercising or defending your legal rights; during the audit period, relating to the issue of establishing whether the legitimate grounds we pursue override yours after the exercise of your right to object.
• the portability of your Personal Data: we structure your Personal Data in a readable format commonly used by a machine, so that it can be transferred to a third party of your choice in accordance with your instructions. Please note that this right only applies to automated Personal Data for the use of which you initially provided us with your consent, or which we use for the performance of a contract entered into together;
• objection to the use of your Personal Data: we will no longer process it (this will result in us no longer being able to provide you with certain services) and you have the right to withdraw any consent given to the processing of your personal data (if such consent is required).

You can exercise one or more of your aforementioned rights by contacting Marie-Gabrielle Plasseraud at the following email address: contact@mg-plasseraud.com.

If you believe that the processing of your Personal Data does not comply with the regulations in force, you may file a complaint with :
file a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL), at the following address:

CNIL, Service des plaintes, 3 place de Fontenoy, TSA 80715, 75334, Paris Cedex 07, France

5. Circumstances of the Processing of Personal Data

You provide us with Personal Data such as your identity, contact details and behaviours, through your browsing, by filling in our form on our website, or by contacting us directly by post, email and/or telephone.

6. Retention periods for your Personal Data

Marie-Gabrielle Plasseraud Avocats retains your personal data for as long as necessary to fulfill the purpose(s) for which it was collected.

In particular, for the personal data of clients, prospects, partners and candidates, we keep the data for a maximum of 3 years after the last contact.

Nevertheless, we may be required to keep certain personal data for a longer period in view of legal obligations relating to the archiving of data, the establishment of proof of a right or contract, applicable limitation periods, potential disputes and guidelines established by the competent data protection authorities.

7. No transfer and/or sharing of your Personal Data to external third parties

We confirm that we keep your Personal Data in France and do not transfer and/or share your Personal Data with external third parties.

8. Applicable law and dispute resolution

The Policy is subject to French law.

In the event of a dispute and in the absence of an amicable agreement, the competent court will be the one determined according to the applicable rules of procedure.