You will find below information about how your personal data is protected, what your rights are and how you can exercise them.
If you have any doubts or concerns, contact me and I will be happy to attend to your enquiries.
Above all, keep in mind that your personal data is protected by the French solicitors’ professional secrecy rules and by personal data protection legislation: General Data Protection Regulation and Act No.78-17 of 6 January 1978 on information technology, data files and civil liberties.
Compliance with these rules is a priority.
I am liable for processing your data, as data controller, editor, how can you ask me your questions or contact me?
Stéphanie Diener
Avocate au Barreau de Toulouse
16 place Saint Georges
31000 TOULOUSE
Siren 529 671 935
Email: stephanie.diener@avocat.fr
For what purposes do I process your personal data?
During the first contacts, you will explain your situation to me, express your expectations and your objectives to determine whether you wish to entrust me with a mission.
Further on, you will provide me with more information, in order to allow me to carry out identity checks so that I can ensure the legality of my intervention.
Then, we will work together for advisoryor litigation matters, and I will be in constant contact with you for the follow-up of your file.
You will send me over time new information and sometimes personal documents that I will request to understand your file, defend you, support your requests or simply understand the ins and outs of your situation.
Finally, I will also use your contact information and sometimes information related to your financial and tax situation to adjust the billing of my fees.
What is the legal basis that allows me to process your personal data?
Your personal data is processed based on the information you give me, at first, when you contact me to decide whether you shall entrust me with a mission so that I can provide indications and a fee proposal.
If you work with me, your personal data is processed based on our contractual relationship.
In addition, regarding sensitive data, namely data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, health data or data pertaining to sexual life or sexual orientation of a natural person, it will only be processed if strictly necessary in accordance with the provisions of Article 9 2. f) of the General Data Protection Regulation.
Please note that the aforementioned Article allows the processing of sensitive data for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
Who may I share your personal data with?
Personal data, mainly data relating to civil status and address of domicile, may be shared with Bailiffs or other judicial or court officers, for the performance of duties related toa lawsuit or the execution of a Court order.
As for advisory matters, subject to your prior authorisation or mandate, the data may be shared with Public Notaries or Accountants or anyone you may have designated.
It is specified that data communications to third parties will always be limited to what isstrictly necessary for the performance of their mission.
In all other cases, the sharing of data will be done under your prior agreement, except for the case of legal obligations derogating from the professional secrecy rules.
How is your personal data processed?
I process your data on my own computer installations, which are permanently protected by passwords and protection software in secure premises.
I use a secure mailbox, using encryption, managed by the National Bar Council.
I am also equipped with SAAS software (Software As A Service) for management of legal services using servers located in the Paris region.
This service benefits from a level of security ensuring compliance with the General Data Protection Regulation. A conformity certificate can be issued by my subcontractor on request.
Ultimately, I do not use unsecured file transfer solutions.
Is your personal data transferred abroad?
No, your personal data is not transferred abroad, out of the European Union.
For how long do I retain your personal data?
Your data is retained for the entire time your case is active and during liability actions prescription period.
If you have not entered into a service agreement with me, your data will not be retained over 24 months after your latest solicitation.
What are your rights and how can you exercise them?
Applicable regulations grant you some control over your personal data.
You benefit from a right of access, interrogation, rectification, deletion, limitation, portability, and opposition, the latest allowing you to prevent your data from being used for commercial prospection purposes.
You can also set general and specific instructions on how to exercise these rights after your death.
You can eventually file a complaint with the CNIL, namely on the website https://www.cnil.fr/.
In order to exercise your rights and to ask me any questions you may have about the processing of your personal data, you can write to me by email: stephanie.diener@avocat.fr or by mail: 16 place Saint Georges, 31000 TOULOUSE.
I will answer as soon as possible and will inform you if I face a difficulty to answer, especially if my answer were to depend on a third party.
Do you have liabilities of your own?
Yes, if you entrust me with personal data of other people, including data of your employees, you must make sure that your upstream processing is legal and will remain responsible for the personal data that you share with me.