Privacy Policy

This privacy policy explains why we collect your data and how we are committed to protecting it.

FOURNOL & ASSOCIES is committed to protecting your personal data and your privacy.

In this respect, and in accordance with the General Data Protection Regulation (hereinafter “GDPR”), we set out below the conditions under which your personal data may be processed by us.

We may collect and retain your personal data, in particular in order to:

process and respond to your messages, establish and manage any business relationship that may arise from your messages, process your job application, and remember your cookie preferences.

Categories of data:

Contact details (for example, first name, surname, telephone number, email address); technical and location information generated in connection with the use of our services.

The processing of personal data we carry out is based on:

the data subject’s consent (Article 6.1(a) GDPR), for all processing requiring prior consent. In online forms, mandatory fields are marked with an asterisk. Failure to answer mandatory questions will prevent us from providing the requested services.

the performance of a contract or of pre-contractual measures;

the pursuit of a legitimate interest (Article 6.1(e) GDPR);

compliance with a legal or regulatory obligation.

The retention period for clients’ personal data depends on the purpose concerned. Clients’ personal data is retained for as long as necessary to deal with their request. Failing any such outcome, personal data is deleted within the timeframes recommended by the French data protection authority (CNIL), namely three years from the date of collection, subject to:

– any legal archiving rights and obligations;

– any obligation to retain certain data for evidentiary purposes and/or to anonymise it.

Clients’ personal data collected and processed for the purposes of performing our services is retained for the period necessary to manage the contractual relationship.

By way of exception, personal data required to establish evidence of a right or of a contract is archived in accordance with statutory provisions (5 or 10 years after the end of the business relationship, as applicable).

Your personal data is intended for FOURNOL & ASSOCIES.

Our internal departments: it is processed by staff within our various departments, such as the business development team or the team responsible for IT security.

Traffic analysis (such as Google Analytics).

We may sometimes need to allow our partners to process, on our behalf, the personal information we hold about you for the purposes set out in this policy or for any other reason required by law.

Clients’ personal data collected is hosted in France.

Where we use a service provider located outside the European Union, we undertake to verify that appropriate safeguards have been put in place to ensure that personal data benefits from an adequate level of protection.

We implement all organisational and technical measures necessary to ensure an appropriate level of security for your personal data, in particular to prevent any loss of confidentiality, integrity or availability.

We back up data on a regular basis.

In accordance with applicable law, you have the following rights:

A right of rectification: you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to have incomplete data concerning you completed, by providing a supplementary statement. Where you exercise this right, we undertake to notify any rectification to all recipients of your data.

A right to erasure: in certain cases, you have the right to obtain the erasure of your data. This is not, however, an absolute right, and we may retain such data for legal or legitimate reasons.

A right to restriction of processing: in certain cases, you have the right to obtain restriction of the processing of your data.

A right to data portability: you have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format, for your own use or to transmit it to a third party of your choice. This right applies only where the processing of your data is based on your consent or on a contract, or where the processing is carried out by automated means.

A right to object to processing: you have the right to object at any time to the processing of your data for processing based on our legitimate interest, on a task carried out in the public interest, or for direct marketing purposes. This is not an absolute right, and we may refuse your objection for legal or legitimate reasons.

The right to withdraw your consent at any time: you may withdraw your consent to the processing of your data where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.

Under the GDPR, the conditions for exercising these rights may vary depending on the legal basis for processing referred to in the first paragraph.

We will respond to any exercise of these rights as soon as possible and, in any event, within 30 days of receiving the request.

We reserve the right to:

request proof of the requester’s identity in the event of reasonable doubt as to their identity, in order to comply with our confidentiality obligations;

extend the response period by two months, informing the requester of such extension and the reasons for the delay within one month of receiving the request;

refuse to respond to a request to exercise these rights where it is considered abusive (in view of its number, repetitive or systematic nature).