Privacy Policy
The purpose of this privacy policy is to inform users of the firm's website about the conditions under which their personal data is collected, processed and retained, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016, the "GDPR") and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended.
Article 1 – Data controller
The controller of the personal data collected via this website is:
Maître Jessica LAGLASSE
Attorney registered with the Paris Bar
62 rue de Reuilly, 75012 Paris, France
Telephone: +33 6 48 91 88 74
Professional email address: jessica.laglasse@avocat.fr
The firm processes your data in strict compliance with the applicable regulations on personal data protection. The firm has not appointed a Data Protection Officer (DPO), as such appointment is not mandatory given the nature and scale of the processing carried out (Art. 37 GDPR).
Article 2 – Data collected
2.1 Data provided voluntarily
When using the contact form on the website, the following data may be collected:
Last name and first name
Email address
Telephone number (if provided)
Subject of the message
Free-text content of the message
The data marked as mandatory in the form is necessary to process your request; without it, your request cannot be handled.
The data entered in the contact form is sent directly to the firm's professional email address and is not stored on the server hosting the website.
It is recalled that, in connection with a consultation request, the user is invited not to communicate sensitive information or information covered by professional secrecy. Data transmitted before the formal establishment of a client relationship is not covered by lawyer-client professional secrecy.
2.2 Browsing data collected automatically
When browsing the website, certain technical data may be collected automatically, in particular:
IP address
Type and version of the browser used
Type of device (computer, tablet, smartphone)
Pages viewed and duration of the visit
Source of arrival (search engine, direct link, social network, etc.)
No audience analysis or traffic measurement tool is used on this website. This data may nevertheless be recorded minimally in the technical logs of the hosting server, for the sole purpose of the website's security and proper functioning (legal basis: legitimate interest, Art. 6.1.f GDPR), without any audience-measurement purpose or cookie placement.
Article 3 – Purposes of processing and legal basis
The personal data collected is processed for the following purposes:
Responding to requests for information or appointments sent via the contact form - Legal basis: user's consent (Art. 6.1.a GDPR)
Managing the pre-contractual relationship with prospective clients — Legal basis: pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR)
Complying with the legal obligations incumbent on the lawyer (in particular regarding anti-money-laundering) — Legal basis: legal obligation (Art. 6.1.c GDPR)
Article 4 – Retention period
Data from the contact form: retained for a maximum of 13 months from the last contact, unless an earlier deletion is requested.
Data relating to an actual client relationship: retained in accordance with the legal obligations applicable to the legal profession (archiving of files), generally 5 years from the closure of the file.
Technical logs of the hosting server (IP address, request timestamps): retained for a period strictly limited to the needs of the website's security and proper functioning, then deleted or anonymised.
Article 5 – Recipients of the data
The personal data collected is intended for the firm alone. It is not subject to any transfer, sale or rental to third parties.
It may, however, be shared with the technical processors strictly necessary for the operation of the website, namely:
The website host (Oracle EMEA Limited, Dublin, Ireland - European Union), which does not store any data transmitted via the contact form;
The email delivery provider Resend (Resend, Inc., United States), which delivers messages from the contact form to the firm's professional email address; and
The anti-bot protection provider Cloudflare (Cloudflare, Inc., United States), whose Turnstile service protects the contact form against automated submissions and, for that purpose, processes limited technical data (IP address, browsing signals).
As some of these processors (Resend and Cloudflare) are established in the United States, the operation of the contact form may involve a transfer of personal data outside the European Union. These transfers are governed by appropriate safeguards, in particular these providers' adherence to the EU-US Data Privacy Framework and/or the conclusion of standard contractual clauses adopted by the European Commission. Apart from these providers, no other transfer of data outside the European Union is carried out.
In addition, if you voluntarily activate the Artur'In widget in the website footer (see the cookie policy), your browser establishes a direct connection with the Artur'In service and with the relevant social media platforms, which then process technical data about you (including your IP address) under their own privacy policies, over which the Firm exercises no control. This widget is loaded only after your explicit consent; without activation, no data is transmitted to Artur'In.
Article 6 – Data security
The firm implements all appropriate technical and organisational measures to ensure the security, integrity and confidentiality of the personal data collected, and in particular to prevent any loss, alteration or unauthorised access.
No fully automated decision-making or profiling within the meaning of Article 22 of the GDPR is carried out on the basis of the data collected via the website.
Article 7 – Rights of data subjects
In accordance with the regulations in force, you have the following rights concerning your personal data:
Right of access (Art. 15 GDPR): to obtain confirmation that your data is being processed and to receive a copy of it.
Right to rectification (Art. 16 GDPR): to correct inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): to request the deletion of your data, in the cases provided for by the regulations.
Right to restriction of processing (Art. 18 GDPR): to request the temporary freezing of the use of your data.
Right to portability (Art. 20 GDPR): to receive your data in a structured, commonly used format.
Right to object (Art. 21 GDPR): to object to the processing of your data, in particular for prospecting purposes.
Right to withdraw consent: to withdraw your consent at any time, without affecting the lawfulness of the processing carried out before such withdrawal.
Right to set out directives concerning the fate of your personal data after your death (Art. 85 of Law No. 78-17 of 6 January 1978).
To exercise any of these rights, you may send your request in writing to the following email address: jessica.laglasse@avocat.fr. In the event of reasonable doubt as to your identity, proof of identity may be requested.
The firm undertakes to respond to you within one (1) month of receiving your request. This period may be extended by a further two months on account of the complexity or number of requests, after informing the user.
If you consider that the processing of your data does not comply with the applicable regulations, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr – 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Article 8 – Updating the privacy policy
This privacy policy may be amended at any time to reflect legislative or regulatory changes or changes relating to the processing carried out. Users are invited to consult it regularly.
Date of last update: 01/07/2026