Gramond, a company registered with the Paris Trade and Companies Register under number 434 139 192, with its registered office at 66 rue de Monceau – 75008 Paris, hereinafter referred to as the “Firm” and/or “Gramond”, is required, in the course of its activities, to process your personal data in its capacity as data controller:
- When you are in a professional relationship with one of the Firm's solicitors,
- When you complete an online form on the Firm's website,
- When you are its contact person at one of its clients,
- When you are its contact person at one of its suppliers.
In this context, Gramond complies with Law No. 78-17 of 6 January 1978 on information technology, files and freedoms and Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the “GDPR”) (together, the “Applicable Regulations“).
This privacy policy provides you with all the information required by the applicable texts concerning the collection and processing of your personal data in the above-mentioned situations.
For more general information on the protection of personal data, you can consult the website of the French Data Protection Authority (CNIL): https://www.cnil.fr.
If you have any questions about this policy, you can contact the Firm by sending an email to the following address: privacy@gramond-avocats.com.
The purposes and legal basis of processing
The Firm collects and processes personal data concerning you:
- In order to send you newsletters and other information, including commercial information where applicable, and to manage subscriptions to its newsletters;
- In connection with the processing of the files you entrust to it;
- In the context of managing its client relationships;
- In the context of managing its supplier relations.
This processing is carried out on the basis of the Firm's legitimate interests, primarily to enable it to communicate with you for commercial purposes and to manage contractual relationships with its clients and suppliers.
The categories of data concerned
- Data that you provide directly to the Firm
You may be required to provide the Firm with information about yourself in the course of your various interactions with it.
This data mainly consists of contact details, such as your first name, surname, title, business postal address, business email address and business telephone number.
- Data that the Firm collects indirectly
The Firm may collect data about you in the context of its contractual relationships with its clients and suppliers. This data is generally provided to the Firm by its main contact person within the client or supplier concerned. This data mainly consists of contact details, such as first name, surname, title, business postal address, business email address, business telephone number and job title.
Recipients of your data
The data collected and processed by the Firm for the above-mentioned purposes is transmitted to the Firm's internal departments (accounting department, marketing department, etc.) as well as to companies to which the Firm has outsourced services, it being understood that these service providers are contractually obliged to protect the personal data transmitted to them in this context.
Some of these service providers are located outside the European Economic Area (EEA) in countries where the level of protection of personal data may not be equivalent to that within the EEA. Such transfers are governed by standard contractual clauses signed with the service providers concerned in order to provide appropriate safeguards for these transfers. You can obtain more information about these transfers by sending a request to the email address indicated above.
Your rights
You may exercise the following rights in relation to your personal data, subject to the conditions and limitations set out in the Applicable Regulations:
- right of access: you may request that the Firm provide you with the personal data it holds about you;
- right of rectification: you may request that the Firm rectify any inaccurate information concerning you;
- right to object: you may object at any time to the processing of your data for reasons relating to your particular situation;
- right to erasure (or right to be forgotten): you may request that the Firm erase your data for the reasons set out in the Applicable Regulations;
- right to restriction of processing: you may ask the Firm to restrict processing for the reasons set out in the Applicable Regulations;
- right to define your guidelines regarding the storage, erasure and communication of your personal data after your death.
If you wish to exercise your rights, you should send the relevant request to the Firm by email to the following address: privacy@gramond-avocats.com.
In certain cases, the Firm may not respond favourably to your request. If this situation arises, the Firm will inform you of the reason(s) for its refusal.
In any event, you may lodge a complaint with the competent supervisory authority (the Commission Nationale de l'Informatique et des Libertés (CNIL) in France).
Retention period
Your data is retained:
- For data processed for commercial communication purposes: for a period of seven (7) years from the last contact;
- For data processed in the context of the Firm's relationships with clients and suppliers: for the duration of the said relationship, unless a change of contact person is notified by the client or supplier concerned or by yourself.
Data necessary to comply with a legal obligation is retained in order to enable the Firm to comply with the provisions in force and to prove such compliance.
Data may also be retained for any period necessary in view of the applicable limitation period.
DATE OF LAST UPDATE OF THIS PRIVACY POLICY: JANUARY 2021