European and national regulations (including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on data protection, the "General Data Protection Regulation - GDPR" and the French provisions of Law No. 78-17 of 6 January 1978 as amended) require each natural or legal person who processes your personal data to inform you of the processing it carries out.
Therefore, Chammas & Marcheteau informs you, in its capacity as data controller, of the methods by which we process your personal data as well as your rights relating thereto.
Who is responsible for the processing of your Personal Data?
The controller responsible for the processing of your personal data, ensuring their security and confidentiality, is:
Chammas & Marcheteau
453 629 339 RCS Paris
5, villa Ballu – 75009 Paris
Tel.: +33 (0)1 53 42 42 50
What types of personal data are processed by Chammas & Marcheteau?
- Data to get to know you better: surname, first name, date and place of birth, resumé, cover letter,
- Data to better contact you: postal addresses, email addresses, telephone numbers,
- Data to better assist you: any other type of data collected for the purpose of our assistance as a law firm,
(together, « Personal Data »).
How does Chammas & Marcheteau collect your Personal Data?
Chammas & Marcheteau is likely to collect your Personal Data in several situations and in particular in the following ones: if you are a client or prospect of the firm, you have subscribed to our newsletter, you have completed the contact form on our site, you have sent us your application or, more generally, you have sent your details to one of our lawyers or your details have been communicated, by a third party, to one of our lawyers in the context of your/their professional life.
On what legal grounds and for what purposes does Chammas & Marcheteau process your Personal Data?
Performance of the contract
Chammas & Marcheteau's legitimate interest in developing its activity, accomplishing its missions, sending you relevant information and ensuring the follow-up of recruitments.
Compliance with respect to our legal obligations
Who are the recipients of your Personal Data?
Within this framework, the following categories of recipients may have access to your Personal Data:
- Our firm’s staff: our lawyers, employees and interns.
- Our firm’s subcontractors: our service providers (IT, outsourced switchboard, file sharing), our accountant, our debt collection service providers.
- Our legal and judicial partners: our fellow lawyers, formalists, patent attorneys, notaries, legal experts, bailiffs, court officers, etc.
Rest assured, your Personal Data:
- is never transferred outside of the EU,
- will only be communicated to the recipients who need to have access to it in order to carry out their missions and will never be used for profit-making purposes.
For how long does Chammas & Marcheteau retain your Personal Data?
We keep your Personal Data for a time that is strictly necessary to fulfil the above-mentioned purposes:
- With respect to the use of your Personal Data for prospection purposes: for three (3) years from the end of our mission or from our last contact with you;
- With respect to the use of your Personal Data for recruitment management purposes: for two (2) years from the last contact with you;
- For the purpose of complying with our legal and regulatory obligations and establishing proof of a right or contract: for five (5) years from the end of our assignment.
What are the security measures implemented by Chammas & Marcheteau?
We implement technical and organisational measures to protect your Personal Data and we request from the recipients of your Personal Data to do the same. These measures guarantee the security, integrity and confidentiality of your Personal Data and include the following:
- limited and secure access to your Personal Data, strictly reserved to staff and service providers who need to know it. These recipients are subject to strict obligations of confidentiality and may be subject to disciplinary action, if necessary, in case of breach;
- secured hosting centres hosting your Personal Data;
- strict security instructions communicated to recipients having access to Personal Data;
- regular audits of data collection, storage and processing.
What are your rights and how to exercise them?
- access: you have the right to access all the Personal Data we keep about you.
- rectify: in the event that the Personal Data concerning you is incomplete or erroneous, you may ask us to rectify/complete it, which we will do as soon as possible.
- limit: in specific cases listed within article 18 of the GDPR, you may ask us to limit the processing of your Personal Data.
- transfer: you benefit from the right of portability of your Personal Data. In other words, you may require their transfer to the recipient of your choice.
- erase: you may request from our firm to erase your Personal Data, specifically in the absence of object, basis or purpose of processing ("right to be forgotten").
- file a complaint: you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at any time.
- object: if you no longer wish to receive our newsletters, you can request this, particularly by clicking “unsubscribe” included at the bottom of each of our emails. We will then stop the processing of your Personal Data for this particular purpose.
- define instructions after your death: you can communicate your instructions, revocable at any time, regarding the conservation, erasure, communication of your Personal Data after your death by designating a person in charge of their execution:
- for general instructions, you may address them to a trusted digital third party certified by the CNIL;
- for specific directives, you may address them directly to the firm.
You may exercise all or part of the aforementioned rights or benefit from additional information regarding the treatments carried out by the firm by sending us a simple request by mail to Chammas & Marcheteau, 5, villa Ballu - 75009 Paris or by e-mail to email@example.com, including a copy of a signed proof of your identity.