Privacy policy

The data controller for data collected on the website www.cyplom.com and its subdomains is Cyplom Avocats SAS, a law firm registered with the Paris Bar.

• Company name:Cyplom Avocats SAS, a simplified joint-stock company with a capital of €15,000
• Registration:Paris Trade and Companies Register (RCS), No. 892 318 486
• Registered office:103 rue La Boétie, 75008 Paris
• Phone:01 84 20 73 25
• Personal data: dpo@cyplom.com

We only collect data that is necessary for the purposes described in this policy. It comes from two sources:

• The data you provide to us: when you fill out a contact or appointment booking form, subscribe to our newsletter, or create an account on our online tools. This includes, for example, your first and last name, email address, phone number, company, and the content of your message.
• Browsing data: collected automatically during your visit, particularly through cookies: IP address, browser and device type, pages viewed, and the date and duration of your visit.

The information you entrust to us when requesting advice is covered by attorney-client privilege.

Each processing activity is based on a legal ground provided for by the General Data Protection Regulation (GDPR):

Your data is kept for the time necessary for the purpose for which it was collected, then archived for the periods required by law or necessary for the defense of our rights. It is then deleted or anonymized.

• Contact requests: the time required to process your request and follow up on it.
• Client files: For the duration of the relationship, and subsequently for the duration of legal limitation periods and retention periods specific to the legal profession.
• Newsletter: Until you unsubscribe, which is possible at any time via the link included in every email.
• Audience measurement cookies: A maximum of 13 months, in accordance with CNIL recommendations.
• Advertising measurement cookies: A maximum of 90 days.

Your data is intended for the firm's lawyers and staff authorized to process it. It may be shared with our technical service providers, who act on our instructions and solely to provide their services:

• Hosting for the website www.cyplom.com: Webflow, Inc. (San Francisco, United States), on Amazon Web Services servers.
• Hosting for app.cyplom.com: O2switch (Clermont-Ferrand, France).
• Audience measurement: Google (Google Analytics).
• Advertising measurement: Google (Google Ads).

It may also be disclosed to public authorities when required by law, or to a successor in the event of a sale or reorganization of the firm, subject to prior notification.

Some of our service providers (Webflow, Amazon Web Services, Google) are based in the United States. These transfers are governed by the safeguards provided by the GDPR, such as the EU–U.S. Data Privacy Framework or standard contractual clauses adopted by the European Commission.

A cookie is a small file placed on your device when you visit the site. We use four categories of cookies:

• Essential cookies: essential for the site to function and for remembering your cookie choices. They do not require your consent.
• Functionality cookies: memorization of your preferences, such as display language.
• Audience measurement cookies (Google Analytics): traffic statistics, with anonymization of your IP address. These are subject to your consent.
• Advertising measurement cookies (Google Ads): they indicate whether a visit resulting from one of our ads leads to a contact or an appointment. No personalized advertising is displayed on this basis. They are subject to your consent.

You can accept, refuse, or withdraw your consent at any time via the cookie banner or your browser settings. Refusing non-essential cookies will not prevent you from browsing the site.

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Access: obtain confirmation that we are processing your data and receive a copy of it.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: request the deletion of your data, subject to legal retention obligations.
• Restriction: request a temporary freeze on the use of your data.
• Objection: object to processing based on our legitimate interest and, at any time, to direct marketing.
• Portability: receive the data you have provided to us in a structured, machine-readable format.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing already carried out.
• Post-mortem directives: define the fate of your data after your death.

To exercise your rights, write to dpo@cyplom.com or by mail to Cyplom Avocats SAS, 103 rue La Boétie, 75008 Paris. We will respond within one month, which may be extended by two months if your request is complex. In case of reasonable doubt regarding your identity, we may ask for proof of identity.

If you believe your rights are not being respected, you may file a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, or disclosure: encrypted connections (HTTPS), access restricted to authorized personnel only, and compliance with the professional secrecy to which the firm's lawyers are bound.

The site contains links to third-party sites (social networks, official sources, media). We have no control over these sites: we encourage you to consult their own privacy policies.

We may update this policy to reflect changes in the law or our services. The date of the last update is shown at the top of this page.