Privacy policy
1. Introduction
GODEFROY LARCHER Avocats privacy policy aims to inform the user about the data processing carried out, its purposes, recipients, data retention periods, and the rights you have. in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 1978 as amended (hereinafter the “Regulation”).
2. Data Controller
The data controller is AARPI GODEFROY LARCHER Avocats, represented by Maître Coralie Larcher (SELARLU LARCHER), registered with the RCS of Paris under number 938 621 497
12, rue du quatre-septembre
75002 PARIS
privacy@godefroylarcher.law
3. Personal Data Processed and Purposes
3.1 Types of Data Processing
Your personal data may be collected directly via the forms on the site or as part of our contractual or pre-contractual relationship. The table below outlines the different processing activities.
| Category of Individuals Concerned | Type of Personal Data Collected | Purpose of Processing | Legal Basis | Retention Period |
| Clients | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); case information; banking data. | Case management, billing, client relations, legal obligations | Contract execution, legal obligation | Duration of the contractual relationship + 5 years (10 years for accounting data) |
| Prospects (Potential clients) | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); case information. | Response to inquiries, prospecting, appointment scheduling | Legitimate interest of the firm | 3 years from the last contact |
| Recruitment Prospects | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); CV | Application analysis, recruitment management, contact | Legitimate interest of the firm | 2 years from the last contact with the candidate |
| Collaborators/Interns | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); administrative and/or contractual documents including identification and contact data; diplomas, banking details. | Contractual relationship, commission payments | Contractual execution | Duration of the contractual relationship + 5 years (10 years for accounting data) |
| Employees | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); administrative and/or contractual documents including identification and contact data; diplomas, banking details. | Employment contract, social security declarations, salary payment | Legal obligation, employment contract execution | Duration of the employment contract + 5 years |
| Service Providers | Identification data (name, surname, profession, company); contact data (postal address, email address, phone number); administrative and/or contractual documents including identification and contact data; banking details, billing data. | Management of contractual relationships, accounting | Contract execution, legal obligation | Duration of the contract + 10 years (accounting obligations) |
3.2 Sensitive Data
GODEFROY LARCHER Avocats may also process data defined as sensitive under the GDPR, in the course of its activities. This includes information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, health data, or data concerning an individual’s sexual life or sexual orientation.
These sensitive data are processed by GODEFROY LARCHER Avocats in strict compliance with the Regulation, particularly Articles 9.2.a) and 9.2.f) of the GDPR.
4. Recipients of the Data
The data is exclusively intended for authorized personnel of the firm (partner lawyers and/or collaborators, interns, assistants, legal staff).
may be shared with:
- Our technical service providers (hosting services, software solutions), solely for the purpose of fulfilling their tasks as listed below:
| Service Provider Name | Role | Purpose of Processing |
| FBI | IT service provider | Billing software – Servers in France |
| Fiduci | Chartered accountant | Billing and accounting – France |
| Expensya – Medius | IT service provider | Expense management – Europe |
| Microsoft (Office, One Drive) | IT service provider | Professional email tools; office equipment; data hosting, backup, and storage (servers in Europe) |
| ArturIn | Marketing & Communications | Newsletter sending tool |
| Infomaniak | IT service provider | Web hosting and domain provision (email) – Servers in Switzerland |
- Our legal advisors and/or colleagues (chartered accountants, bailiffs, fellow lawyers, etc.), only for the execution of our advisory services;
- Judicial, administrative, or professional authorities, in accordance with the Regulation and/or any obligations to which GODEFROY LARCHER Avocats is subject.
- It is reminded that our lawyer’s ethics require us to maintain strict confidentiality.
5. Transfer Outside the EU
No transfer of your personal data outside the European Union is made without adequate safeguards in accordance with the GDPR (adequacy decision, standard contractual clauses).
6. Data Security
The firm implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data.
In accordance with the Regulation, GODEFROY LARCHER Avocats will notify the competent supervisory authority in the event of a confirmed data breach likely to result in a risk to your rights and freedoms.
If required by the Regulation, the firm will inform you of any data breaches concerning your personal data, either individually or generally.
7. Your Rights
You have the following rights:
- Right of access, rectification, and deletion of your personal data;
- Right to restrict processing;
- Right to object (especially for marketing purposes);
- Right to data portability;
- Right to withdraw consent at any time, where applicable;
- Right to lodge a complaint with the CNIL.
You can exercise your rights by contacting us at: privacy@godefroylarcher.law.
The request must come from the concerned individual, who must be able to prove their identity. In accordance with the Regulation, a copy of your identity document may be requested. The firm will ensure a reasonable response to your request, and in any case, within the time limits set by the Regulation.
8. Cookies
The site uses cookies that are strictly necessary for its operation. No tracking or profiling cookies are set without your prior consent. To learn more, refer to our Cookie Policy.
The site www.godefroylarcher.com uses cookies to ensure its proper functioning and, subject to your consent, to measure its audience.
Types of cookies used:
- Technical cookies (mandatory): Necessary for the site’s proper functioning.
- Audience measurement cookies (Google Analytics or equivalent): Used to understand site usage and performance to improve functionality. These cookies are only installed with your prior consent.
Cookie Management:
On your first visit, a banner informs you of the presence of cookies. You may accept or refuse their placement.
You can also configure your browser to block some or all cookies, but certain site features may no longer function properly.
9. Policy Update
This policy may be modified at any time. Last update: April 20, 2025.