1. Data Controller
The data controller for personal data collected on the website elhalfi-avocat.fr is:
Maître Nourdine El Halfi
Member of the Paris Bar
11 boulevard de Sébastopol, 75001 Paris, France
Email: contact@elhalfi-avocat.fr
2. Data Collected
This website collects only the data you voluntarily submit via the contact form:
- Full name
- Email address
- Subject of the enquiry
- Content of the message
No sensitive data within the meaning of Article 9 GDPR is requested via this form. You are advised not to transmit confidential information regarding your legal situation before a formal lawyer-client relationship has been established.
3. Purpose and Legal Basis for Processing
Purpose
Data collected via the contact form is processed solely for the purpose of responding to your enquiry and, where applicable, initiating a professional lawyer-client relationship.
Legal basis
Processing is based on two legal grounds under Article 6 GDPR:
- Your consent (Art. 6(1)(a)), given by ticking the checkbox on the contact form
- The legitimate interest of the firm (Art. 6(1)(f)), consisting in responding to incoming professional enquiries
4. Retention Period
Data collected via the contact form is retained for a maximum of 3 years from the date of last contact, in line with the recommendations of the French data protection authority (CNIL) for prospective client data.
If a lawyer-client relationship is established, data is retained in accordance with the legal obligations applicable to lawyers and the professional rules of the Paris Bar.
5. Recipients of Data
Data collected is intended solely for Maître Nourdine El Halfi. It is not sold, transferred or disclosed to any third party for commercial purposes.
Data transits through the servers of the website hosting provider, Netlify, Inc., under its privacy policy. This provider acts as a data processor under the GDPR and does not process your data for its own purposes.
6. Legal Professional Privilege
Any information transmitted to Maître Nourdine El Halfi in the context of a consultation or a lawyer-client relationship is protected by legal professional privilege, in accordance with Article 66-5 of the Law of 31 December 1971 and the professional rules of the Paris Bar. This privilege is absolute, general and unlimited in time.
The processing of such information is carried out in strict compliance with the legal professional privilege applicable to the legal profession, which provides an additional layer of protection beyond the requirements of the GDPR alone.
7. Your Rights
Under Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended, you have the following rights in respect of your personal data:
- Right of access — to obtain confirmation that your data is being processed and to receive a copy
- Right to rectification — to have inaccurate or incomplete data corrected
- Right to erasure — to request deletion of your data, subject to applicable legal obligations
- Right to object — to object to processing based on legitimate interest
- Right to restriction — to request temporary suspension of processing
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to withdraw consent — to withdraw consent at any time, without affecting the lawfulness of prior processing
To exercise these rights, please send your request by email to: contact@elhalfi-avocat.fr. A response will be provided within one month of receipt of your request.
8. Right to Lodge a Complaint
If you consider that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the French data protection authority (CNIL):
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France
Website: www.cnil.fr
9. Cookies and Trackers
The website elhalfi-avocat.fr does not place any advertising cookies or audience-measurement (analytics) cookies. No profiling or behavioural analytics tool is used.
The use of Google Fonts for typography loading may result in a technical request to Google's servers, which may collect your IP address. This processing is governed by Google's own privacy policy.
In accordance with the CNIL recommendation of 17 September 2020, any non-essential cookie introduced in the future would only be placed after prior collection of your consent.
10. Updates to This Policy
This Privacy Policy may be updated at any time to reflect changes in applicable regulations or the firm's practices. The date of the last update is shown at the top of this page. You are advised to consult it regularly.