Archives and Personal Data
In accordance with the requirements of Article 13 of the General Data Protection Regulation (“GPDR”), the Client is informed that the Firm may process personal dataon the basis of the personal information provided by the Client in the course within the frame of the performance of the services.The Firm filed a declaration with the CNIL (French Data Protection Authority) in connection with the processing of these data.The Firm takes appropriate measures to ensure the protection and confidentiality of the personal information it holds or processes in compliance with the provisions of French data protection laws and the GDPR. The data controller is the Firm.
Data collecting and origin :
All data concerning the Client is collected directly from the Client.
The Firm undertakes to obtain the Client’s consent and/or to allow him/her to object to the use of his/her data for certain purposes, as soon as this is necessary.
Purpose of the data collection :
1. Need for collection
The collection of the Client’s personal data is necessary for the performance of the assignments entrusted to the Firm.
2. Purpose
The legal basis for the collection of personal data is:
-compliancewith the regulatory and legal obligations with which the Firm must comply in the course of its activities;
-the performance of the assignments entrusted by the Client to the Firm.
The mandatory or optional nature of the personal data requested and the possible consequences of a failure to reply are specified at the time of their collection(s)
No transfer of personnal data:
The Client’s personal data will not be transferred to commercial or advertising third-parties.
The Firm could usethe services provided by several specialized providers (translators, formalists, third party experts, etc.), a list of which may be provided to the persons concerned upon request sent to nael@raadlegal.com.
If these providers use servers located outside the European Union, the Firm undertakes to conclude specific contracts and standard contractual clauses established by the European Commission in order to supervise and secure the transfer of data
Data retention period :
The Firm keeps the data only for the time necessary for the intended purpose, in accordance with legal provisions and for the duration of the applicable limitation period
Rights of the persons concerned:
The Firm keeps the data only for the time necessary for the intended purpose, in accordance with legal provisions and for the duration of the applicable limitation period.
Whenever the Firm processes personal data, it takes all reasonable measures to ensure that the personal data are accurate and relevant to the purpose for which they are processed.
In accordance with the European regulations in force, the Client has the following rights:
– right of access (Article 15 GDPR) and rectification (Article 16 GDPR), updating, data completeness
– right to block or erase personal data (Article 17 of the GDPR), when they are inaccurate, incomplete, ambiguous, out of date, or when their collection, use, communication or storage is prohibited
– right to withdraw consent at any time (Article 13(2)(c) GDPR)
– right to limit data processing (Article 18 GDPR)
– right to object to the processing of data (Article 21 GDPR)
– the right to the portability of the data provided, when such data are processed automatically on the basis of consent or a contract (Article 20 GDPR)
– the right to define the fate of the data after his/her death and to choose to whom the Firm should communicate (or not) his/her data to a previously designated third party.
As soon as the Firm becomes aware of the death of a client, and in the absence of instructions from it, it undertakes to destroy its data, unless their storage is necessary for evidentiary purposes or to meet a legal obligation.
If the Client wishes to know how the Firm uses his/her personal data, wishes to correct them or objects to their processing, he/she can contact: nael@raadlegal.com
In this case, the Client must indicate the personal data that he/she would like the Firm to correct, update or delete, by accurately identifying himself/herself with a copy of an identity document (identity card or passport). Requests for the deletion of personal data will be subject to the obligations imposed on the Firm by law, in particular with regard to the conservation or archiving of documents. Finally, theFirm’s clients can file a complaint with the Data Protection Authorities, and in particular with the CNIL (https://www.cnil.fr/fr/plaintes).
Security :
The Firm implements all technical and organisational measures to ensure the security of the processing of personal data and their confidentiality.
In this respect, the Firm takes all necessary precautions, with regard to the nature of the data and the risks associated to data processing, to preserve the security of the data and, in particular, to prevent them from being distorted, damaged or accessed by unauthorised third parties (physical protection of premises, alarms and access codes, authentication procedures with personal and secure access via confidential identifiers and passwords).