Personal data protection policy
The Donoé firm attaches the utmost importance to the confidentiality of your exchanges and to the security of your personal information, in accordance with the GDPR.
Preamble
In the course of its activity as a firm, Donoé processes personal data concerning you. The purpose of this policy is to inform you transparently about how your data is collected, used and protected.
It is drawn up in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. It does not constitute a request for your consent: each processing operation rests on the legal basis set out below.
Data controller
The controller for the processing described in this policy is:
- Donoé, Cassandre Nogues (EI)
- Lawyer registered with the Hauts-de-Seine Bar, practising as a sole trader (entreprise individuelle).
- Address
- 61 rue de Villiers, 92200 Neuilly-sur-Seine, France
- cassandre.nogues@donoe.fr
- SIRET
- 898 947 015 00027
Nature of the data collected
Identification data
Surname, first name, e-mail address, telephone number, postal address and identity documents required to open your file.
Professional data
Information relating to your wealth, tax and professional situation in connection with the legal advisory engagements.
Dispute-related data
Any sensitive information strictly necessary to the defence of your interests or the performance of an advisory engagement, processed under the seal of professional secrecy.
Purposes & legal basis
Contact enquiry
The information sent through the contact form is processed to answer your enquiry and, where applicable, to prepare the engagement. It is not used for any marketing purpose.
Lawyer’s engagement
The processing of your data is necessary to manage the client relationship, to provide advisory or defence services and to bill the fees.
Regulatory compliance
We process your data to meet our legal obligations, in particular as regards the fight against money laundering and the financing of terrorism (AML-CFT).
Recipients & processors
Your data is neither sold, rented nor transferred to third parties for commercial purposes. It is accessible to the firm and, to the extent necessary for their assignment, to the following technical providers, acting as processors within the meaning of article 28 of the GDPR:
- Site hosting
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States: hosting and delivery of the site’s pages, protection against attacks.
- Contact form
- Web3Forms: forwarding to the firm’s mailbox of the messages sent from the form.
- Mail & office tools
- The firm’s professional e-mail and document storage provider, for exchanges and for keeping files.
- Backup
- The firm’s data backup solution, intended to prevent any loss of information.
- Appointments
- Google Ireland Limited (Google Calendar): online booking of appointments from the “Book a meeting” page, which collects your name and e-mail address. Appointments may also be arranged by e-mail or telephone.
Where applicable, your data may also be communicated to the legal professionals, courts and public authorities involved in your file, as well as to the authorities to which the firm is legally required to disclose information.
Transfers outside the European Union
The site’s host, Cloudflare, Inc., is a company established in the United States and operates a network of servers spread across several countries. Browsing the site may therefore involve a transfer of data (IP address, connection data) outside the European Union.
These transfers are governed by the safeguards provided for in Chapter V of the GDPR: the European Commission’s standard contractual clauses and, where applicable, the provider’s certification under the EU–US Data Privacy Framework.
This site is a presentation site: client files, exhibits and correspondence are not hosted on it and are not subject to such transfers.
Data retention
Your data is kept for the period necessary for the purposes set out above:
- Client files
- 5 years from the end of the file
- Accounting
- 10 years (legal obligation)
- Cookies
- 13 months maximum
Security & confidentiality
The site is hosted by Cloudflare, Inc., whose servers are located in several countries, including outside the European Union (see “Transfers outside the European Union”). Exchanges with the site are encrypted (HTTPS).
We put in place rigorous technical and organisational measures to protect your data against any loss, unauthorised access, disclosure or alteration.
As a lawyer, Cassandre Nogues is bound by professional secrecy, which covers the information entrusted by her clients. That secrecy applies under the conditions and subject to the exceptions laid down by law, in particular the due-diligence and reporting obligations relating to the fight against money laundering and the financing of terrorism (AML-CFT) referred to above.
Your rights
Access & portability
You may request a copy of your personal data and transfer it to a third party.
Rectification
The right to correct any inaccurate or incomplete information about you.
Erasure
The right to be forgotten, subject to the statutory retention periods imposed by the profession.
Objection
The ability to object to processing on legitimate grounds or to withdraw your consent.
Restriction
Request the temporary suspension of the processing of your data.
Complaint
The right to lodge a complaint with the CNIL if you believe your rights have been infringed.
Exercising your rights
These rights may be exercised by e-mail at contact@donoe.fr, or by post to the firm’s address given above. A reply will be provided within one month. Proof of identity may be requested where there is reasonable doubt as to the identity of the person making the request.
No data protection officer (DPO) has been appointed, as this is not mandatory given the firm’s activity: requests are handled directly by Cassandre Nogues.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07: cnil.fr. For any other question, you may use our contact form.