Protection of personal data
We process personal data concerning our clients. These processing operations have the following characteristics:
| Purpose | Legal basis | Data categories | Categories of persons | Duration |
| Prospecting and animation | Legitimate interest | Identity/Civil Status and Contact Information | Potential Clients | 3 years |
| Management of the relationship with clients and potential clients | Legitimate interest | Identity/Civil Status and Personal/Professional Contact information | Potential Clients | Longest duration between: duration of the contractual relationship or 3 years |
| Organization, registration and invitation to the firm’s events | Legitimate interest | Identity/Civil Status and Personal/Professional Contact information | Potential Clients and Guests | 3 years |
| Production, management, follow-up of customers’ files | Execution of pre-contractual or contractual measures | Identity/Civil Status, Personal/Professional Contact information and Economic and financial information | Clients | Duration of the contractual relationship plus limitation periods |
| Billing | Execution of pre-contractual or contractual measures | Identity/Civil Status and Economic and financial information | Clients | 10 years from the closing date of the accounting year in which the invoice was issued |
| Collection | Execution of pre-contractual or contractual measures | Identity/Civil Status and Economic and financial information | Clients | Until full payment of fees |
| Prevention of money laundering and terrorist financing and fight against corruption | Compliance with legal and regulatory obligations | Identity/Civil Status, Personal/Professional Contact information and Economic and financial information | Clients | 5 years after the end of the contractual relationship with the firm |
| Accounting | Compliance with legal and regulatory obligations | Identity/Civil Status and Economic and financial information | Clients | 10 years from the end of the financial year |
Depending on the purposes set out above, the categories of data retained may differ slightly, the latter being essentially linked to the nature of the mission entrusted. This information is necessary for the pursuit of the identified purposes.
In the event that the mission so requires, sensitive data within the meaning of the applicable regulations may be processed, in particular when they are necessary:
- to the establishment, exercise or defence of a right in legal proceedings ;
- or for the purposes of fulfilling the obligations and exercising the rights specific to the controller or the data subject in the field of employment law, social security and social protection law.
The data processed is intended for the authorised persons of the firm and its service providers.
Under the conditions defined by the French Data Protection Act and the European Data Protection Regulation, natural persons have a right of access to and rectification, limitation, portability and deletion of data concerning them.
The data subjects of processing operations have also the right to object at any time, on grounds relating to their particular situation, to the processing of personal data based on the legitimate interest of the law firm, as well as the right to object to commercial canvassing.
They also have the right to define general and specific directives on how they intend to exercise, after their death, the rights mentioned above by e-mail to the following address: secretariat@hananiaconsult.com or by post to the following address: Me Lilian Hanania – 11 boulevard Sébastopol – 75001 Paris, accompanied by a copy of a signed identity document.
The data subjects have the right to lodge a complaint with the CNIL.