Privacy policy

Customers, partners, prospects and recruitment candidates

Paris

In the course of its activities, UGGC Avocats (” UGGC Avocats ” or ” We “) collects and processes the personal data of its clients, partners, prospects and recruitment candidates (the ” Data Subjects “). UGGC Avocats attaches the utmost importance to the protection of the personal data of the Data Subjects and therefore respects a high level of security of the personal data processed, in compliance with the applicable regulations on the protection of personal data and in accordance with the ethical obligations of the legal profession.

The purpose of this personal data protection policy (hereinafter referred to as the ” Policy “) is to set out the terms and conditions for processing the personal data of Data Subjects.

The Policy is applicable as of May 25, 2018.

UGGC Avocats reserves the right to modify the Policy at any time. If the Policy is modified, UGGC Avocats undertakes to publish the new version on its website(https://www.uggc.com/), indicating the last update date. Concerned Persons should therefore check the website regularly to remain informed of any changes or updates to the Policy.

1. Data controller

UGGC Avocats (Paris) is responsible for processing the personal data it collects and processes.

UGGC Avocats is a société civile professionnelle d’avocats with its registered office at 47, rue de Monceau, Paris 8ème, registered on April 22, 1988 under number 344 646 237 with a share capital of €2,035,810 – tel.: 01.56.69.70.00; email: paris@uggc.com.

You can contact UGGC Avocats at the following address:

The data controller is the person, in this case UGGC Avocats, who determines the terms and purposes of the processing of personal data. As the name implies, the data controller is responsible for the processing of personal data and is the main contact for Data Subjects to assert their rights in relation to the processing.

2. Personal data collected

UGGC Avocats may collect and process personal data in the course of providing its services, when you contact or request information from UGGC Avocats. Most of the personal data we collect is provided to us voluntarily by Data Subjects or authorized third parties. This personal data concerns :

  • contact details (surname, first name, email address, profession, etc.),
  • information concerning professional status (name of employer, position, etc.) and, for candidates for recruitment, their qualifications (curriculum vitae, etc.),
  • financial information, particularly for payment purposes,
  • sensitive data, such as data relating to health or criminal convictions,

and more generally any personal data transmitted to us in the context of the implementation of our services.

When we ask Data Subjects to provide personal data, we will indicate whether or not this information is mandatory and, if so, the possible consequences of not providing this data.

The information required when applying for a position on the UGGC Avocats website is mandatory.

UGGC Avocats makes every effort to keep personal data accurate and complete. To ensure that we have the most up-to-date information, you can notify us of any changes to your contact details or any other data by contacting UGGC Avocats at the above address (§.1.-).

3. Purpose of personal data processed

We process the data required for the following purposes:

  1. To manage day-to-day customer relations and implement our services :
  • Customer case management (customer contacts, case studies, assistance, advocacy and advice, negotiations, etc.),
  • Invoicing, accounts receivable management, outstanding payments and litigation,
  • Management of recruitment applications (administrative management of the application, assessment of the candidate’s suitability for the job, candidate contact, etc.).
  • Manage registrations for UGGC Avocats events and training courses.

UGGC Avocats processes sensitive data and data relating to criminal convictions and offences for the purposes of assisting, advising and representing clients. In accordance with the applicable regulations, such processing is necessary for the exercise and defense of clients’ rights and for the strict requirements of the missions entrusted to UGGC Avocats.

  1. For the promotion of our services, such as invitations to our events, the sending of legal news and to offer services similar to those already implemented,
  2. For statistical purposes, which remain strictly confidential,
  3. To meet our legal and regulatory obligations,
  4. For candidate recruitment purposes,
  5. To manage requests to exercise rights in relation to the processing of personal data.

The processing of personal data is carried out in accordance with the following legal bases:

  • for the performance of services and assignments contracted with UGGC Avocats,
  • to meet our legal obligations, for example to carry out legal due diligence in the fight against money laundering, to check for possible conflicts of interest or to verify the identity of new customers,
  • to pursue our legitimate interests, while respecting your rights. For example, we use your data to offer you services similar to those you have subscribed to,
  • concerning sensitive data, for the establishment, exercise or defense of legal claims,
  • concerning personal data relating to offences, convictions and security measures, for the strict purposes of carrying out the tasks entrusted to us by law in our capacity as auxiliary of justice.

If you have any questions or require further information concerning the legal basis for processing personal data, please contact us using the contact details given in §.1.above.

4. Communication of personal data

The personal data of Concerned Persons is shared with the lawyers and administrative staff of UGGC Avocats, who are bound by strict confidentiality.

Personal data may also be transmitted, insofar as necessary, to (i) any third party intervening for the needs of the assignments entrusted to Us (local correspondents, experts, translators, etc.), (ii) our service providers, in particular IT service providers, for example for carrying out audits, (iii) our communication service providers and (iv) legal institutions and authorities.

If necessary, this data will be shared with the competent authorities or courts, in particular to meet our legal and regulatory obligations. In this case, we will take all necessary steps to notify you in advance, unless we are prohibited from doing so by law.

As explained below (art. 6.-), customers’ personal data may be communicated to UGGC’s foreign offices for cases requiring the intervention of these offices.

In the case of candidates for recruitment, their personal data is transmitted only to those involved in the recruitment process (administrative departments responsible for recruitment, personnel management, lawyers in the relevant department and UGGC Avocats associates).

5. Personal data security

UGGC Avocats implements appropriate organizational, technical and software measures in terms of physical and computer security to protect personal data against loss, unauthorized access, disclosure or alteration.

UGGC Avocats offers its customers an online data hosting service (UGGC Cloud). Data is hosted in France, by UGGC Avocats, without recourse to a third-party service provider.

6. Data retention

Personal data processed by UGGC Avocats is kept for the time strictly necessary to achieve the purpose for which the data is collected. In particular, in the case of data relating to the provision of legal services, the data is kept for the duration of the contractual relationship between the firm and the client, and beyond that, the data is securely archived for five years, before being deleted or made anonymous, unless a longer limitation period applies.

UGGC Avocats retains candidates’ personal data for two years after the last contact between the firm and the candidate, unless the candidate requests that his or her file be destroyed.

7. Customer and applicant rights

Data Subjects are hereby informed that, in accordance with the law, they have the right to access, rectify, delete and port their personal data, as well as the right to limit and object to the processing of such data.

Concerned Individuals also have the right to organize the fate of their personal data in the event of their death, as well as the right to lodge a complaint with the CNIL, whose website is accessible at http://www.cnil.fr and whose head office is located at 3 Place de Fontenoy, 75007 Paris.

For processing carried out on the basis of consent, Data Subjects may withdraw their consent at any time.

The Persons Concerned may exercise these rights, free of charge, by contacting UGGC Avocats.

In addition to the information provided below, UGGC Avocats invites Data Subjects to consult the CNIL website at https://www.cnil.fr/.

  • Right of access : Data Subjects have the right to obtain from UGGC Avocats confirmation that their personal data are or are not being processed and, where they are, access to said data as well as information relating to the purposes of the processing (art. 15 of Regulation 2016/679 on the protection of personal data (” RGPD“)), Manifestly unfounded, excessive or repeated requests are likely not to receive a response.
  • Right of rectification: Data Subjects have the right to obtain from the data controller, as soon as possible, the rectification of their personal data that they consider inaccurate (art. 16 of the RGPD),
  • Right to erasure: Data Subjects have the right to obtain from UGGC Avocats the erasure of their personal data, under the conditions set out in Article 17 of the RGPD,
  • Right to portability: Data Subjects have the right to receive the personal data concerning them that they have provided to UGGC Avocats, in a structured, commonly used and machine-readable format (art. 20 of the RGPD). This right applies only to the data that provided, where the processing is based on consent or on a contract and is carried out using automated processes.
  • Right to limit processing: Data Subjects may request UGGC Avocats to limit the processing of their personal data in accordance with Article 18 of the GDPR,
  • Right to withdraw consent: Data Subjects have the right to withdraw their consent to the processing of your data if such processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to the withdrawal of consent.
  • Right to object: Data Subjects have the right to object at any time, on grounds relating to their particular situation, to processing of their personal data, where such processing is based on legitimate interest (21 of the RGPD),
  • Right to organize the fate of personal data in the event of death: Data Subjects may define directives relating to the conservation, deletion and communication of their personal data after their death (law 78-17 of January 6, 1978 modified, art. 40, II),
  • Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, Data Subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data concerning them constitutes a breach of the regulations applicable to personal data (art. 77 of the RGPD).