Preamble

This Privacy Policy explains how Alex Ebangué processes personal data in connection with the website accessible at https://emklegal.fr/ (the “Website”) and communications initiated through the contact details made available on the Website.

Alex Ebangué acts as data controller for the processing described in this Privacy Policy.

Personal data is processed in accordance with applicable data protection laws, including Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and French Law No. 78-17 of 6 January 1978, as amended (the “French Data Protection Act”).

This Privacy Policy may be updated from time to time, in particular to reflect changes in applicable law, regulatory guidance, the Website or the manner in which personal data is processed. The version available on the Website is the current version.

This Privacy Policy has been drawn up in French and translated into English for information purposes. In the event of any inconsistency between the French and English versions, the French version shall prevail.

Article 1 – Identity and Contact Details of the Data Controller

The data controller is:

Alex Ebangué
French-qualified lawyer, admitted to the Paris Bar
Practising under the professional name EMK Legal

45 avenue Montaigne
75008 Paris
France

Email: aebangue@emklegal.fr

Any request concerning the processing of personal data or the exercise of data protection rights may be sent to the contact details above.

Article 2 – Personal Data Processed

The Website does not contain an automated contact form.

When You contact Alex Ebangué by email or telephone using the contact details available on the Website, the personal data processed may include:

  • your first and last name;
  • your professional contact details, including your email address and telephone number;
  • your position, company or organisation;
  • the content of your correspondence and any information You choose to provide in connection with your request; and
  • information necessary to assess, respond to or follow up on your request.

You are invited not to provide personal data that is unnecessary for the purpose of your initial request and, in particular, not to send sensitive or confidential information unless necessary and an appropriate means of communication has been agreed.

When You access the Website, certain technical data may also be processed by or on behalf of Alex Ebangué, such as IP address, connection date and time, browser or device information, and technical logs, where necessary for the operation, security and maintenance of the Website.

Article 3 – Purposes and Legal Bases

Personal data may be processed for the following purposes:

Responding to enquiries and potential engagements

Personal data provided when You contact Alex Ebangué may be processed in order to review and respond to your enquiry, communicate with You and, where relevant, consider a potential engagement.

Where your request concerns a potential engagement, such processing is based on the steps taken at your request prior to entering into a contract.

For general enquiries that do not concern a potential contractual relationship, processing may be based on the legitimate interest in receiving, managing and responding to professional communications.

Managing an engagement

Where an attorney-client relationship is subsequently established, personal data may be processed to perform the relevant engagement and manage the resulting professional relationship.

Such processing is based, as applicable, on the performance of the relevant contractual relationship and on compliance with applicable legal and professional obligations.

Compliance with legal and professional obligations

Personal data may be processed where necessary to comply with legal, regulatory, accounting, tax or professional obligations applicable to Alex Ebangué as an attorney.

Such processing is based on compliance with applicable legal obligations.

Operation and security of the Website

Technical data may be processed where necessary to operate, maintain and secure the Website, prevent or investigate security incidents and ensure its technical availability.

Such processing is based on the legitimate interest in maintaining the security and proper functioning of the Website.

Article 4 – Recipients of Personal Data

Personal data is accessible only to persons or entities that need access for the purposes described in this Privacy Policy.

Depending on the circumstances, recipients may include:

  • Alex Ebangué;
  • technical service providers acting on his behalf, including hosting, email and IT service providers;
  • professional advisers or service providers where their involvement is necessary;
  • competent courts, regulatory bodies, professional bodies, public authorities or other recipients where disclosure is required or permitted by applicable law or professional rules.

Service providers processing personal data on behalf of Alex Ebangué are required, where applicable, to process such data in accordance with his instructions and applicable data protection requirements.

Article 5 – International Transfers

[TO BE CONFIRMED BEFORE PUBLICATION, BASED ON THE HOSTING, EMAIL, ANALYTICS AND OTHER TECHNICAL PROVIDERS USED BY THE WEBSITE.]

If personal data is transferred outside the European Economic Area to a country that does not benefit from an adequacy decision of the European Commission, such transfer will be subject to an appropriate transfer mechanism under applicable data protection law, such as the European Commission’s standard contractual clauses, together with any additional safeguards required in the circumstances.

Further information regarding the safeguards applicable to a particular transfer may be requested using the contact details set out in Article 1.

Article 6 – Data Retention

Personal data is retained only for as long as necessary for the purposes for which it is processed, subject to applicable legal and professional retention requirements.

In particular:

  • where an enquiry does not result in an engagement, personal data relating to the enquiry may be retained for up to three years following the last relevant contact, unless a shorter or longer period is justified by the circumstances or by an applicable legal or professional requirement;
  • where an engagement is established, relevant personal data is retained for the duration of the professional relationship and thereafter for the periods required by applicable legal, accounting, tax and professional obligations and applicable limitation periods;
  • technical logs and security data are retained only for the period reasonably necessary for security, troubleshooting and technical administration, subject to the retention periods applied by the relevant technical providers.

Where data no longer needs to remain actively available but must be retained in order to comply with a legal obligation or to establish, exercise or defend legal claims, it may be archived with appropriately restricted access for the relevant period.

Article 7 – Cookies and Similar Technologies

The Website may use cookies or similar technologies that are strictly necessary for its operation and security.

[TO BE COMPLETED BEFORE PUBLICATION IF ANY ANALYTICS, ADVERTISING OR OTHER NON-ESSENTIAL TRACKERS ARE USED.]

Where a cookie or similar tracker requires the User’s consent under applicable law, it will not be placed or accessed until the User has given the required consent, and the User will be able to withdraw or modify that consent through the Website’s cookie management mechanism.

Certain audience-measurement tools may, where all applicable legal conditions are satisfied, be used without consent.

Further information, where relevant, will be provided through the Website’s cookie management mechanism and/or Cookie Policy.

Article 8 – Your Rights

Subject to the conditions and limitations provided by applicable law, You may have the following rights in relation to your personal data:

  • Right of access: obtain confirmation as to whether personal data concerning You is being processed and, where applicable, obtain access to that data.
  • Right to rectification: request the correction of inaccurate personal data or completion of incomplete personal data.
  • Right to erasure: request deletion of personal data in the circumstances provided for by applicable law.
  • Right to restriction of processing: request restriction of processing in the circumstances provided for by applicable law.
  • Right to data portability: receive certain personal data You have provided in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and is carried out by automated means.
  • Right to object: where processing is based on legitimate interests, object to such processing on grounds relating to your particular situation.
  • Right to withdraw consent: withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal.

You may exercise these rights by contacting:

Email: aebangue@emklegal.fr
or
Alex Ebangué
45 avenue Montaigne
75008 Paris
France

Requests will be handled without undue delay and, in principle, within one month of receipt. Where permitted by the GDPR, that period may be extended by up to two additional months depending on the complexity and number of requests. You will be informed of any such extension and the reasons for it.

Where there are reasonable doubts concerning the identity of the person making a request, additional information reasonably necessary to confirm identity may be requested.

You also have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)
3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Website: https://www.cnil.fr/

Under the French Data Protection Act, You may also define instructions concerning the retention, erasure and communication of your personal data after your death.

Article 9 – Security

Alex Ebangué implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the nature of the data processed, the purposes of the processing and the risks involved.

No internet-based service can provide an absolute guarantee of security. Appropriate measures are therefore reviewed and adapted where necessary having regard to the relevant risks and technical environment.

Article 10 – Automated Decision-Making

No decision producing legal effects or similarly significantly affecting Users is made solely by automated means through the Website, and the Website does not carry out profiling for such purposes.

Article 11 – Contact

For any question concerning this Privacy Policy or the processing of personal data, You may contact:

Alex Ebangué
Email: aebangue@emklegal.fr
45 avenue Montaigne
75008 Paris
France