When you use the www.kermabon-avocat.com website (the "Website"), we may ask you to provide us with personal data about yourself, in order to use the services offered by KERMABON AVOCAT.
For the purposes of this policy, the term "personal data" refers to any information that allows an individual to be identified, which includes in particular your surname, first name, email address, telephone number, as well as any other information you may choose to share with us about yourself.
The purpose of this policy is to inform you about the means we use to collect your personal data, while strictly respecting your rights.
In this respect, please note that we comply, in the collection and management of your personal data, with Law No. 78-17 of 6 January 1978 relating to information technology, files, and freedoms, in its current version (the “Data Protection Law”), as well as with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (the “GDPR”).
The person responsible for collecting your personal data is Séphora Kermabon – Avocat, a lawyer registered with the Paris Bar, whose professional address is 47 bis, Avenue Bosquet – 75007 Paris, France.
In this policy, Séphora Kermabon – Avocat is referred to as “we,” and the terms “our” and “ours” refer to Séphora Kermabon – Avocat.
The law firm collects:
The legal basis for our collection of your personal data is as follows:
Your personal data is collected for one or more of the following purposes:
Access to your personal data will be granted to our company personnel, control services (notably the statutory auditor), and our subcontractors.
Public bodies may also be recipients of your personal data, exclusively to comply with our legal obligations, as well as judicial auxiliaries, ministerial officers, and organisations responsible for debt recovery.
Your personal data will not be sold, rented, or exchanged to the benefit of third parties.
(i) Regarding data related to the management of clients and prospects:
Your personal data is retained for the period strictly necessary to manage our business relationship with you.
With regard to any marketing operations directed at you, your data may be retained for a period of three (3) years following the end of the business relationship.
Data required to establish proof of a right or contract, to be retained pursuant to a legal obligation, will be kept for the period required by applicable law.
Personal data relating to a prospect, who is not a client, may be kept for a period of three (3) years from the date of collection or the last contact from the prospect.
At the end of this three (3) year period, we may contact you again to find out whether you wish to continue receiving commercial communications.
(ii) Regarding management of opt-out lists for marketing:
Information required to take your opt-out right into account is retained for a minimum of three (3) years from exercising your right to opt out.
(iii) Regarding cookies:
The retention period for cookies is indicated in our cookie policy.
We inform you that we take all necessary precautions, appropriate organisational and technical measures to preserve the security, integrity, and confidentiality of your personal data and, in particular, to prevent them from being altered, damaged, or accessed by unauthorised third parties.
We inform you that your data is stored and kept, for the entire duration of its retention, on the servers of Wix, some of whose servers are located in Europe and the United States.
The transfer of your data in this context is secured by a specific contract governing the transfer of your data outside the European Union, based on standard contractual clauses between a data controller and a processor approved by the European Commission, adapted to the specifics of the transfers required for each of the services provided by our subcontractors.
In accordance with the Data Protection Law and the GDPR, you have the right to obtain the communication and, where appropriate, the rectification or erasure of data concerning you by contacting us at the following email address: sk@kermabon-avocat.com.
It is reminded to individuals whose data is collected on the basis of our legitimate interest, as mentioned in Article 4, that they may object to the processing of their data at any time. However, we may continue to process data if there are compelling legitimate grounds for the processing which override your rights and freedoms, or if the processing is necessary for the establishment, exercise, or defence of our legal claims.
You have the right to set guidelines regarding the retention, erasure, and communication of your personal data after your death.
These guidelines may be general, meaning they cover all personal data concerning you. In this case, they must be registered with a certified digital trusted third party by the CNIL.
Guidelines may also be specific to the data processed by our company. In this case, they should be sent to us using the following contact details: sk@kermabon-avocat.com.
By providing us with such guidelines, you expressly consent to these instructions being stored, transmitted, and executed according to the methods stipulated herein.
You may appoint a person in your instructions to execute them. This person will then be entitled, upon your death, to access said guidelines and request that we implement them. In the absence of an appointed person, your heirs will be entitled to access your instructions upon your death and request that we carry them out.
You may modify or revoke your instructions at any time by writing to us at the aforementioned contact details.
You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the Commission Nationale Informatique et Libertés for France) in the Member State where your habitual residence, place of work, or the place where your rights were violated is located, if you consider that the processing of your personal data as described in this policy constitutes a violation of applicable law.
This remedy may be exercised without prejudice to any other remedy before an administrative or judicial authority. Indeed, you also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data subject to this policy constitutes a violation of applicable law.
You have the right to obtain restriction of the processing of your personal data in the following cases:
We reserve the right, at our sole discretion, to modify this policy, in whole or in part, at any time. These modifications will take effect as soon as the new policy is published. Your continued use of the Website after these modifications come into effect will constitute your acknowledgment and acceptance of the new policy. Otherwise, if you do not agree with this new policy, you should no longer access the Website.
This policy entered into force on 1 September 2026.