Confidentiality
Confidentiality and Compliance Statement – General Data Protection Regulation
Valoris Avocats
Valoris Avocats is a simplified stock option partnership law firm (SELAS) with registered office in 14 avenue Pierre Mendès France F-67300 Schiltigheim and registered with the commercial and trade register of Strasbourg, number 802 627 059 (hereafter «Valoris Avocats»).
Valoris Avocats is an internationally oriented law firm that advises its clients, private and institutional players in the industrial, health and service sectors, on legal, tax and social matters. Valoris Avocats is also strongly committed to the protection of personal data and has a policy of transparency with respect to the processing of your data. The purpose of this charter is to inform you about the way we collect and process your personal data.
Preamble
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data, more commonly known as the General Data Protection Regulation (hereinafter “GDPR”), applicable since May 25, 2018, sets the legal framework applicable to the processing of personal data. The latter strengthens the rights and obligations of data controllers, data processors, data subjects and data recipients.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data, more commonly known as the General Data Protection Regulation (hereinafter “GDPR”), applicable since May 25, 2018, sets the legal framework applicable to the processing of personal data. The latter strengthens the rights and obligations of data controllers, data processors, data subjects and data recipients.
Within the framework of its activity, Valoris Avocats implements a processing of personal data gathering the data of its customers and contacts.
1. Data protection framework
Whom do we protect ?
- Client: any natural or legal person who is a client of Valoris Avocats.
- Contact: any natural or legal person who has a relationship with Valoris Avocats but is not a client (prospects, relations, partners, etc.);
- Recipient: any natural or legal person who receives personal data. The recipients of the data may therefore be both internal recipients and external organizations (support service providers, judicial administration and its auxiliaries, professional bodies, etc.);
- Data subject: any person who can be identified, directly or indirectly.
What do we protect ?
- Personal data: any information relating to an identified or identifiable individual is personal data.
- Processing: any operation, whether or not carried out by automatic means, which is applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction
Who is responsible?
- Data controller: the individual or legal entity that determines the purposes and means of processing personal data. Our data controller is Maître Cécile Puijalon-Radu, lawyer at the bar of Strasbourg and President of Valoris Avocats.
- DPO (Data Protection Officer): The person in charge of the protection of personal data and the respect of the regulation relating to these data within an organization. Our DPO is Maître Luc Julien-Saint-Amand, lawyer at the bar of Strasbourg, doctor of law and Managing Director of the company Valoris Avocats.
- Processor: any natural or legal person who processes personal data on behalf of the data controller. These are the service providers with whom Valoris Avocats works and who intervene in the personal data it processes.
2. Why do we collect your data? (Purposes of processing)
The personal data that you may be asked to provide to Valoris Avocats is collected solely for the purpose of carrying out the mission that you have entrusted to us, to the exclusion of any other purpose. The purposes envisaged are as follows :
- Processing of files for the missions entrusted to Valoris Avocats.
- Invoicing, management of unpaid bills and litigation,
- Management of the client file.
- Organization and invitations to events organized or co-organized by Valoris Avocats.
- Sending newsletters and greeting cards.
- Response to public or private tenders.
- Compliance with our administrative obligations.
Personal data of clients and contacts may be collected through :
- Information and documents provided by our clients in the context of a file,
- Registrations or subscriptions to our online services and social networks (newsletters, LinkedIn, Application Valoris…),
- Registrations to events organized or co-organized by Valoris Avocats. Under no circumstances does Valoris Avocats purchase, rent or sell databases.
3. Who has access to your data? (Recipients of the data collected)
The personal data collected by Valoris Avocats is intended for and accessible only to authorized internal or external recipients whose intervention is strictly necessary for the proper conduct of the assignment. The internal recipients are the lawyers in charge of the case, the support team and any trainees. External recipients are service providers or subcontractors, the administration and judicial administration, court officers and professional bodies. Valoris Avocats ensures that external recipients comply with their obligations in terms of personal data protection. It is reminded that in addition to the obligations of confidentiality under the GDPR, lawyers are subject to professional secrecy under the Penal Code and the ethics of the legal profession.
4. How is your data stored? (Retention and Duration of Retention of Collected Data)
Valoris Avocats processes the personal data of its clients through a secure information system, managed by the French company Diapaz. Personal data is recorded and stored on an Internet storage space whose servers are located on French territory (Saint-Cloud). No transfer of personal data outside the European Union will be made without your prior written consent. The personal data on paper (current file and archives) are kept in our premises whose access is controlled by a systematic badge system. The personal data collected is kept for the duration of the mission entrusted to us, extended by the legal period of limitation of legal actions that may be initiated under the mission and those applicable to the archiving of data by lawyers. After this period, your data is destroyed or made irreversibly anonymous.
5. What are the security measures ?
Valoris Avocats has implemented appropriate organizational, technical and software security measures to protect your personal data from loss, unauthorized access, disclosure or alteration. Valoris Avocats trains its employees and collaborators in good data security practices through regular documentation. They are committed to doing their best to ensure the security and confidentiality of the data. They will inform the Data Protection Officer (DPO) and the IT department immediately in the event of a suspected breach of security or confidentiality.
6. What are your rights and how to exercise them ?
In accordance with the GDPR, the persons concerned by the processing of personal data implemented by Valoris Avocats acknowledge having been informed of their rights and thus benefit from :
- Right of access and rectification allowing them to modify, complete or update their personal data;
- Right to delete data that is inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or storage is prohibited;
- Right to object to the processing of data for legitimate reasons;
- Right to object, without any reason, to the use of the data for prospecting purposes;
- Right to define directives concerning the fate of personal data after death;
- Right to the portability of data in a structured, commonly used and machine-readable format;
- Right to limitation of processing, under the terms and conditions referred to in Article 18 of European Regulation No. 2016/679 of 27 April 2016;
- Right the right to lodge a complaint with the National Commission for Information Technology and Liberties (CNIL). These rights may be exercised by contacting the firm by e-mail at the address info@valoris-avocats.com or by mail to : Valoris Avocats, 14 avenue Pierre Mendès France, 67300 SCHILTIGHEIM-STRASBOURG Eurométropole.