Privacy Policy

Preamble

When you visit the website leneuf.paris, Marie-Gabrielle Plasseraud (hereinafter “Marie-Gabrielle Plasseraud” or “we”) collects and processes personal data. Such data is also collected and processed in connection with the letting of office space dedicated to the legal profession.

Personal data means any information that allows a natural person to be identified, directly or indirectly, such as a name, an identification number, location data, an online identifier, or one or more elements specific to that person’s identity (hereinafter “Personal Data”).

This privacy policy (hereinafter the “Privacy Policy”) explains what data we collect, why we collect it, and what your rights are.

  1. Data Controller

Processing means any operation applied to Personal Data, by automated means or otherwise (hereinafter “Processing”), including in particular: collection, recording, organisation, storage, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, restriction, erasure or destruction of Personal Data.

The Data Controller is Marie-Gabrielle Plasseraud, Attorney, SIREN number 808228068, with registered office at 84 rue d’Amsterdam, 75009 Paris, France.

We implement appropriate technical and organisational measures to ensure the security of your Personal Data and to prevent any unauthorised access, use, disclosure or alteration.

  1. Personal Data Collected

We collect and use the following categories of data:

  1. Identity and contact details: in particular surname, first name, email address, telephone number, bar association membership, VAT number, firm name;
  2. Connection data: login dates and times, browser used, operating system;
  3. Browsing data: number of visits, pages and sections consulted;
  4. Geographic location data.

Mandatory fields are indicated when you provide us with your data. They are flagged by all appropriate means.

We do not collect any sensitive Personal Data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual orientation) (hereinafter “Sensitive Personal Data”).

If Sensitive Personal Data is processed, we will delete it as soon as possible.

In addition, certain technical data is automatically collected via cookies on our website. To learn more and to understand your rights, please consult the Cookie Policy.

  1. Circumstances of Personal Data Collection

We collect your Personal Data in the following circumstances:

  1. When you browse or consult our website;
  2. When you complete our contact form;
  3. In the context of our exchanges (by post, email and/or telephone).
  1. Use of Your Personal Data

Any Processing of Personal Data is based on one of the legal grounds set out in Article 6 of the General Data Protection Regulation (hereinafter the “GDPR”).

The table below summarises our processing activities and their legal bases.

Processing purposes

Legal bases

Managing contact requests (responses, arranging visits and exchanges) and responding to enquiries

Legitimate interest – Article 6(1)(f) GDPR 

Our legitimate interest in responding to enquiries from lawyers wishing to benefit from our spaces and services.

Processing applications for office rental (profile assessment, availability verification)

Performance of a contract – Article 6(1)(b) GDPR 

Performance of pre-contractual measures taken at your request, for the receipt and processing of applications received.

Administrative and contractual management: conclusion of the lease, billing, cost recovery, accounting… 

Performance of a contract – Article 6(1)(b) GDPR 

Processing is necessary for the conclusion of the contract and its performance, and for the provision of associated services.

Management of included services: registered office address, mail collection, organisation of events…

Managing access to the premises and logistical organisation (allocation of offices, badges, codes and associated services)

Performance of a contract – Article 6(1)(b) GDPR 

Processing is necessary for the effective making available of the rented spaces and the proper operation of the associated services.

Ensuring the confidentiality and security of the premises, including through access controls

Legitimate interest – Article 6(1)(f) GDPR

Our legitimate interest in ensuring the physical security of the premises and the confidentiality of access.

Technical management of the website and improvement of services, content and navigation  

Legitimate interest – Article 6(1)(f) GDPR

Our legitimate interest in improving the user experience on our website, optimising the presentation of our services and ensuring proper technical operation.

Monitoring and analysing website performance

Sending professional communications relating to space updates (information on availability, services offered, events…)

Legitimate interest – Article 6(1)(f) GDPR

Our legitimate interest in ensuring communication, marketing and information to our clients and prospects.

Processing carried out in connection with our activities is further covered by legal professional privilege.

  1. Retention Period for Your Personal Data

We retain your Personal Data for the period necessary considering the purpose for which it was collected:

  1. Tenant and domiciled party data: Personal Data is retained throughout the duration of the contract, then for a period of 3 years from the end of the lease;
  2. Prospect and contact data (waiting list, contact form): for a period of 3 years from the last contact;
  3. Data collected via cookies: for a maximum period of 24 months in accordance with the default settings of GA4, subject to Google’s policies.

These periods may be extended where required by statutory archiving obligations, the establishment of proof of a right or contract, applicable limitation periods, potential disputes, or guidelines issued by the competent data protection authorities.

  1. Your Rights Regarding Your Personal Data

You remain at all times the sole owner of your Personal Data and may exercise the following rights under applicable law:

  1. Access to your Personal Data: you may obtain a copy of the Personal Data we hold about you, as well as information on how it is processed.
  2. Rectification of your Personal Data: you may ask us to correct any inaccurate or incomplete Personal Data. We reserve the right to verify the accuracy of any new information provided.
  3. Erasure of your Personal Data: you may request the deletion of your Personal Data when it is no longer necessary or has become obsolete, in the event of unlawful processing, or following the exercise of your right to object. This right may be restricted where retention is required by a statutory obligation or is necessary for the establishment, exercise or defence of legal claims. You will be notified of such reasons.
  4. Restriction of the Processing of your Personal Data: you may request the suspension of the Processing of your Personal Data in the event of:

(i) a dispute as to their accuracy, for the time needed to verify them;

(ii) unlawful processing where you prefer to restrict use rather than request erasure;

(iii) where we no longer need your Personal Data but you still require it for the establishment, exercise or defence of your legal claims;

(iv) the exercise of your right to object, during the verification period to determine whether the legitimate grounds we pursue override yours.

  1. Portability of your Personal Data: you may receive your Personal Data in a structured and commonly used format, to transfer it to a third party of your choice. This right applies only to Personal Data processed based on your consent or the performance of a contract.
  2. Objection to the use of your Personal Data: you may object, at any time, to the processing of your Personal Data, or withdraw your consent where processing is based on consent (which may prevent us from providing you with certain services).

To exercise any of these rights, please contact Marie-Gabrielle Plasseraud at the following email address: contact@leneuf.paris.

If you believe your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) at the following address:

CNIL, Service des plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

  1. Transfer and/or Sharing of Your Personal Data with External Third Parties

In the context of the tools we use (see Article 8 – Recipients with Access to Personal Data), your Personal Data may be transferred outside the European Union. Such transfers are secured by the following means:

  1. the data is transferred to a country subject to an adequacy decision by the European Commission, in accordance with Article 45 GDPR: in this case, that country ensures a level of protection deemed sufficient and equivalent to the GDPR;
  2. the data is transferred to a country whose level of data protection has not been recognised as adequate under the GDPR: in this case, such transfers are based on appropriate safeguards as set out in Article 46 GDPR, tailored to each service provider, including without limitation the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or pursuant to an approved certification mechanism;
  3. the data is transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.

You may obtain a copy of the instruments enabling transfers of your Personal Data outside the European Union by contacting us.

In addition, analytical data collected via cookies may be shared with service providers (e.g. Google) for the sole purpose of analysing our website’s performance. 

  1. Recipients with Access to Personal Data

Your Personal Data will only be communicated, where applicable, to the following recipients:

  1. Authorised personnel within the firm, strictly within the limits of their respective duties and in compliance with professional secrecy obligations;
  2. Trusted subcontractors and service providers of the firm, responsible in particular for:
  • Website hosting;
  • Technical maintenance and management of the website;
  • Sending newsletters;
  • Managing the contact form;
  • Audience analysis and cookies.

These recipients have access only to the Personal Data strictly necessary for the performance of their tasks and undertake not to use it for any other purpose. They are bound by a confidentiality obligation.

We select our service providers with the greatest care, ensuring that they provide sufficient guarantees, in particular in terms of security, to meet the requirements of applicable law.

Furthermore, in accordance with applicable legislation, we may be required to disclose your Personal Data to competent authorities upon request, including public bodies, officers of the court, and ministerial officers, to fulfil our legal obligations.

  1. Amendments to this Privacy Policy

This Privacy Policy may be updated by us to best reflect any changes in the way we collect and process your Personal Data. Any amendment is published on this page with the revision date.

Contact

84 Rue d’Amsterdam
75009 Paris