Privacy Policy

At Calypso Avocats, we attach the utmost importance to the confidentiality and protection of the personal data of our clients, staff and service providers.

As lawyers, we are members of a regulated profession, officers of the court and trusted advisers to our clients. We protect the confidentiality of the data and information they entrust to us, in accordance with our professional oath and our duty of professional secrecy.

We are also committed to complying with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

This policy explains our practices and your rights regarding the confidentiality and protection of your personal data, whether you are a website user, client, team member, employee, supplier or partner.

Data controller

Calypso Avocats, 78 avenue Raymond Poincaré, 75116 Paris, France, is the controller of your personal data within the meaning of the GDPR.

In this capacity, the firm has put in place internal measures and procedures to ensure that processing is compliant and that personal information is kept secure. Our lawyers and staff use personal data responsibly, and our partners and suppliers are carefully selected with the same aim of protecting and securing data, in particular personal data.

Personal data we collect

Client data: depending on the nature of the matter, the firm collects various categories of data in the course of assisting and representing its clients: identification and civil status data, health data, financial and professional information, data relating to criminal offences, and court decisions concerning them. This may include special category data (data revealing religious beliefs, political opinions, trade union membership or racial or ethnic origin, health data, or data concerning a person’s sex life or sexual orientation).

Staff data: the firm collects identification data relating to its employees and other team members, whether lawyers or not, and in some cases health data, bank details or financial information.

Partner and supplier data: the firm collects identification data relating to its partners and suppliers, whether lawyers or not, as well as bank details or financial information.

Purposes of processing

Personal data collected is used for the following purposes:
– carrying out our advisory, assistance and representation work, in accordance with our contractual and professional obligations;
– complying with our legal obligations;
– managing the firm’s administration;
– protecting and securing our premises, IT systems and work tools.

Legal bases

Your data is processed on the following legal bases:
– Consent: placing advertising cookies, audience measurement cookies (where not exempt) or social media cookies; collecting data through online forms; registration for events organised by the firm;
– Performance of a contract: managing client matters; issuing and paying invoices; transferring personal data to other lawyers, courts, experts, translators, judicial officers and, more generally, any professional involved in a matter, in the client’s interest;
– Legal obligations: payroll processing for employees and other team members; mandatory social security and tax filings;
– Legitimate interests: professional communications; security of our premises and equipment.

Retention periods

Personal data you entrust to us is used and archived only for as long as strictly necessary for the purposes for which it was collected, and is then deleted within the following periods:
– Matter files (advisory and litigation): 5 years from final closure of the matter, unless specific legal or professional rules require a different period;
– Financial and accounting data: 10 years from the end of the financial year;
– Employment and HR data: 5 years from the end or termination of the employment contract;
– Communications data (newsletter): up to 3 years after the last contact, or until the data subject withdraws consent;
– Data collected to comply with legal obligations (e.g. social security filings, anti-money laundering): 5 years from closure of the matter.

At the end of these periods, data is either securely deleted or irreversibly anonymised, unless a legal or regulatory obligation requires it to be kept longer.

Data sharing

We share your data only with authorised professionals:
– Selected processors: our IT and archiving service providers are bound by strict contractual obligations;
– Legal professionals and officers of the court: in connection with the matters entrusted to us, they receive the data necessary to carry out their tasks.

Your personal data is not transferred outside the European Union without appropriate safeguards. We give preference to French and European providers.

Data security

We have put in place strict measures to protect your data:
– Data minimisation: we only collect the personal information that is necessary;
– Access rights: within the firm, access to files and personal data is granted in proportion to the sensitivity of the information concerned;
– Awareness: all members of the firm receive data protection awareness training;
– IT support: our IT provider is responsible for the security of our IT systems and reports periodically on the effectiveness of the security measures in place.

Your rights

Professional secrecy, by which we are bound under our oath and Article 2 of the French National Rules of Professional Conduct (RIN), protects our communications and your information. It may limit the exercise of your rights where exercising them would breach that secrecy, in order to protect your interests and ensure compliance with our professional obligations.

Subject to this, you have the following rights:
– Right of access: to obtain information about the personal data we process about you, and a copy of it;
– Right to rectification: to correct or update inaccurate or incomplete personal data;
– Right to erasure: to request the deletion of your personal data where its processing is no longer necessary, subject to our legal and professional obligations, in particular regarding archiving;
– Right to restriction of processing: to temporarily restrict the use of your personal data, for example where you contest its accuracy;
– Right to object: to object to the processing of your personal data on grounds relating to your particular situation, or where it is used for direct marketing purposes;
– Right to data portability: to receive your personal data in a structured, machine-readable format, or to have it transferred to a third party, where technically feasible;
– Right to withdraw consent: to withdraw your consent at any time where processing is based on consent;
– Right to give post-mortem instructions: to determine what happens to your data after your death, in accordance with Article 85 of the French Data Protection Act (Loi Informatique et Libertés).

To exercise these rights, please email Calypso Avocats at contact@calypso-avocats.com.

To ensure the security and confidentiality of your data, we may ask for a copy of a valid identity document where necessary.

We will respond to your request within one month. This period may be extended by two months where justified by the complexity of the request.

You also have the right to lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr.

Updates

We may amend this privacy policy at any time, in particular to reflect legal or technological developments. The version in force is the one published on our website.

Your trust is essential to us. Please do not hesitate to contact us if you have any questions.

Language

This English version is provided for convenience only. In the event of any discrepancy, the French version shall prevail.