Personal data & confidentiality
Privacy Policy
How personal data is used when you visit this website or contact the firm, and how to ask a question or exercise your rights.
This Privacy Policy explains how personal data is collected and processed when users visit this website or contact the firm. It covers initial enquiries; the processing required for any subsequent legal representation must also be explained in the information provided for that matter.
The website allows users to contact the firm through an English-language contact form. Information submitted through that form is used to review and respond to the enquiry addressed to the firm.
Data Controller
The data controller is:
Pierre NicoletMember of the Paris Bar
47 Avenue Hoche, 75008 Paris, France
Email: contact@pierrenicoletavocat.fr
This email address may also be used for questions about this policy and requests concerning your personal data.
Personal Data Collected
Depending on the form and the information you choose to provide, an enquiry may include:
- your first and last name;
- your preferred contact method and the corresponding email address or telephone number;
- information about whether you are the injured person, a relative or another person, when you provide this in your enquiry;
- the type and approximate date of the accident;
- information about a scheduled or previous medical examination;
- whether a compensation offer has been received;
- the content of your message and any follow-up correspondence.
Required and optional information. On the English contact form, you must select a contact method and provide the corresponding contact detail. The other fields are optional. Without the required information, the form cannot be submitted. Without a usable contact detail, the firm may be unable to respond.
Please provide only information relevant to your enquiry. When you contact the firm about another person, limit the information to what is needed to explain the situation.
Purposes of the Processing
The personal data collected through an enquiry is used to:
- review the enquiry submitted to the firm;
- respond to the user;
- arrange a first consultation where appropriate;
- identify the initial steps that may be useful;
- follow up the enquiry addressed to the firm.
Website-related purposes, including any audience measurement or third-party features, are addressed in the cookies section below and in the relevant information about those services.
Legal Basis for the Processing
For general enquiries, the firm relies on its legitimate interest in receiving, reviewing and responding to communications addressed to it, subject to the rights and interests of the individuals concerned (Article 6(1)(f) GDPR).
Where processing is necessary to take steps at your request before entering into an agreement for legal services, the relevant basis is Article 6(1)(b) GDPR. That provision also covers processing necessary to perform the agreement if you instruct the firm.
Where a particular legal obligation requires processing, Article 6(1)(c) GDPR applies to that purpose. Processing based on consent, including relevant cookie-related processing, is distinct from handling your enquiry.
Editorial checkpoint — confirm the allocation of legal bases. The source mentioned legitimate interest only. The distinctions above are a proposed clarification, not a verified description of the firm’s processing register. Identify the actual legal obligations, any additional website purposes and whether any solely automated decision with legal or similarly significant effects is used. Where relevant, complete the notice before publication.
Sensitive Personal Data
Information about injuries or health may constitute sensitive personal data even when it is included in a short message rather than a medical document.
For an initial enquiry, please do not submit complete medical records or unnecessary sensitive information through the contact form. If medical records or other sensitive documents are needed, the firm will indicate the appropriate method of transmission.
A legal basis under Article 6 GDPR does not, by itself, authorise the processing of health data. Where such processing is necessary for the establishment, exercise or defence of legal claims, Article 9(2)(f) GDPR may apply. This exception must be applicable to the specific processing; submitting a form is not treated as blanket consent to every use of sensitive information.
Recipients of the Personal Data
Personal data submitted through the contact form is intended for the firm. Enquiry information is not sold, rented or disclosed to third parties for commercial purposes.
Technical service providers involved in the operation of the website may have access where this is necessary to perform their services. The recipients and purposes relating to website measurement or other third-party features must be distinguished from the handling of the content of an enquiry.
Service providers and international transfers
To complete before publication. Identify the relevant recipient categories and actual providers for hosting, form storage, email delivery, maintenance, backups and any third-party website services. Specify any processing outside the European Economic Area, the countries or relevant locations, the applicable transfer mechanism and how information about the safeguards can be obtained.
No statement that all data stays in France or in the EEA, and no particular adequacy or contractual safeguard, has been assumed in this draft.
Retention Period
Enquiry data is kept for the period needed to review and respond to the request. Where a matter is opened, relevant information may be retained for its management and for applicable professional or legal obligations.
To complete with the firm’s actual retention schedule. The original wording, “within a reasonable period”, does not identify an operational deadline.
Enquiries that do not lead to instruction: [insert the actual maximum period or sufficiently precise criteria, the starting event and any separate, justified restricted archive].
Matters opened: [specify the active-file period, the criteria or deadlines for archiving after the end of the matter, and the relevant legal or professional justification].
Other copies and technical data: [check website entries, email copies, logs, measurement data and backup cycles; apply the relevant schedule to each].
Retention for a separate legal obligation or for establishing, exercising or defending legal claims must be limited to the information and period necessary for that purpose. Archiving is not a basis for keeping every enquiry indefinitely.
Your Rights
Subject to the conditions laid down by the applicable legislation, you may request access to your data, rectification, erasure or restriction of processing.
Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Data portability applies where its legal conditions are met, in particular for data you provided that is processed by automated means on the basis of consent or a contract.
Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. Cookie choices can be changed through the consent management tool.
To exercise your rights, email contact@pierrenicoletavocat.fr or write to the business address above. Please describe your request. Additional information may be requested where there is a reasonable doubt about your identity; an identity document is not required systematically.
Under Article 12 GDPR, information about the action taken on a rights request must normally be provided without undue delay and within one month of receipt. Where necessary because of the complexity or number of requests, the period may be extended by two further months, with notice and reasons given within the first month.
These rights are not absolute. Applicable legal obligations, the establishment, exercise or defence of legal claims, and the rights of other people may affect the response.
Complaints. You may lodge a complaint with a competent data protection authority, including the French authority, the CNIL (complaint service in French). You may also contact the firm to raise a concern.
Security
The firm implements measures intended to protect the confidentiality and security of personal data submitted through the website. However, no transmission of information over the internet can be regarded as entirely free from risk.
Please follow the firm’s instructions before transmitting sensitive documents. This policy does not represent a guarantee that ordinary email or the initial contact form is appropriate for every document.
Cookies and Similar Technologies
The website uses cookies and similar technologies, including technologies necessary for its operation. Depending on the services used and the choices made through the consent banner, other technologies may be used for audience measurement or third-party features.
Where consent is required, the relevant storage or access requires prior consent. Users can accept, refuse or adjust optional choices through the consent management tool and subsequently change those choices.
Accepting optional cookies is separate from asking the firm to respond to an enquiry. A cookie-consent choice is not blanket consent to the processing of the information entered in the form.
To verify before publication. Complete the description of the services actually used, their data, purposes, recipients, retention periods and any international transfers. The supplied page source contains a Google tag added through Site Kit and a Complianz configuration; it does not establish the complete network behaviour before and after consent.
The existing Cookie Policy link is retained here for verification only. Its public destination, content and association with Complianz have not been confirmed. Do not publish a statement that this page contains a complete cookie inventory until that has been checked.
Updates to This Privacy Policy
This Privacy Policy may be updated to reflect changes to the website, the tools used or the applicable legislation.