Privacy policy

Controller

No data protection officer has been appointed; any request relating to personal data may be sent to the email address above.

Controller

Jean Moulin, attorney at law, Rennes Bar

Address

3, rue Louis Braille, 35136 Saint-Jacques-de-la-Lande, France

Contact

jean.moulin@avocat.fr

Data collected

Contact form: name, company name (optional), email address, content of the message and the language of the enquiry. This data is provided voluntarily by the visitor.

Technical data: IP address, timestamps and request headers, processed by the host for security purposes and to keep the service running.

This website uses no advertising cookies, no analytics tool and no tracker requiring consent. The fonts are hosted on the website itself, so browsing it generates no request to any third-party service.

Purposes and legal bases

Responding to an enquiry

Pre-contractual steps at the request of the data subject (art. 6(1)(b) GDPR)

Carrying out an engagement

Performance of a contract (art. 6(1)(b))

Website security and abuse prevention

Legitimate interests (art. 6(1)(f))

Accounting and anti-money-laundering duties

Legal obligation (art. 6(1)(c))

Recipients and processors

Data is never sold, rented or used for marketing purposes. It is accessible only to the practice and, where strictly necessary, to technical providers.

Website hosting and form handling: Netlify, Inc. Messages sent through the form are stored on that provider’s servers until collected by the practice.

Email: the email provider used by the practice.

Transfers outside the European Union

Netlify, Inc. is established in the United States. Transfers to that provider are governed by the European Commission’s standard contractual clauses and, where applicable, by the EU・US Data Privacy Framework.

Retention periods

Enquiry not followed by an engagement

12 months

Client file

5 years from the end of the engagement (art. 2225 French Civil Code)

Accounting records

10 years (art. L. 123-22 French Commercial Code)

Host technical logs

12 months maximum

Professional secrecy

Data covered by professional secrecy benefits from reinforced protection: it may only be disclosed to a third party, including a public authority, in the cases strictly provided for by law.

Professional secrecy and statutory retention duties may limit the exercise of certain rights, in particular the right to erasure.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability set out in articles 15 to 22 GDPR. These rights may be exercised by email at the address above; a reply will be sent within one month.

If a disagreement persists, a complaint may be lodged with the French data protection authority (CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr).

Security

The website is served over HTTPS. Messages received are handled on password-protected, encrypted equipment, and access to files is restricted to the practice.

Changes to this policy

This policy may be amended to reflect legal or technical developments. The date of the latest update appears at the foot of the page.