Personal data collected in the context of the Lawyer – Client relationship
The data processed by CITIZEN, within the general framework of its Client-Lawyer relationship, may concern: identity information, contact details, identification numbers (e.g. identity card number for our Clients who are natural persons), VAT. It may also relate to the services provided and requested by our Clients under the engagement letter signed with the Firm.
The information collected in any direct contact forms or emails sent from the website are recorded in one or more computerised files and security back-ups. Only the lawyers of the Firm, as well as, if necessary, their partners, associates or employees, all of whom are bound by professional secrecy or a confidentiality clause, will be able to access it.
Personal data collected via the direct online appointment service
CITIZEN has entered into a service contract with MeetLaw (www.meetlaw.fr), a subsidiary of AZKO, relating, in particular, to the provision of a direct appointment booking service for visitors to the Firm’s website. The personal data likely to be processed by AZKO relating to the users of this service concern: the civil status of the persons, the contact details they have specified (postal address, e-mail address, professional address, telephone number) and connection data.
Under the terms of the service contract, AZKO undertakes, inter alia, to :
“keep personal data confidential and to prevent it from being distorted, damaged, lost, misappropriated, corrupted, disclosed, transmitted or communicated to unauthorised persons (…)”
In addition, AZKO undertakes to “refrain from exploiting or using, making copies of or creating files of personal data within the Customer’s information system for its own purposes or on behalf of third parties. The processing of personal data shall correspond strictly to the fulfilment of the purposes (of managing the commercial relationship with the Customer and of providing online services)”.
Purposes of the processing
The purpose of the processing of personal data collected by Citizen is to provide services to its Clients, prospects and partners.
This includes, but is not limited to :
- the drafting of the engagement letter and fee agreement;
- compliance with our legal, regulatory and ethical obligations, including regulations relating to invoicing and the fight against financial crime;
- conflicts of interest checks;
- performing the legal and procedural services requested;
- the management of the firm’s invoicing and accounting;
- enabling the exercise of rights by data holders; and
- the management of the Firm’s contacts list.
Legal basis of the processing
Citizen’s processing of your personal data is legally based on: the European General Data Protection Regulation (“G.D.P.R.”), the French legislation in force regarding personal data, as well as, where applicable, the contractual relationship established between Citizen and its Clients, and the general terms and conditions of use of the website https://citizenavocats.com
We invite you to consult the website of the Commission Nationale Internet et Liberté (CNIL) for a detailed information on your rights regarding the use of personal data: https://cnil.fr
As the owner of personal data, you have inter alia the following rights:
1°) Right to information: you have the right to know what data is collected about you, why it is processed and by whom.
2°) Right of access: you can access the data collected about you. This includes the right to request a file containing all the personal data we hold about you, including that which you have provided yourself.
3°) Right of rectification: this means that you can ask to modify or delete data concerning you that are incomplete, inaccurate or possibly false.
4°) Right to erase: in certain circumstances, you may request that personal data concerning you and stored by us be erased.
5°) Right to restrict the processing of data: in certain circumstances, you can restrict the use made of your personal data.
6°) Right to object to specific automated processing.
7°) Right to data portability: you have the right to request and obtain the transmission of your personal data in a readable digital format.
You can exercise the rights listed above by contacting Maître Simon Deceuninck directly at the following e-mail address: firstname.lastname@example.org; or by post: Citizen Avocats, 3 Cours Maréchal Juin, 33000 Bordeaux.
In principle, the exercise of these rights will not concern data stored for strictly legal, administrative or security purposes.
How we protect your data
CITIZEN is a firm that cares about the security and confidentiality of its clients’ data. This is why a series of cybersecurity measures have been put in place to protect your personal data, as well as sensitive data and/or data covered by legal privilege that you send us.
These measures include, in particular :
- the use of encrypted e-mail services hosted in a secure Country ;
- the use of secure computer equipment and tools (antivirus, encrypted and password-protected external hard drives, use of official professional services, etc.);
- an annual audit of cybersecurity and confidentiality protection measures.
How long your data is stored
Unless you exercise your right to erasure or restriction, your personal data is stored for the longer of: the total duration of the contractual relationship between CITIZEN and you; or three years from the date of receipt of such data.
Transmission of personal data collected
Visitors’ comments can be checked using an automated service to detect undesirable comments.
We do not sell, give access to, transmit or otherwise transfer personally identifiable information about our clients collected through our website to third parties, other than those who may need such information in order to operate our website, analyze traffic patterns, or secure our data.
The only exception to this rule is that we may be required to pass on such data to the competent disciplinary, investigating and prosecuting authorities, upon request, lawful request or injunction, final court decision or by virtue of a legal or regulatory obligation, in order to prevent, deter or repress illegal activities, fraud or other threats to the safety of individuals or to public order.