Privacy policy
SophiaLex attaches particular importance to the protection of personal data and to the confidentiality of the information communicated to it.
The purpose of this policy is to inform users of the website www.sophialex.fr of the conditions under which their personal data may be collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978, known as the «Informatique et Libertés» Act.
1. Data controller
The controller of the personal data processing described in this policy is:
SophiaLex, a French simplified joint-stock company (SAS), registered with the Paris RCS under number 824 813 646.
Address: 46 rue de Clichy, 75009 Paris, France
Email: contact@sophialex.fr
Telephone: +33 (0)1 83 81 92 00
2. Personal data collected
Browsing the SophiaLex website does not require any registration or voluntary disclosure of personal data.
However, certain data may be processed in the following situations:
- Browsing the website: technical data, in particular the IP address and the date and time of connection, may be recorded by the hosting provider to ensure the operation and security of the website.
- Contact requests: when a person contacts SophiaLex by email or telephone, the firm may process the data provided on that occasion, in particular their identity, contact details and the information required to handle their request.
- Unsolicited applications: when a person sends an application to the firm, the information and documents provided may be processed for the purpose of reviewing that application.
Providing this information is optional, but the absence of the data required to handle a request may prevent the firm from responding to it effectively.
3. Purposes and legal bases of processing
Personal data is processed exclusively for the following purposes:
- Ensuring the operation and security of the website: on the basis of SophiaLex’s legitimate interest in ensuring the security of its website and IT systems.
- Responding to requests sent to the firm: on the basis of the firm’s legitimate interest in following up on the requests received or, where the request concerns an individual considering instructing the firm, the performance of pre-contractual measures taken at their request.
- Reviewing applications received: on the basis of pre-contractual measures or the firm’s legitimate interest in managing its recruitment.
Any processing carried out in connection with the handling of matters entrusted to the firm may be the subject of additional information provided to the data subjects concerned.
4. Recipients of the data
Personal data is accessible only to authorised members of SophiaLex, to the extent necessary for the performance of their duties.
It may also be accessible to technical service providers acting on behalf of the firm, in particular for website hosting and email services, to the extent necessary for their services and subject to the applicable confidentiality safeguards.
SophiaLex does not sell the personal data it collects.
Information covered by legal professional privilege is processed in accordance with the legal and ethical provisions applicable to the legal profession.
5. Retention periods
Personal data is retained for a defined period depending on the nature of the information concerned and the purposes for which it is processed.
Data relating to requests sent to the firm is retained until those requests have been fully handled and, where applicable, for the time necessary to follow them up.
Where exchanges lead to the opening of a file, the data is retained in accordance with the rules applicable to the management and archiving of the firm’s files.
Data relating to applications is retained while they are being reviewed and, where applicable, under the conditions applicable to the retention of unsuccessful applications.
Technical data relating to browsing the website is retained for a period in accordance with the applicable regulations.
Certain data may be retained for longer where this is necessary to comply with a legal obligation or to establish, exercise or defend legal claims, within the limits of the legally applicable time limits.
6. Security and confidentiality
SophiaLex implements appropriate technical and organisational measures to preserve the security and confidentiality of personal data and to prevent unauthorised access to, alteration, disclosure or loss of such data.
These measures take into account the nature of the data processed and the specific requirements of the legal profession.
7. Rights of data subjects
In accordance with the applicable regulations, every data subject has, under the conditions provided for by law, the right of access, rectification, erasure, restriction of processing, objection and, where the conditions are met, the right to data portability.
These rights may be exercised by sending a request to:
or by post to:
SophiaLex – 46 rue de Clichy, 75009 Paris, France.
Every data subject also has the right to lodge a complaint with the French data protection authority (CNIL), in particular via its website: www.cnil.fr.
8. Cookies and other trackers
The SophiaLex website does not use advertising cookies or trackers intended for user profiling.
9. Changes to this privacy policy
SophiaLex reserves the right to amend this privacy policy to take account of any legal, regulatory or technical developments.
The applicable version is the one published on the website on the date it is consulted.