What does LERINS do with your personal data ?

Privacy Policy

What does LERINS do with your personal data?

Who?

The law firm LERINS, SIREN 835 044 777 (“LERINS” or “We”) is responsible for processing data from its suppliers, colleagues, partners, clients and prospects and acts as a sub-processor regarding the processing it performs on client data, within the framework of its services as a law firm.

In all its activities, LERINS is subject to this quality, in addition to the ethical obligations and confidentiality requirements specific to the legal profession, to the obligations imposed by current regulations in France and within the European Union regarding personal data and in particular Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (the “GDPR”).

The persons concerned by the processing of personal data are the suppliers, colleagues, partners, clients and prospects as well as their collaborators and the persons concerned by a file processed by LERINS as well as internet users navigating on the LERINS website (collectively the “Persons” or “You”).

What?

The expression “personal data” designates any information likely to identify a natural person directly such as name and first name or indirectly such as an IP address, email address or license plate number (the “Data”).

The categories of Data that We process depend on the pursued purpose. This information may include:

Name and first name
Contact details
Position and employer
Date, place of birth, affiliation
Nationality
Tax data
Telephone number
Images (photography, video…)
More generally any Data necessary within the framework of service provision
Sensitive Data relating to your criminal record, your health, or your political, religious, union, sexual opinions, origins…
Navigation data (collected by cookies: IP address, geolocation data, mobile device identification…)

Why?

The present confidentiality policy (“Confidentiality Policy”) aims to inform Persons about the Data processing carried out by LERINS within the framework of all its activities, whether it concerns responses to requests for services, the provision of its legal services and the management of its relationship with its clients, partners, colleagues and suppliers and the rights in this regard.

The Confidentiality Policy is accessible from the LERINS website, also accessible from the link included in any electronic correspondence and communicated or made available during any exchange with LERINS. It may be modified to take into account in particular the evolution of Data processing implemented by LERINS and applicable legislation.

The Data are processed for the following purposes:

Sending quotes and information relating to a service request
Constitution of a “prospects” database and distribution of newsletters (unless opt-out)
Promotion and marketing of our activities
Operation and improvement of the website
Provision of service and execution of assigned missions
Management of disputes between LERINS and the Persons
Accounting and tax obligations
Solvency verification and fight against money laundering and terrorist financing
Invoicing of Our services
Recruitment and administrative management of employees

These different Data processing operations are based on the following grounds:

– Execution of the service provision contract with LERINS

– LERINS’ legitimate interest

– Compliance with Our legal obligations

– In certain cases, Your consent, in particular for our marketing operations or if Your Data must be transferred to a third party outside the EU or a country guaranteeing an adequate level of protection.

How?

LERINS collects Data directly from Persons via forms accessible from the website or by telephone, from your mobile or non-mobile devices, during our research or directly during meetings and exchanges with the lawyers and/or LERINS staff. These Data are updated directly with the Persons. In this regard, the Persons undertake to communicate any update of said Data to the marketing/client service without delay.

LERINS is also likely to receive or have access to Data concerning You via third parties including public organizations, banking or credit institutions, or your advisors, your or its partners or service providers. In the case where Data are not collected directly by LERINS but communicated by a third party, the Person or the legal entity they represent guarantees that they hold all rights and authorizations or are authorized to transmit these Data.

LERINS takes all useful precautions to guarantee the confidentiality and security of Data and to prevent their alteration, corruption or access by unauthorized persons. For example, access to your Data is limited and restricted to only those persons/services who need to access them, these Data are stored on secure servers. Access to Data requires the use of an identifier and password.

Nevertheless, the transmission of Data via the internet is not without risk and the security of Data cannot be ensured at 100%. Therefore, even if LERINS subscribes to result commitments regarding Data security, it cannot guarantee it.

When?

The collected Data are processed for the time necessary for the pursued purpose and deleted beyond that. In this regard:

Data processed for the processing and sending of quotes and information relating to a request or those relating to our “prospects” are kept for 3 years from their collection or from the last exchange with the prospect.
Data processed within the framework of the provision of our services and the execution of assigned missions are kept for 5 years after the end of the contractual relationship or mission. We keep Data collected within the framework of solvency verification and the fight against money laundering and terrorist financing for the same period.
We may need to process Data for longer in the event of pre-litigation or litigation, in which case we delete the Data after the conclusion of an amicable agreement or until ordinary and extraordinary appeal options are no longer possible against the decision rendered.
Certain Data may be kept for up to 10 years after the end of the contractual relationship or mission to comply with Our accounting and tax obligations.
With regard to cookies, depending on their type, they are deleted within 13 months from the internet user’s visit.

Where?

The collected Data are accessible only by LERINS members, by the services that need to have access to them within the framework of their mission and in particular by all collaborating lawyers acting as sub-processors of LERINS.

To carry out its activities and for certain of the purposes identified above, LERINS uses the services of sub-contractors or service providers (e.g.: those in charge of administrative service provisions such as archiving or accounting), IT service providers (e.g.: the hosting provider,) or SaaS mode solutions (e.g.: audit platform or telephone conference) who have access to Data to perform the mission entrusted to them by LERINS. All of these Data are hosted within the European Union.

In the context of litigation, dispute resolution or negotiation and more generally in the performance of assigned missions, the opposing party, your co-contractors, including their lawyers as well as judicial services (judges, clerks, prosecutors, public authorities…) may have access to your Data.

LERINS may also be required to communicate Data to third parties in certain particular cases:

If the partner lawyer in charge of Your file leaves LERINS and joins another firm, they are likely to transfer your Data to the new law firm which will then become the new data controller;
If You request the transfer of your file to another lawyer;
If LERINS is obliged to transmit the Data to enforce or apply the service provision contract or any other support containing Our conditions and methods of supporting Our clients or to protect the rights, property or security of LERINS, its clients or its collaborators;
If the law or a court decision authorizes or requires this transfer by LERINS.

As part of a partnership with several law firms around the world, particularly outside the European Union, LERINS is likely to transfer all or part of your Data in order to provide You with the best possible service. Such a Data transfer will be subject to your consent which will result from your request.

The LERINS website may contain links to other third-party websites (e.g.: LinkedIn; Twitter; our networks…), the use of such links is subject to confidentiality policies specific to these third-party websites.

LERINS cannot be held responsible for the use of your Data by these websites.

Your rights:

Within the framework of Data processing carried out by LERINS, Persons have the right:

To obtain access / a copy of their processed Data;
To obtain the rectification of Data;
To obtain the erasure of all or part of the Data when the Data, (i) are no longer necessary for the purposes for which they were collected, (ii) are based exclusively on consent, (iii) are subject to an objection request
To obtain the limitation of processing, temporarily, when the accuracy of the Data is contested, when the Person has objected to the processing, when the Data are no longer necessary for LERINS but are still necessary for the establishment, exercise or defense of legal rights
To unsubscribe or object to receiving commercial prospecting messages at any time by clicking on the “unsubscribe” link in any email or communication sent by LERINS
To withdraw their consent at any time regarding processing based on consent
To obtain the portability of their Data when the processing is based on consent and the processing is carried out using automated processes
To provide directives on the fate of their post-mortem data
To lodge a complaint with the CNIL.

To exercise their rights or for any question relating to this Confidentiality Policy, the Person may send a request to the following address: contact@lerins.com

LERINS reserves the right to request supporting documents to verify in particular the identity of the Person.