The purpose of this charter is to determine the rules relating to the collection and processing of data by Bouchara & Avocats.
The members of the firm undertake to respect this charter and to contribute to its proper application.
2. Commitment to confidentiality
As a law firm, Bouchara & Avocats collects and processes confidential and sensitive data.
The firm, its members and partners undertake to respect the confidentiality of such data in accordance with the ethical rules governing the legal profession.
The firm implements all necessary measures to preserve the confidentiality of such data.
Bouchara & Avocats ensures that its service providers, subcontractors and hosts undertake to respect the absolute confidentiality of the information provided to them.
3. Data collected & purposes
In the course of its activities, Bouchara & Avocats collects several types of data. This collection is systematically based on the consent of the person concerned or on a legal obligation.
It is restricted to data strictly necessary for the activity of Bouchara & Avocats.
3.1 Prospective clients’ data
Bouchara & Avocats collects the personal data of Internet users who wish to contact the firm via the online contact form. This data is necessary in order to respond to their contact request. The mandatory data are the surname, first name, e-mail address, postal address and telephone number of the person concerned.
3.2 Customer data
In addition to the data collected in the context of contacting the firm, clients of Bouchara & Avocats may entrust the firm with sensitive and confidential information. This information is collected and processed for the purpose of fulfilling the client’s requests or fulfilling legal obligations.
3.3 Data of employees and collaborators
Bouchara & Avocats collects and processes certain personal data of its employees and collaborators. This data is only collected for legal or archival purposes. The firm undertakes not to use this information for profiling purposes, nor to make decisions concerning its employees and associates on the basis of this information without expressly informing them.
The data produced by Bouchara & Avocats concerning its employees and collaborators, such as evaluation forms or possible sanctions, are kept for the purposes of good management of the firm. The persons concerned are informed of the existence of such documents and of their rights in relation to these documents.
4. Duration and place of storage of data
Data collected from contacts of Bouchara & Avocats are kept, unless otherwise required by law, for a maximum period of one year from the last contact.
Data collected from clients of Bouchara & Avocats is kept for the periods provided for by the rules governing the legal profession. Data for which there is no legal retention period is kept for a maximum of 5 years after the end of the relationship between Bouchara & Avocats and its client.
Data collected from employees and collaborators of Bouchara & Avocats are kept in accordance with the legal time limits. In the absence of a legal period, it is kept for a maximum of 5 years from the end of the employee’s or collaborator’s contract.
All data collected is stored on a dedicated secure server within the firm. Technical and organisational measures are put in place to ensure data security.
5. Data security
5.1 Internal measures at Bouchara & Avocats
In order to ensure the security of the data processed, Bouchara & Avocats regularly undergoes security audits including intrusion tests on the firm’s computer system.
The firm trains its employees and associates in good data security practices by sending them regular documentation.
Bouchara & Avocats’ employees and collaborators undertake to do their utmost to guarantee the security and confidentiality of data. They shall inform the IT and freedom correspondent or the data protection officer, as well as the IT department, without delay in the event of a suspected breach of security or confidentiality of data.
5.2 Measures relating to partners, subcontractors and hosts
The Firm chooses its partners, subcontractors and hosting providers on the basis of their ability to guarantee the security of the data entrusted to them. The Firm regularly checks that its partners, subcontractors and hosts are capable of ensuring such security.
The Firm’s partners, subcontractors and hosts undertake to inform the Firm in the event of any breach of security or confidentiality of the data entrusted to them.
6. Exercise of the rights of the persons concerned
Bouchara & Avocats takes all appropriate measures to facilitate the exercise of your rights with regard to your personal data (right of access, rectification, deletion, limitation of processing, portability, to define the fate of your data after your death).
The information provided in the context of the exercise of your rights is provided in writing or electronically. If you so request, the information may be provided orally.
6.1. Where can I exercise my rights?
If you wish to exercise your rights regarding your data, we invite you to contact the Data Protection Officer:
17 Rue du Colisée
Mail : email@example.com
The latter will help you in your dealings with the data controller and will be your permanent point of contact within Bouchara & Avocats.
6.2. What are the conditions for exercising my rights?
In order to exercise your rights, you will be asked to provide proof of your identity. In case of reasonable doubt as to your identity, you may be asked for additional information necessary to confirm your identity.
No payment is required to exercise your rights.
Where your requests are manifestly unfounded or excessive, Bouchara & Avocats reserves the right to refuse to comply with your requests within one month.
In the event of refusal, we will inform you without delay of the reasons and of the possibility of lodging a complaint with the Commission Nationale Informatique et Libertés (French Data Protection Authority) and of taking legal action.
6.3. How long will it take for me to exercise my rights?
Bouchara & Avocats will respond to your requests to exercise your rights regarding your data as soon as possible and in any event within one month of receiving your request and verifying your identity.
This period may be extended to two months in the event of complex or multiple requests, provided that you are informed in advance.
7. Person responsible for data processing
Bouchara & Avocats is responsible for the processing of data:
Maître Bouchara Vanessa
17 Rue du Colisée 75008 PARIS
This person is responsible for the proper application of the legal provisions relating to data processing, compliance with this charter and the effectiveness of the rights of the persons concerned by the processing of their data. The contact details of the data controller are indicated on the Firm’s website and are notified to the Firm’s employees and collaborators.