Bonifassi Avocats

Confidentiality Policy


Confidentiality Policy



The purpose of this Confidentiality Policy is to inform users of the conditions under which their personal data is processed by the Firm. This Confidentiality Policy is liable to be amended in light of the statutory and regulatory context, the positions adopted by the regulatory authority (French Data Protection Agency – “CNIL”) and the services offered by the Firm via the website.

The Firm attaches considerable importance to respect for your privacy and the confidentiality of your personal data, and in the capacity of data controller, undertakes to process said data in compliance with the applicable laws and regulations, and in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and French Law no. 78-17 of 6 January 1978 on computerised data processing, personal data and civil liberties, as amended (“Data Protection Act”) (hereinafter jointly referred to as the “Regulations”).


  1. Data collected, purposes and legal bases

Your personal data may be collected when you send us a request via email to the following address: Disclosing personal data within this framework is voluntary. Your personal data will then be collected and processed in order to provide the information you have requested, and to answer your questions, on the basis of the legitimate interest of fulfilling the requests that are made to us. On the basis of your consent, your personal data may also be used for communication purposes in order to issue invitations to events.


  1. Recipients of your personal data

To the extent that is strictly necessary for managing your requests, as well as in compliance with the rules on legal professional privilege, only the following have access to personal data: (i) the members of the Firm and (ii) the external technical service providers that are involved in the supply of our services (website developers, hosts, etc.).


  1. Storage period of your personal data

The Firm only retains the personal data of the persons concerned for the time that is necessary for the operations for which it was collected, in compliance with the Regulations.

In this respect, the data concerning prospective clients is stored for three (3) years as from the last incoming contact with the Firm.


  1. Your rights

You have a right of access, rectification, restriction, erasure and objection with regard to the processing of your personal data for legitimate reasons, as well as a right to object to said data being used for communication purposes. Moreover, you have the right to define general and specific directives that state how you wish these rights to be exercised after your death.

To exercise these rights, please send us an email ( or a letter to the address stated in our Information Required by Law, and attach a copy of your ID.

The Firm is very respectful of the personal data that is entrusted to it. Nevertheless, if you believe that the processing of information that concerns you infringes your rights, you have the possibility of filing a complaint with the Commission Nationale de l’Informatique et des Libertés (French Data Protection Agency – “CNIL”).