Privacy policy

This privacy policy aims at describing how the law firm Oyat, located at 164 rue du Faubourg Saint-Honoré, 75008 Paris – France (hereinafter “we” or the “firm”), as data controller, collects and uses personal data.

 

What is the scope of this privacy policy?

 

The Oyat privacy policy applies to you if you are:

 

  • A user of this website, and/or;
  • A candidate for a position within our firm, and/or;
  • A representative of a current or a potential corporate client (employee, manager, agent, etc.), or, more rarely considering the client base of our firm, a current or potential client who is a natural person, and/or;
  • A natural person or representative (employee, manager, agent, etc.) of a legal person concerned by the cases we deal with, and/or;
  • A professional representative of a client, of an opposing party, of our firm (bailiff, notary, consultant, etc.), a judge, an expert, etc. or any other type of person involved in one of the cases we deal with, and/or;
  • A journalist, a representative of an administration, an authority or any other third party that establishes relations with our firm.

(hereinafter indistinctly referred to as “you”).

 

This privacy policy does not apply to the collect and use of personal data relating to the firm’s employees, which are subject to a separate notice.

 

To whom are your personal data disclosed?

 

The collected data are intended to be used by the authorized employee of our firm and are not intended to be shared with third parties, except in cases provided by laws and regulations (e.g. the right to communicate certain information to the administration or to the courts) or for the needs of the assignment entrusted to us by our clients (e.g. transmission of data that might concern you to our counterparts for the needs of carrying out a negotiation or managing a dispute).

 

In this context, you are informed that your data may be transferred outside the European Economic Area, potentially to any country in the world where such third parties are recipients of your data, if this is necessary for the purposes of our clients’ interests, including if the legislation of those countries is not considered to be sufficiently protective of your rights and freedoms by the European authorities.

 

Finally, we may make some of your data accessible to our service providers (processors within the meaning of the data protection regulations), for the strict needs and within the limits of their assignment (IT service providers, professionals engaged within the framework of the services we provide to clients such as experts, bailiffs, etc.).

 

 

How do we use your personal data?

 

We may collect your personal data on several occasions in the course of our business.

 

Your data will be used in a variety of ways, depending on the reason you contacted us, as described in the following table.

 

Purpose

Lawful basis for processing

Retention period

Follow-up and management of the cases entrusted to us

Performance of a contract between you and us

Our legitimate interest in performing a contract to which a third party is party

Implementation of pre-contractual measures taken at your request (request for information about our firm, request for a quote, etc.)

2 years after the end of our relationship

Management of our relations within the framework of the agreement which binds you or the person you represent to our firm (implementation and follow-up of our advisory and assistance services on behalf of our clients, management and follow-up of cases, management of our relations with our suppliers and service providers, management of human resources and our firm’s salaried and non-salaried employees, billing, management of unpaid invoices and collection, etc.)

Management of the recruitment process

Implementation of pre-contractual measures taken at your request

Until the end of the recruitment procedure

Include your application in our pool of candidates, which can be mobilized in the event of job offers that match your expectations

Our legitimate needs to manage and improve recruitment, unless you have any objections you would like to share with us at any time, by any means

2 years after the last contact

Continuous improvement of our knowledge and procedures (reuse of legal analyses and acts produced in the framework of a case for future cases)

Our legitimate interests (carry out our activities, improve our services, guarantee our security), unless you have any objections you would like to share with us at any time, by any means

10 years after the last contact

Provision of collaborative communication tools

3 years after the last contract

Improvement of client knowledge

Follow-up of the client relationship and development of client loyalty (in particular by getting to know better the persons with whom we are in contact, by sending messages regarding our news or legal news that we believe, may be interesting for you, by organizing, registering and inviting you to the firm’s events), in compliance with the conditions laid down by the ethical rules specific to lawyers

Responding to tenders from potential clients

Development of statistics

Creation and management of relevant contact

Management of the IT security of our premises and website

Management of litigation involving our  firm

Our legitimate interests in ensuring the defense of legal rights

For the duration of legal proceedings (until the expiry of appeals)

Compliance with legal, accounting and tax data retention obligations

Our legal obligations

During the required retention period

Managing your requests for rights to your personal data

6 months after the last contact

 

 

 

At the end of the retention periods specified in the table above, your data will, if necessary, be stored for a period that does not exceed the statutory limitation periods or applicable storage obligations or the duration of proceedings in the event of litigation. Once these periods have expired, the data will be destroyed.

 

What types of personal data do we collect?

 

In addition to the personal data we shall collect directly from you, we may, depending on your situation, collect certain personal data about you indirectly (for example, by the opposing party or by a representative of a legal person who is a client of the firm). In particular, we may collect the following categories of personal data:

  • Data relating to your identity and contact details, your communication preferences toward us;
  • Data relating to billing and payment;
  • Business information and, where applicable, certain sensitive data (i.e., in theory, information about your racial or ethnic origin, opinions, religious beliefs, trade union activities, physical or mental health, sex life and sexual orientation, or even genetic or biometric data) or data relating to offences, provided that it is necessary for the processing of our clients’ cases, including information provided as part of the contractual or client relationship between you or our firm, or information voluntarily provided by you or your organization;
  • Profile and usage data, including passwords for password-protected platforms or services to which our firm may have given you access;
  • Technical data, including information collected during your visits to our website, e.g. IP address, login data. Our website also uses cookies that are strictly necessary for its proper functioning and use (language preference and audience measurement cookies exempt from consent, in accordance with the doctrine of the CNIL). These cookies are not subject to your consent, and you cannot object to their use, unless you change the settings of your browser. However, you may be aware that such handling may prevent the website from functioning properly.

 

Where some of your data are necessary for us to perform a contract to which you or the person you represent is  party, or to comply with a regulatory obligation, we will specify this when data are collected.

 

What are your rights to your personal data and how can you exercise them?

 

You have the following rights in relation to our use of your personal data:

  • To obtain confirmation as to whether or not data relating to you are being processed and, if applicable, access to that data and information about such processing;
  • To obtain rectification of inaccurate data;
  • In certain specific cases, to obtain the erasing of some of your data;
  • In certain specific cases, to obtain the limitation of the processing that we carry out;
  • To object to the processing of your data for reasons relating to your particular situation or, irrespective of your particular situation, to the use of your data for marketing purposes;
  • To withdraw your consent at any time in the future, if it was the legal basis for processing your data;
  • To receive the data you have provided to us and/or ask us to transfer it to another controller, if the processing is based on your consent or on a contract and the processing is automated;
  • If you reside in France, to determine the fate of your data after your death.

 

To exercise your rights, please send your request to dpo@oyat.law. We invite you to attach to your request any document enabling you to prove your identity and the validity of your request.

 

We would also like to inform you that if you are a French consumer, you can register on the Bloctel list  to stand up against cold calling.

 

How to contact our Data Protection Officer?

 

For any further information or issues regarding the use of your data, you can contact our Data Protection Officer (DPO) at dpo@oyat.law.

 

In the event of unresolved issues in connection with the use of your personal data, you may refer the matter to the CNIL.