Last updated: 09/23/2026

This privacy policy (hereinafter the "Privacy Policy") governs and informs you of how the Septem Avocats firm processes and protects personal information that may directly or indirectly identify you ("Personal Data" or "Data").

Septem Avocats attaches great importance to the protection and respect of privacy and is committed to complying with current regulations regarding personal data protection, in particular EU Regulation 2016/679 of April 27, 2016 (the "GDPR") and Law No. 78-17 of January 6, 1978, known as the Data Protection Act, in its latest version in force (hereinafter, collectively, the "Applicable Regulations").

 1.      Who is the data controller?

The data controller is Septem Avocats, an Association d'Avocats à Responsabilité Professionnelle Individuelle (AARPI) registered with the Paris Bar, under Paris Trade and Companies Register (RCS) number 106 078 561, with its registered office located at 27, rue des Francs Bourgeois 75004 Paris (hereinafter "Septem Avocats" or "we").

 2.      What personal data do we collect and why?

  2.1. Data collected when you interact with us

> Source of collection: Information requests sent via email, telephone, or social media; job applications for a position at Septem Avocats.

> Categories of Data: Surname, first name, company, job title, email address, telephone number, social media handle, CV where applicable.

> Purposes of processing: Responding to your contact requests; managing our social media (including moderating comments on these networks); processing job applications.

> Legal basis for processing: Our legitimate interest or your consent where required by Applicable Regulations.

> Data retention period: We retain your Data for the duration of the processing of your contact request or application, and for a maximum period of 2 years. Within the limits of Applicable Regulations, Septem Avocats may keep records and copies of all correspondence with you, including this personal Data.

  2.2. Data collected regarding our clients and prospects

> Source of collection: Contractual relationship with our clients; exchanges with our prospects and clients.

> Categories of Data: Identification data (surname, first name, profession, company); contact details (postal address, email address, telephone number); information on entrusted files; banking details where applicable.

> Purposes of processing: Managing our clientele, and in particular: executing assignments on behalf of our clients; storing data related to our clients' files; communicating with third parties involved in files; invoicing fees; managing our prospects; promoting the Septem Avocats firm, including sending alerts, newsletters, or event invitations; sending commercial solicitations and personalized outreach (within the limits of Applicable Regulations); managing disputes.

> Legal basis for processing: Our contractual and pre-contractual relationship, our legitimate interest, or your consent, where required by Applicable Regulations.

> Data retention period: We retain your Data for a maximum of five (5) years from the end of the contractual relationship or, where applicable, a maximum of five (5) years after your last contact with us.

  2.3. Data collected regarding our suppliers, subcontractors, and partners

> Source of collection: Contractual relationship with our partners, suppliers, and subcontractors.

> Categories of Data: Identification data (surname, first name, profession, company); contact details (postal address, email address, telephone number); banking details where applicable.

> Purposes of processing: Managing relationships with our partners, suppliers, and subcontractors; managing disputes.

> Legal basis for processing: Our contractual and pre-contractual relationship, our legitimate interest, or your consent, where required by Applicable Regulations.

> Data retention period: We retain your Data for a maximum of five (5) years from the end of the contractual relationship or, where applicable, a maximum of five (5) years after your last contact with us.

  2.4. Sensitive data

Septem Avocats may also need to process sensitive data as part of its activities. This includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning a person's sex life or sexual orientation.

This sensitive data is processed by Septem Avocats in strict compliance with Applicable Regulations, in particular Articles 9(2)(a) and 9(2)(f) of the GDPR.

 3. With whom do we share your Data?

Only persons duly authorized by Septem Avocats and bound by a duty of confidentiality toward Septem Avocats may access the collected Data.

These individuals may include internal staff (lawyers in charge of the relevant files, and where applicable, legal experts, administrative and internal/external audit staff, interns, etc.) as well as third parties contractually bound to Septem Avocats for the performance of a contract, acting as processors or service providers under the instruction of Septem Avocats, and who have access to personal Data solely to perform the mission entrusted to them by Septem Avocats.

Furthermore, your Data may be disclosed to any authority legally authorized to access it or to any third party to whom we are required to grant access to your Data. In such cases, Septem Avocats is not responsible for the conditions under which the personnel of these authorities access and use your Data.

Due to the heightened duty of confidentiality incumbent upon lawyers, no transfer, sale, or rental of this personal data may take place, regardless of the type of information.

As of today, Septem Avocats uses the following processors:

> Processors: Microsoft, via Office suite and OneDrive

> Purposes of processing: Professional messaging tool; Professional office suite; Hosting, backup, and data storage (servers in Europe)

 4. Where is your Data processed?

We may transfer your Data outside the European Economic Area. These transfers are based on adequacy decisions within the meaning of Article 45 of the GDPR or are governed by appropriate safeguards within the meaning of Article 46 of the GDPR, such as standard contractual clauses adopted by the European Commission.

 5. How do we ensure the security of your Data?

Septem Avocats implements all necessary and appropriate technical and organizational measures to protect and secure your personal data, ensuring its confidentiality and protecting it from any accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access.

Septem Avocats only uses service providers that apply a high level of security, and the data storage software used by Septem Avocats meets strict personal data protection requirements.

In accordance with Applicable Regulations, in the event of a proven breach of your personal data, and where such a breach is likely to pose a risk to your rights and freedoms, Septem Avocats will notify the competent supervisory authority. When required by Applicable Regulations, Septem Avocats will inform you of breaches concerning your personal data; this notification may be individual or general.

 6. What are your rights and how can you exercise them?

Within the limits set by Applicable Regulations, you may exercise the following rights:

 - Right of access and post-mortem directives: You may ask Septem Avocats for confirmation as to whether or not your Data is being processed, and to receive a copy of the Data concerning you that we hold. You also have the right to define directives regarding the fate of your personal Data after your death;

- Rectification, restriction, and erasure: You may ask Septem Avocats to rectify any inaccurate personal Data concerning you, as well as to complete any incomplete personal Data. You may also ask Septem Avocats to restrict the processing of or to erase your personal Data as soon as possible once Septem Avocats no longer needs to retain it;

- Objection and withdrawal of consent: You may object to the processing of your Data for legitimate reasons. You may at any time and at no cost object to receiving any marketing communications from us. You may also withdraw your consent whenever the processing of your Data is based on that consent;

- Portability: Upon request, Septem Avocats will provide you with the personal data you have shared with us and, where feasible, will transmit this data directly to another data controller of your choice in a portable format, provided the processing is based on your consent or a contract;

- Complaints: You also have the right to lodge a complaint with a competent supervisory authority, such as the Commission Nationale de l’Informatique et des Libertés (CNIL) in France via their website at www.cnil.fr

If you have any questions regarding the Privacy Policy or wish to exercise your rights, please submit your request in writing:

- By mail: Septem Avocats, 27 rue des Francs Bourgeois, 75004, Paris, France;

- By email: contact@septem-avocats.com.

The request must come from the data subject themselves, who must be able to verify their identity. If necessary, and in accordance with Applicable Regulations, a copy of your ID may be requested. Septem Avocats will endeavor to respond to your request within a reasonable timeframe and, in any event, within the time limits set by Applicable Regulations.

 7.        Cookies

Cookies are small files placed on your computer by the websites you visit. They are widely used to make websites work, to make them run more efficiently, or to provide information to the website owner.

How do we use cookies?

Browsing the Site may result in cookies being installed on your computer.

We use cookies to improve your browsing experience as well as the content and functionality of the Site.

You will find only one type of cookie on the Site: Functional and mandatory cookies that enable the proper functioning of the Site and improve the user experience.

How can you manage your cookies?

By default, web browsers accept the functional cookies present on the Site. You may choose to disable all cookies on the Site at any time, including functional cookies, by configuring or deleting cookies in your web browser settings.

However, if you choose to block functional cookies, your browsing experience on our Site may be impaired.

When cookies requiring your express consent may be placed on your device, a banner will request your consent for their use. Until Septem Avocats has obtained your express consent, these cookies cannot be placed or read on your device.

 8.       Updates

Please note that we may modify or update this Privacy Policy. We recommend that you check this page regularly to stay informed of any changes or updates to our Privacy Policy.

If the Privacy Policy is substantially modified, Septem Avocats will notify the individuals concerned.

‍