Protection of personal data

We process personal data concerning our clients. These processing operations have the following characteristics:

PurposeLegal basisData categoriesCategories of personsDuration
Prospecting and animationLegitimate interestIdentity/Civil Status and Contact Information Potential Clients 3 years
Management of the relationship with clients and potential clientsLegitimate interest Identity/Civil Status and Personal/Professional Contact information Potential Clients Longest duration between: duration of the contractual relationship or 3 years
Organization, registration and invitation to the firm’s events Legitimate interest Identity/Civil Status and Personal/Professional Contact informationPotential Clients and Guests 3 years
Production, management, follow-up of customers’ filesExecution of pre-contractual or contractual measures Identity/Civil Status, Personal/Professional Contact information and Economic and financial information ClientsDuration of the contractual relationship plus limitation periods
BillingExecution of pre-contractual or contractual measuresIdentity/Civil Status and Economic and financial information Clients10 years from the closing date of the accounting year in which the invoice was issued
CollectionExecution of pre-contractual or contractual measuresIdentity/Civil Status and Economic and financial informationClientsUntil full payment of fees
Prevention of money laundering and terrorist financing and fight against corruptionCompliance with legal and regulatory obligationsIdentity/Civil Status, Personal/Professional Contact information and Economic and financial information Clients5 years after the end of the contractual relationship with the firm
AccountingCompliance with legal and regulatory obligationsIdentity/Civil Status and Economic and financial informationClients10 years from the end of the financial year

Depending on the purposes set out above, the categories of data retained may differ slightly, the latter being essentially linked to the nature of the mission entrusted. This information is necessary for the pursuit of the identified purposes.

In the event that the mission so requires, sensitive data within the meaning of the applicable regulations may be processed, in particular when they are necessary:

  • to the establishment, exercise or defence of a right in legal proceedings ;
  • or for the purposes of fulfilling the obligations and exercising the rights specific to the controller or the data subject in the field of employment law, social security and social protection law.

The data processed is intended for the authorised persons of the firm and its service providers.

Under the conditions defined by the French Data Protection Act and the European Data Protection Regulation, natural persons have a right of access to and rectification, limitation, portability and deletion of data concerning them.

The data subjects of processing operations have also the right to object at any time, on grounds relating to their particular situation, to the processing of personal data based on the legitimate interest of the law firm, as well as the right to object to commercial canvassing.

They also have the right to define general and specific directives on how they intend to exercise, after their death, the rights mentioned above by e-mail to the following address: secretariat@hananiaconsult.com or by post to the following address: Me Lilian Hanania – 11 boulevard Sébastopol – 75001 Paris, accompanied by a copy of a signed identity document.

The data subjects have the right to lodge a complaint with the CNIL.