Privacy and
Data Policy

PRIVACY & PERSONAL DATA PROTECTION POLICY

I. General conditions

SIDE performs personal data processing in compliance with the current regulation and standards and in particular with EU Regulation n°2016/679 known as the “GDPR”.

GDPR defines “personal data” as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (hereinafter “PD”).

The DP Controller is the SIDE – Me ALLAN de LAVENNE, 32 rue Fortuny, 75017 Paris.

The person to contact for any question relative to your PD and to exercise your rights is SIDE’s Data Protection Officer: Me Christine ALLAN de LAVENNE Email: cal@side-law.com Téléphone : +33 (0)1 47 66 56 45 (hereinafter “DPO”).

SIDE primarily processes PD of its staff, clients, prospect clients and partners.

This data primarily includes identification data and data related to personal and professional life (marital status, profession,…) as well as financial information  (bank information, etc.) and location data (IP, logs,…).

SIDE collects DP’s at various occasions described hereunder.

Each PD processing activity by SIDE pursues a specific purpose under specific legal basis and implies a specific conservation period as described below under “II. Specific Conditions”.

SIDE protects the PD through organisational and technological measures to guarantee their security, confidentiality, integrity and availability and resilience of processing systems and services, in compliance with legal requirements.

The recipients of these PD are SIDE and its employees and subordinates and, only if needed to fulfil the relevant purpose of the processing activity, professional partners/providers under contract with SIDE.

These recipients guarantee the same level of protection as SIDE.

In some cases, those recipients are located in the USA.

SIDE chooses third-party agents with care and works to ensure they uphold GDPR compliant privacy and security standards. Third parties located in the USA are compliant with the EU-U.S. Privacy Shield Framework.

Within conditions stated by current legislation and GDPR in particular, individuals hold on their PD processed by SIDE, the rights to:

  • request from SIDE access to and rectification or erasure of personal data or restriction of processing or to object to processing as well as the right to data portability;
  • and at any time, oppose to the use their PD for direct marketing purposes.

To exercise one or more of these rights, SIDE must be contacted in writing using the DPO contact details stated above.

Individuals also hold the right to submit a complaint to a supervisory authority, such as the CNPD.

II. Specific conditions to each processing

A) When you provide SIDE with your PD on the page “Contact us” of SIDE’s website:

On SIDE’s website www.side-law.com (hereinafter “the Website”) you may ask questions or request an appointment.

The PD here provided is processed by SIDE with your formal consent on the legal basis of GDPR provision 6 §1 a).

The purpose of this processing is to answer your questions and/or requests submitted on the Website.

The PD will be retained for the time needed to respond to your questions and/or requests or until you withdraw of your consent which ever comes first.

At any time, you can withdraw your consent regarding this processing by clicking on the following link “delete my personal data from this file” also contained in every mailing related to this processing or by submitting a written request to the DPO stated above.

The withdrawal of consent will not affect the legality of the processing prior to the withdrawal date.

Please note that the failure to provide the PD required on this page may prevent SIDE from fulfilling the above-mentioned purpose and therefore from responding to your question and/or request.

B) When you provide SIDE with your PD during an event organized by SIDE

SIDE organises information session, training and various events (hereinafter “the Event”). On this occasion you are invited to provide PD on various documents and/or media dedicated to the Event (hereinafter “ the Document”).

Your PD here provided is processed by SIDE on the legal basis of GDPR provision 6 §1 a).

The purpose of this processing is to allow SIDE to provide you with information on the Event and it’s follow up.

The PD will be retained for the time needed to implement this purpose or until you withdraw of your consent which ever comes first.

At any time, you can withdraw your consent regarding this processing by clicking on the following link “delete my personal data from this file” also contained in every mailing related to this processing or by submitting a written request to the DPO stated above.

The withdrawal of consent will not affect the legality of the processing prior to the withdrawal date.

Please note that the failure to provide the PD required on this page may prevent SIDE from fulfilling the above-mentioned purpose and therefore from providing you information on the Event.

C) When you provide your PD to SIDE in the framework of its legal services

Within the framework of the legal services you obtain from SIDE (hereinafter “the Services”) you provide some PD which are necessary to execute the contrat you hold with SIDE regarding these services (hereinafter « the Contract”) as well as for the fullfilment of legal obligations held by SIDE.

Your data is processed by SIDE on the legal basis of GDPR provision 6 §1 b) and c).

The purpose of this processing is to allow SIDE to perform the Services and Contract or in order to take necessary steps prior to entering into such contracts as well as to fullfill SIDE’s legal obligations.

The PD will be retained for the time needed to perform the Services and Contract and for the duration of the legal statuts of limitation related thereto and for the time SIDE’s legal obligations exist.

Individual rights applicable to these processing activities are those above mentioned under “General Conditions”.

D) When you explicitly agree to receive newsletter and direct marketing from SIDE:

When on SIDE’s Webiste or any other page or any other SIDE document you check the box :

I formally consent to SIDE’s processing of my personal data provided herein in order to send me newsletters and direct marketing related to its activities. I acknowledge that I hold the right to oppose, at any time, to such use by means stated in SIDE’s Privacy Policy.

you give formal agreement to SIDE to process your PD for direct marketing purposes.

Your data is processed by SIDE with your formal consent on the legal basis of GDPR provision 6 §1 a).

The PD will be retained for the entire duration of existence of SIDE or until you withdraw of your consent which ever comes first.

At any time, you can withdraw your consent regarding this processing by clicking on the following link “delete my personal data from this filealso contained in every mailing related to this processing or by submitting a written request to the DPO stated above.

The withdrawal of consent will not affect the legality of the processing prior to the withdrawal date.

Please note that the failure to provide the PD required along with this box may prevent SIDE from fulfilling the above-mentioned purpose and therefore from sending you information and offers related to SIDE’s activities.