Privacy policy
This privacy policy applies to all data collected and processed by the law firm VERTICE, a simplified joint stock company incorporated under the laws of France, with a share capital of €10,000, registered in the Lyon Trade and Companies Register under the identification number 983 248 964, whose registered office is located at 8, rue Président Carnot, 69002 Lyon (‘VERTICE’), with regard to your personal data, in your capacity as a customer, a prospect or a user of the website www.vertice.law (‘Site’).
This privacy policy specifies how personal data is collected and processed, in accordance with the French Law No. 78-17 of January 6th, 1978, on Information Technology, Files and Freedoms, and the European Regulation No. 2016/679 of April 27th, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (‘GDPR’).
VERTICE implements organizational, technical, software and physical measures in terms of digital security and confidentiality to ensure effective and efficient protection of your personal data.
Data processed by Vertice
All personal data provided by you to VERTICE in connection with your identity and/or the services you request from VERTICE may be used by VERTICE.
Personal data is collected for the purposes of performing the assignments you have entrusted to VERTICE. If you do not provide this data, VERTICE will not be able to answer to your requests or complaints, nor to perform the agreement entered into.
This data may be collected from the Site, during exchanges with VERTICE or in the context of the performance of the agreement binding you.
Purposes, legal bases and retention periods
VERTICE is required to process your personal data in accordance with current regulations in force and under the following conditions:
| Purposes of processing | Legal basis for processing | Retention period | ||
| Prospect relationship management | Management of contact requests, quote requests or appointment requests | Pre-contractual measures Legitimate interest | 3 years from the last contact with the prospect | |
| Customer relationship management | Creation of customer files in internal databases | Legitimate interest | For the duration of the relationship with VERTICE | |
| Preparation and approval of quotations / fee agreements | Performance of the agreement | |||
| Performance of services entrusted to VERTICE | ||||
| Contacting the customer’s preferred contact(s), responding to any questions raised by the customer | ||||
| If necessary, communication and transfer of personal data to VERTICE’s subcontractors for the purposes of providing the services entrusted | ||||
| Sending information emails (invitations to events organised by the firm or the profession, legal news) | Legitimate interest | Until your objection and for 3 years from your last contact with VERTICE | ||
| Customer relationship follow-up | Management and storage of files and deliverables submitted during the services provided by VERTICE | Legitimate interest | 5 years after the last service performed by VERTICE | |
| Accounting and billing management | Issuing and sending invoices | Legal obligation | 10 years from the end of the financial year for the retention of accounting documents and related supporting documents | |
| Monitoring invoicing and outstanding payments | ||||
| Management of any disputes (all categories of people) | Litigation management (pre-litigation / litigation) | Legitimate interest | For the duration of the dispute, in accordance with the applicable limitation periods | |
| Managing of requests relating to personal data | Management of requests related to the exercise of your rights regarding your personal data | Legal obligation | 3 years maximum from the request to exercise one or more rights | |
| Managing firm event registrations | Management of registration requests, login details, sending of materials and questionnaires | Legitimate interest | 1 year maximum from the end of the event | |
| Management of use of the Site and cookies | Management of access to and use of the Site | VERTICE’s legitimate interest | Cookies and other tracers stored on the user’s terminal equipment: 13 months (with no automatic extension during new visits) | |
| Site operation and optimization | ||||
| Information collected through cookies and tracers: 25 months from the date of their collection | ||||
Any purpose of processing other than those referred to above will be communicated to you by VERTICE prior to any processing of your data for this new purpose, it being specified that the compatibility of this new purpose with the pre-existing purposes will have been previously verified.
Data recipients
The main recipients of your data are the persons carrying out tasks or functions within VERTICE. They are authorized to access and process your personal data within the limits of their responsibilities and the performance of their duties.
In the context of the use and processing of your data, VERTICE may transmit your personal data to the following entities and/or subcontractors:
– VERTICE’s chartered accountant,
– Technical service providers (publisher of the business software used by VERTICE; backup server host; e-mail server provider).
Each of these entities receiving your data ensures the strict confidentiality of the data communicated to them and undertakes to process it only for the purposes of their intervention and in compliance with the regulations in force regarding data protection.
Your personal data may also be shared to allow VERTICE to:
– Comply with its legal and regulatory obligations,
– If required by law, to transmit your data to respond to complaints made against it and to comply with administrative and legal proceedings,
– If it is involved in a merger, acquisition, sale of assets or receivership, transfer or share personal data that is an integral part of its assets that may be transferred or shared in whole or in part. In this case, you will be informed prior to any transfer of your data to a third party.
Transfer outside the European Union
VERTICE processes your personal data mainly within the European Union.
When processing your personal data, VERTICE does not in principle transfer your personal data to service providers, companies or third-party structures established in a country outside the European Union.
If such a transfer to a country outside the European Union were to be considered, VERTICE will inform you of any such transfer, specifying the appropriate measures taken in advance to regulate the transfer and guarantee the security and confidentiality of your data. In any event, VERTICE ensures that the entities concerned are located in countries that provide adequate protection for personal data and, failing that, in countries that have adopted contractual clauses approved by the European Commission or any other mechanism recognized by the laws and regulations in force.
When VERTICE transfers your data outside the European Union, you may request, as part of the exercise of your rights, the adequacy decision rendered with regard to transfers to the country concerned or, failing that, a copy of the applicable contractual clauses as well as details of the location and the methods of storage of your transferred data.
Your rights (Learn more https://www.cnil.fr/fr/mes-demarches/les-droits-pour-maitriser-vos-donnees-personnelles)
In accordance with the French Data Protection Act and the GDPR, you have the following rights:
| Right of access to your data | (Article 15 RGPD) (Read more) |
| Right to rectify, update or complete your data | (Article 16 RGPD), (Read more) |
| Right to block or delete your personal data | (Article 17 RGPD), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or storage is prohibited (Read more) |
| Right to withdraw your consent at any time | (Article 13-2c RGPD), without affecting the lawfulness of the processing of your data based on your consent and already carried out before the withdrawal of this consent |
| The right to restrict the processing of your data under specific limited conditions | (Article 18 RGPD) (Read more) |
| Right to object to the processing of your data | (Article 21 RGPD) (Read more) |
| Right to portability of data provided to VERTICE | when your data is subject to automated processing based on your consent or on a contract (Article 20 RGPD) (Read more) |
| Right not to be subject to a decision based exclusively on automated processing of your data | likely to produce legal effects concerning you or significantly affecting you (Article 22 RGPD) |
| The right to define the fate of your data after your death and to choose whether VERTICE communicates (or does not communicate) your data to a third party designated in advance | (Read more). In the event of your death, and in the absence of any instructions from you, VERTICE undertakes to destroy your data, unless its retention is necessary for probative purposes or to comply with a legal obligation. |
| Right to know the location of the recipient of your data | When your data have been transferred outside the European Union, you have the right to obtain a copy of the standard contractual clause governing this transfer. |
| Right to lodge a complaint with a supervisory authority, in particular the French Commission Nationale de l’Informatique et des Libertés (CNIL) | You can lodge a complaint with the authority responsible for protecting personal data if you consider that your rights have not been respected (In France: the CNIL https://www.cnil.fr/fr/plaintes) |
You may exercise any of these rights by contacting VERTICE, in accordance with the legal conditions in force, and by enclosing proof of identity to your request:
- By email addressed to VERTICE: contact@vertice.law
- By post addressed to: 8, rue Président Carnot, 69002 Lyon
VERTICE will make every effort to inform you of the measures taken in response to your request within a maximum period of one (1) month from its receipt, this period being subject to be extended by two (2) months in the event of complexity or the number of requests submitted by you.
Cookies and trackers
In operating the Site, VERTICE uses cookies and tracers to ensure the proper functioning of the Site and to optimize your browsing and experience on the Site. These cookies and tracers do not require your express prior consent, as they are necessary for the proper operation of the Site.
These cookies are stored in your browser for a maximum period of 13 months.
You can refuse all cookies, simply and at any time, during your first visit to the Site and/or during any subsequent connection to the Site, directly from the navigation bar provided for this purpose.
Other non-essential cookies are only stored on your computer or mobile device after you have given your express consent by selecting each category of cookie on the navigation bar.
Changes and modification of the privacy policy
VERTICE reserves the right to make any changes, corrections and/or adaptations to this privacy policy at any time, in particular to comply with legal and regulatory requirements applicable to the protection of personal data and to ensure complete transparency regarding VERTICE’s use of your personal data.