Privacy policy


1. Our commitments

As a law firm, we pay particular attention to the protection of your personal data. As such, we are committed to preserving your confidentiality, in line with the requirements of our regulated profession.

With this aim, we have put in place measures to ensure an appropriate level of protection for your data, in particular by respecting the principles of "privacy by design" and "privacy by default".

The purpose of this privacy policy is to explain how we use your data and to inform you of your data protection rights.


2. Our identity and contact details

The “data controller”, or person responsible for processing your personal data is Altij, a Société d'Exercice Libéral par Actions Simplifiée (SELAS) registered in France, with a capital of €357,800, registered under the number 442 744 850 at the Toulouse trade and companies register, whose registered office is located at 40, rue du Japon in TOULOUSE (31400) (referred to in the present policy as "Altij", "we" or “us”) You can contact us via our contact form or by e-mail to


Altij has appointed an internal Data Protection Officer (DPO), who can be contacted at the following e-mail address for any questions relating to the processing of personal data:


3. What personal data do we process?

We may process the personal data of any individual with whom we come into contact in the course of our professional activity, including our clients and, where applicable, members of their staff, the various parties and actors who are involved in or who intervene in the cases we handle (witnesses, experts, lawyers, opposing party(ies), etc.), our suppliers and members of their staff, our professional advisers and members of their staff, or visitors to our website.

The personal data concerning you that we may potentially process will depend on the precise context of our professional relations. Thus, it may include your name, your contact details (e-mail address, postal address, telephone number, etc.), any information useful for the proper management of your legal or judicial matter, any information about you contained in the various documents and correspondence related to the matters we handle, and more generally all information qualified as personal data, provided or otherwise generated in the context of our interactions.

Depending on the nature of the matters entrusted to us, we may process sensitive data, including data that may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.

This may be the case in matters of discrimination or union representation (in particular in social and labour law), medical liability or criminal law.

We may also process data relating to criminal convictions and offences or related security measures.

In general, we try to limit the personal data we process to the minimum necessary to provide you with a complete and efficient service. Altij favours an approach of proportionality and minimisation of data processed. We ensure that the data we collect and process is adequate, relevant and limited to what is necessary for the purposes of the processing in question.

At the time of collection of personal data, you will be informed whether certain data are optional or whether they are required to be provided for legal, regulatory or contractual reasons. In such circumstances, we will notify you if your decision not to provide the requested data would affect our ability to provide the services offered.


4. How and why do we use your personal data?

The table below sets out the main personal data processing activities that we carry out. Where appropriate, we will provide additional information to data subjects about a particular processing activity.




Legal basis

Review and processing of your requests for information:


We analyse, sort and classify your information when we first become aware of your interest in our services.

We may then contact you to deal with your enquiries, using the contact details you have given us.

Managing the contact requests we receive.

The consent of the person who contacted us, via our online contact form.

Our legitimate interest in responding to requests we receive.

Managing our client files:

Within the framework of our services, we are required to process the personal data of our clients and, where applicable, of their staff members.

In addition, this activity requires the processing of personal data of other individuals who are involved in the case (witnesses, experts, lawyers, opposing parties, etc.). The processing activities in question may include any processing of information required for the management of the case, such as reading, storing, analysing, filing, duplicating, archiving or transmitting the data in question.

Operational and administrative management of our clients' files.

Our legitimate interest in handling our files. Altij has professional obligations of care and diligence. Consequently, the processing required in the context of the management of our files falls within the firm's legitimate interest, insofar as it is necessary in order to fulfil and track our compliance with these obligations.

In the event that we sign an engagement letter with a client who is an individual, the need to process his or her personal data for the performance of our obligations arising from the engagement letter.

Where the processing concerns sensitive data, it is justified by its necessity for the establishment, exercise or defence of legal claims for the benefit of the data subject.

When we process data relating to offences, the processing is carried out in our capacity as an auxiliary of justice, under the terms of Article 3 of Law No. 71-1130 of 31 December 1971 on the reform of certain judicial and legal professions.

Newsletter and legal updates:


We keep our existing clients, and anyone who subscribes to our newsletter, updated about legal news that may be of interest to them, as well as with news about the firm.

Promoting our firm and providing legal information to our clients and other interested parties.

Our legitimate interest in communicating with existing and prospective customers in connection with their business activities.

Consent of individual non-clients.

Management of our suppliers and professional advice:

We may process the personal data of natural persons who provide services to us, as well as those of the staff members of our suppliers when they are legal entities. The processing in question includes in particular the administrative activities necessary for the management of our relations with our suppliers, in particular the sending of correspondence, the storage, analysis, filing, duplication, archiving or transmission of the data in question.

The proper functioning of the firm and the correct management of its relations with its suppliers.

Our legitimate interest in managing our relationship with our various suppliers.

Where the supplier in question is a natural person, the necessity of the processing for the performance of the contract signed with that person.

Consent of non-clients.

Training courses, conferences and events:

When we carry out training sessions or organise conferences or other events, we process the personal data of the people who participate or are invited to them, in particular by sending invitations or materials, and more generally by ensuring the follow-up of the people participating.

The organization of our trainings and other events.

Our legitimate interest in managing the training courses, seminars and other events that we organise.


Le consentement des personnes non clientes.

Applicant management:

We process data from people who have applied for a job with our law firm.


Application management.

Our legitimate interest in processing the applications we receive.

Business sales and acquisitions:

In the event of future sales, restructuring or investment transactions involving Altij, information about you may (where strictly necessary) be processed in the context of due diligence procedures, during which potential investors or acquirers or their professional advisors conduct a preliminary analysis of various aspects of the firm in order to assess its value.

Evaluation of the firm by potential investors or buyers.

Our legitimate interest, as well as that of our partners or third party investors in conducting due diligence procedures.

Cookies :

When you use our website, it automatically collects certain information from your device to optimize your web experience. This data is also used for our website statistics. Further information on automated data collection and cookies is available in our cookie policy

Optimization of our website.

The consent of the persons browsing our site, if any.

Altij's legitimate interest in the cookies strictly necessary for the operation of the site.

Legal and regulatory obligations / Legal defence:

We may process your personal data in order to comply with legal and regulatory obligations incumbent upon us or with requests from public and/or judicial institutions and authorities. We may also process data in order to defend our legal rights.



To comply with our legal and regulatory obligations.

To defend ourselves in court.


Legal and regulatory obligation.

Altij's legitimate interest in defending itself in court.



5. With whom do we share your personal data?

In order to ensure the efficient processing and security of your personal data, we may communicate them to our suppliers and professional advisers, for example in the field of accounting, IT maintenance, hosting, archiving and management of our websites.

In the context of handling client matters, we may be required to communicate the personal data of the persons concerned by the case in question to the other parties involved, and in particular to lawyers, opposing parties, bailiffs, notaries, experts, courts (including court registries), public authorities (including any tax administration department, DIRECCTE, DDPP, mortgage department, land registry, etc.), independent administrative authorities (INPI, EUIPO, CADA, URSSAF, CNIL, WIPO, etc.), file managers and various service providers such as legal notices, BODACC, etc.

Outside this framework, Altij undertakes not to transmit and/or disclose your personal data to third parties. Nevertheless, Altij may disclose your personal data in very specific circumstances, as listed below:

  • as a result of the law, in the context of legal proceedings, litigation and/or a request from public authorities;
  • if such disclosure is necessary for national security, law enforcement or other public interest purposes;
  • if such disclosure is reasonably necessary to enforce compliance with applicable laws and regulations or to protect Altij's business and customers;
  • in case of restructuring or transfer of the Altij.


6. How long do we keep your personal data?

We keep your personal data only for as long as is necessary to provide the services you have subscribed to, taking into account the following criteria in particular:

  • The nature and purpose of the processing operations in question,
  • The categories of data processed,
  • The applicable limitation periods,
  • The applicable contractual provisions,
  • Industry standards,
  • The recommendations of the Commission Nationale de l'Informatique et des Libertés (CNIL).


7. What are your rights with regard to your personal data?

Your rights in relation to our processing of your personal data include, but are not limited to, those set out below. These rights may apply to your situation depending on the exact circumstances. For example, the right to withdraw your consent will not apply where processing is not based on your consent.

These rights are as follows:

  • The right to ask us:
    • access to your personal data and information about our processing of it ("right of access");
    • to correct or complete your personal data if they are inaccurate ("right of rectification");
    • the deletion of your personal data ("right to be forgotten");
    • a restriction on the processing of your personal data ("right to restriction");
  • The right to object to the processing of your personal data by Altij ("right to object");
  • The right to request your personal data in a usable electronic format and/or the transmission of this data to another organization ("right to data portability");
  • The right to set out instructions for the retention, erasure and disclosure of your personal data after your death ("post-death instructions");
  • The right to withdraw your consent to the processing of your data insofar as the processing is based on it. In this case, the lawfulness of the processing carried out before the withdrawal of consent will not be called into question.

If you wish to exercise the rights mentioned above, please send us a letter to the following postal address Cabinet ALTIJ, 40 rue du Japon, CS 94133, 31030 TOULOUSE Cedex 4, or to the email address: contact(at)

In the event of manifestly unfounded or excessive requests, particularly because of their repetitive nature, ALTIJ reserves the right to either:

  • to charge a reasonable fee that reflects the administrative costs incurred in providing the information, making the disclosure or taking the action requested;
  • to refuse to act on these requests.

The burden of proof is on Altij to show that the claim is manifestly unfounded or excessive.

In case of reasonable doubt as to the identity of the applicant, Altij also reserves the right to request any additional information necessary to confirm the identity of the person concerned. Any additional document submission will then be done via the secure Cloud set up by Altij, via the following link, allowing the submission of files: Cloud Altij.

You also have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), whose website can be consulted at the following address:


8. Where is your personal data processed?

Our information system is hosted on internal servers in France.

We also use a complementary backup system to ensure the ongoing resilience of our systems and to restore the availability of the data we process in the event of an incident. In this context, we use an encrypted archive repository located in the United States.

Transfers of personal data to this custodian are governed by the signature of the European Commission's standard contractual clauses, combined with additional security measures, namely the encryption of the data before transferring them to the recipient located in the United States, which does not have access to the security key.


9. Security of your information

We take care to ensure the security of your personal data by implementing enhanced technical, legal and organizational measures.

For information on the cookies used by our website, please click on the Cookie Policy link, also found at the bottom of the website.