Personal data

1°) Personal data collected in the context of the Lawyer – Client relationship 

1.1.°) Categories of data collected, data subjects, duration and purpose of data processing

CITIZEN processes personal data concerning its clients as well as prospective clients.

The legal bases on which we process personal data are:

  • legitimate interests of the Firm ;
  • execution of pre-contractual or contractual measures; and
  • compliance with legal and regulatory obligations.

You can consult the information concerning the categories of data collected, the duration, purpose and legal basis of their processing, as well as the categories of data subjects, in the table available here.

1.2.°) Your rights

In accordance with the General Regulation on the Protection of Personal Data (RGPD) and the French Data Protection Act, as the owner of personal data, you have the following rights in particular:

1°) Right of access (art. 15 of GDPR)

You may access the data collected about you. This includes the right to request a file containing all the personal data we possess regarding you, including data you have provided to us.

2°) Right to rectification (art. 16 of GDPR)

You may request that any data concerning you that is incomplete, inaccurate or false be amended.

3°) Right to erasure or « right to be forgotten » (art. 17 of GDPR)

In certain circumstances, you may request that your personal data stored by us be deleted.

4°) Right to restriction of processing (art. 18 of GDPR)

In certain circumstances, you can restrict the use made of your personal data.

5°) Right to data portability (art. 20 of GDPR)

You have the right to request and obtain from us the transmission of your personal data in a legible digital format so that it can be easily transmitted to a third party of your choice, with a view to re-using it for other purposes.

6°) Right to object (art. 21 of GDPR)

You have the right to object to either specific or automated processing of your personal data. Please note, however, that failure to provide all relevant information may prevent the lawyer from dealing with your request or delay its processing.

7°) Right to withdraw consent (art. 7 of GDPR)

Wherever the Firm uses your personal data on the basis of your prior consent, you may withdraw this consent at any time.

You can exercise the rights listed above by contacting directly Mr Simon Deceuninck,

In principle, however, these rights may not be exercised in respect of data stored for strictly legal, administrative or security purposes.

We invite you to consult the website of the Commission Nationale Internet et Liberté (CNIL) for full information on your rights relating to the use of personal data and draw your attention to the fact that in the event of a dispute, it is possible to refer the matter to the CNIL, which is the competent supervisory authority.

1.3.°) How we protect your data

CITIZEN is concerned about the security and confidentiality of its Clients’ data. This is why a series of cybersecurity measures have been put in place to protect your personal data, as well as any sensitive data and/or data covered by confidentiality that you send us.

These measures include:

  • the use of encrypted e-mail services hosted in a secure country;
  • the use of secure IT equipment and tools (antivirus software, encrypted and password-protected external hard drives, use of official professional services, etc.);
  • an annual audit of cybersecurity and confidentiality protection measures.

1.4.°) Transmission of personal data collected

Any comments made by visitors (if any) can be checked using an automated service to detect undesirable comments.

We do not sell, give access, transmit or transfer in any way the personally identifiable information about our Clients collected via our website to third parties, other than those who may need it for the operation of our website, for the purposes of analysing the traffic on this site, or for the security of our data.

The only exception to this rule is that we may be required to transmit such data to the competent disciplinary, investigating and/or prosecuting authorities, in response to a request, order or injunction, final court decision or by virtue of a legal or regulatory obligation, in order to prevent, deter or repress illegal activities, fraud or other threats to the safety of individuals or breaches of public policy.

2°) Personal data collected via the direct online appointment booking service

CITIZEN has entered into a service provision contract with MeetLaw (www.meetlaw.fr), a subsidiary of AZKO, relating in particular to the direct appointment booking service for the Firm’s website’s visitors. The personal data likely to be processed by AZKO concerning the users of this service covers: the civil status of the persons, the contact details they have entered (postal address, e-mail address, professional address, telephone number) and the connection data.

Under the terms of the contract for the provision of services, AZKO undertakes, in particular, to :

“- keep personal data confidential and prevent it from being distorted, damaged, lost, misappropriated, corrupted, disclosed, transmitted or communicated to unauthorised persons (…)” (free translation).

In addition, AZKO undertakes to “refrain from exploiting or using, making copies of or creating files of personal data within the Client’s information system for its own purposes or on behalf of third parties. The processing of personal data shall correspond strictly to the fulfilment of the purposes (management of the commercial relationship with the Firm and provision of online services)” (free translation).