As a law firm, we pay particular attention to the protection of your personal data. As such, we are committed to preserving your confidentiality, in line with the requirements of our regulated profession.
With this aim, we have put in place measures to ensure an appropriate level of protection for your data, in particular by respecting the principles of "privacy by design" and "privacy by default".
The purpose of this privacy policy is to explain how we use your data and to inform you of your data protection rights.
The “data controller”, or person responsible for processing your personal data is Altij, a Société d'Exercice Libéral par Actions Simplifiée (SELAS) registered in France, with a capital of €357,800, registered under the number 442 744 850 at the Toulouse trade and companies register, whose registered office is located at 40, rue du Japon in TOULOUSE (31400) (referred to in the present policy as "Altij", "we" or “us”) You can contact us via our contact form or by e-mail to contact@altij.com.
Altij has appointed an internal Data Protection Officer (DPO), who can be contacted at the following e-mail address for any questions relating to the processing of personal data: dpo@altij.com.
We may process the personal data of any individual with whom we come into contact in the course of our professional activity, including our clients and, where applicable, members of their staff, the various parties and actors who are involved in or who intervene in the cases we handle (witnesses, experts, lawyers, opposing party(ies), etc.), our suppliers and members of their staff, our professional advisers and members of their staff, or visitors to our website.
The personal data concerning you that we may potentially process will depend on the precise context of our professional relations. Thus, it may include your name, your contact details (e-mail address, postal address, telephone number, etc.), any information useful for the proper management of your legal or judicial matter, any information about you contained in the various documents and correspondence related to the matters we handle, and more generally all information qualified as personal data, provided or otherwise generated in the context of our interactions.
Depending on the nature of the matters entrusted to us, we may process sensitive data, including data that may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.
This may be the case in matters of discrimination or union representation (in particular in social and labour law), medical liability or criminal law.
We may also process data relating to criminal convictions and offences or related security measures.
In general, we try to limit the personal data we process to the minimum necessary to provide you with a complete and efficient service. Altij favours an approach of proportionality and minimisation of data processed. We ensure that the data we collect and process is adequate, relevant and limited to what is necessary for the purposes of the processing in question.
At the time of collection of personal data, you will be informed whether certain data are optional or whether they are required to be provided for legal, regulatory or contractual reasons. In such circumstances, we will notify you if your decision not to provide the requested data would affect our ability to provide the services offered.
The table below sets out the main personal data processing activities that we carry out. Where appropriate, we will provide additional information to data subjects about a particular processing activity.
Activity | Purpose | Legal basis |
|---|---|---|
Review and processing of your requests for information:
We analyse, sort and classify your information when we first become aware of your interest in our services. | Managing the contact requests we receive. | The consent of the person who contacted us, via our online contact form. |
Managing our client files: Within the framework of our services, we are required to process the personal data of our clients and, where applicable, of their staff members. | Operational and administrative management of our clients' files. | Our legitimate interest in handling our files. Altij has professional obligations of care and diligence. Consequently, the processing required in the context of the management of our files falls within the firm's legitimate interest, insofar as it is necessary in order to fulfil and track our compliance with these obligations. In the event that we sign an engagement letter with a client who is an individual, the need to process his or her personal data for the performance of our obligations arising from the engagement letter. |
Newsletter and legal updates:
We keep our existing clients, and anyone who subscribes to our newsletter, updated about legal news that may be of interest to them, as well as with news about the firm. | Promoting our firm and providing legal information to our clients and other interested parties. | Our legitimate interest in communicating with existing and prospective customers in connection with their business activities. Consent of individual non-clients. |
Management of our suppliers and professional advice: We may process the personal data of natural persons who provide services to us, as well as those of the staff members of our suppliers when they are legal entities. The processing in question includes in particular the administrative activities necessary for the management of our relations with our suppliers, in particular the sending of correspondence, the storage, analysis, filing, duplication, archiving or transmission of the data in question. | The proper functioning of the firm and the correct management of its relations with its suppliers. | Our legitimate interest in managing our relationship with our various suppliers. Consent of non-clients. |
Training courses, conferences and events: When we carry out training sessions or organise conferences or other events, we process the personal data of the people who participate or are invited to them, in particular by sending invitations or materials, and more generally by ensuring the follow-up of the people participating. | The organization of our trainings and other events. | Our legitimate interest in managing the training courses, seminars and other events that we organise.
Le consentement des personnes non clientes. |
Applicant management: We process data from people who have applied for a job with our law firm. |
Application management. | Our legitimate interest in processing the applications we receive. |
Business sales and acquisitions: In the event of future sales, restructuring or investment transactions involving Altij, information about you may (where strictly necessary) be processed in the context of due diligence procedures, during which potential investors or acquirers or their professional advisors conduct a preliminary analysis of various aspects of the firm in order to assess its value. | Evaluation of the firm by potential investors or buyers. | Our legitimate interest, as well as that of our partners or third party investors in conducting due diligence procedures. |
Cookies : When you use our website, it automatically collects certain information from your device to optimize your web experience. This data is also used for our website statistics. Further information on automated data collection and cookies is available in our cookie policy | Optimization of our website. | The consent of the persons browsing our site, if any. Altij's legitimate interest in the cookies strictly necessary for the operation of the site. |
Legal and regulatory obligations / Legal defence: We may process your personal data in order to comply with legal and regulatory obligations incumbent upon us or with requests from public and/or judicial institutions and authorities. We may also process data in order to defend our legal rights. |
To comply with our legal and regulatory obligations.
| Legal and regulatory obligation. Altij's legitimate interest in defending itself in court. |
In order to ensure the efficient processing and security of your personal data, we may communicate them to our suppliers and professional advisers, for example in the field of accounting, IT maintenance, hosting, archiving and management of our websites.
In the context of handling client matters, we may be required to communicate the personal data of the persons concerned by the case in question to the other parties involved, and in particular to lawyers, opposing parties, bailiffs, notaries, experts, courts (including court registries), public authorities (including any tax administration department, DIRECCTE, DDPP, mortgage department, land registry, etc.), independent administrative authorities (INPI, EUIPO, CADA, URSSAF, CNIL, WIPO, etc.), file managers and various service providers such as legal notices, BODACC, etc.
Outside this framework, Altij undertakes not to transmit and/or disclose your personal data to third parties. Nevertheless, Altij may disclose your personal data in very specific circumstances, as listed below:
We keep your personal data for the period necessary to provide our services to you while respecting our legal and professional obligations, taking into account the nature and purpose of personal data processing, applicable limitation periods and the recommendations of the French data protection regulator, the Commission Nationale de l'Informatique et des Libertés (CNIL). In practice this may mean, in particular, that:
Your rights in relation to our processing of your personal data include, but are not limited to, those set out below. These rights may apply to your situation depending on the circumstances. For example, the right to withdraw your consent will not apply where processing is not based on your consent.
These rights are as follows:
If you wish to exercise your rights, please contact our DPO using the following details:
In the event of manifestly unfounded or excessive requests, particularly because of their repetitive nature, ALTIJ reserves the right to either:
The burden of proof is on Altij to show that the claim is manifestly unfounded or excessive.
You also have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), whose website can be consulted at the following address: www.cnil.fr
Our IT system is hosted on servers in France.
We also use backup services to ensure the ongoing resilience of our systems and restore the availability of the data we process in the event of a cyberincident. In this context, we use an encrypted archive repository located in Germany.
We use applications from the Microsoft Office 365 suite, in particular Word, Excel, and Teams. Microsoft states in its Data Protection Addendum for Microsoft Services and Products that for services provided from infrastructure within the EU, Microsoft will store and process its customers’ data within the European Union. However, to provide its services and products, Microsoft may transfer certain data to third countries, including the United States. This may result in some limited access to personal data in those locations. Under the terms of the Microsoft DPA, transfers of personal data in this context are governed by the signing of the European Commission’s standard contractual clauses. Microsoft is also certified as compliant with the EU-U.S. Data Privacy Framework.