Privacy policy

Last updated: 17 September 2026

This document sets out the conditions under which the personal data of users of the labigne-avocat.fr website are collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and with French law no. 78-17 of 6 January 1978, as amended, known as the « Informatique et Libertés » law.

1. Identity and contact details of the data controller

The data controller is:

Mickaël Labigne
Avocat at the Paris Bar
Business address: 3, rue du Louvre, 75001 Paris, France
Telephone: +33 (0)6 78 78 76 14
Email: mickael@labigne-avocat.fr

Mickaël Labigne practises in compliance with the Règlement Intérieur National of the avocat profession (RIN) and the Règlement Intérieur du Barreau de Paris (RIBP).

2. Purposes of processing

Personal data collected through the website are processed for the following purposes: responding to enquiries submitted through the contact form; managing the pre-contractual relationship and, where applicable, performing the engagement; complying with the firm’s legal and regulatory obligations, in particular anti-money laundering due diligence (articles L. 561-1 et seq. of the French Monetary and Financial Code) and the retention of documents relating to engagements.

3. Legal basis for processing

Processing is based, as the case may be, on one of the following legal grounds (article 6 GDPR):

• Consent of the data subject for the submission of the contact form (article 6.1.a);
• Performance of pre-contractual measures taken at the data subject’s request and, where applicable, performance of the legal assistance or advisory engagement (article 6.1.b);
• Compliance with legal obligations to which the data controller is subject (article 6.1.c), in particular accounting obligations, anti-money laundering due diligence obligations, and the retention obligations specific to the avocat profession;
• Legitimate interests of the firm (article 6.1.f), in particular fraud prevention, website security, and the defence of its rights in the event of a dispute.

4. Categories of data collected

Only data strictly necessary for the purposes pursued are collected:

• Identification data: surname, first name and, where applicable, the name of the company or entity represented;
• Contact data: email address, telephone number;
• Data relating to the stated need: nature of the legal enquiry, information provided in the free-text « Message » field.

No data falling within article 9 GDPR (special categories: health data, opinions, beliefs, and the like) is requested through the form. Any disclosure of such information by the user in the free-text field is a matter for the user alone and will, where applicable, be covered by legal professional privilege (see section 11).

5. Recipients of the data

The data collected are intended for Mickaël Labigne, as sole data controller, and, where applicable, for the firm’s associates, trainees and assistants, all of whom are bound by legal professional privilege. No data is sold, rented or transferred to third parties for commercial or marketing purposes.

Data may be disclosed to third parties only:

• In performance of a legal or regulatory obligation (judicial authority, Bar authority, tax administration, TRACFIN, on the terms provided for by law);
• In connection with an engagement entrusted to the firm, with the data subject’s agreement and strictly within the limits necessary to defend their interests (fellow lawyers, experts, competent authorities);
• To the firm’s technical processors (hosting provider, email provider), which act on the data controller’s instructions and are bound by contractual confidentiality and security obligations.

6. Retention periods

Prospective clients (persons who used the contact form without the enquiry leading to an engagement): data are retained for 3 years from the last contact, in accordance with CNIL recommendations, and are then deleted or anonymised.

Clients (persons who have entrusted an engagement to the firm): data relating to clients and matters are retained for 10 years from the end of the engagement, consistently with accounting obligations (article L. 123-22 of the French Commercial Code), anti-money laundering due diligence obligations (article L. 561-12 of the French Monetary and Financial Code) and the limitation periods applicable to an avocat’s professional liability (article 2224 of the French Civil Code). This period also takes account of the professional obligations to retain archives inherent in the practice of the profession.

Technical data and connection logs: retained in accordance with the periods provided for by the applicable legal provisions, in particular article L. 34-1 of the French Postal and Electronic Communications Code.

On expiry of these periods, the data are deleted or anonymised, subject to any longer statutory retention obligations that may apply.

7. Rights of data subjects

In accordance with articles 15 to 22 GDPR, every data subject has the following rights:

• Right of access to their data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (« right to be forgotten »), within the limits provided for by law;
• Right to restriction of processing;
• Right to portability of the data provided;
• Right to object to processing, on grounds relating to their particular situation;
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand;
• Right to issue post-mortem directives concerning the retention, erasure and communication of their data after their death (article 85 of the Informatique et Libertés law);
• Right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr).

These rights are exercised within the limits imposed by legal professional privilege and by statutory retention obligations (see section 11).

8. Contact details for exercising these rights

Any request relating to personal data may be sent:

By email to: mickael@labigne-avocat.fr
By post to: Mickaël Labigne, 3, rue du Louvre, 75001 Paris, France

The data subject may be required to provide proof of identity so that the request can be processed. A response is provided within one month of receipt of the request, which may be extended by two months given the complexity and number of requests, in accordance with article 12 GDPR.

9. Cookies and third-party services

The labigne-avocat.fr website uses cookies and third-party services for the following purposes:

• Cookies strictly necessary for the operation of the website (session, security, storage of consent preferences): exempt from prior consent;
• Audience measurement using Google Analytics (provided by Google Ireland Limited), intended to analyse website traffic. This service involves the processing of technical data, including the IP address and the pages viewed. A transfer of data outside the European Union may take place in this context; such transfer is governed by the standard contractual clauses adopted by the European Commission and by the appropriate safeguards provided for in articles 44 et seq. GDPR. These cookies are placed subject to the user’s prior consent;
• Fonts provided by Google Fonts (Google Ireland Limited), used to display the website;
• Online appointment booking using Calendly (Calendly LLC), allowing an initial discussion to be scheduled. The data provided on that occasion (name, email address and subject of the enquiry) are processed by that provider solely for the purposes of the appointment booking. A transfer of data outside the European Union may take place in this context; such transfer is governed by the standard contractual clauses adopted by the European Commission and by the appropriate safeguards provided for in articles 44 et seq. GDPR.

The user’s consent is collected by means of a banner allowing cookies to be accepted or refused, and preferences to be set by purpose. The user may change their preferences at any time. Details of the cookies placed are set out in the cookie policy, accessible from the website. This section is updated as the website and the consent management solution evolve.

10. Data hosting

The website and the data collected through the contact form are hosted by:

OVH SAS
2, rue Kellermann
59100 Roubaix, France
Telephone: +33 9 72 10 10 07

The data are stored on servers located within the European Union.

11. Legal professional privilege

In accordance with article 66-5 of French law no. 71-1130 of 31 December 1971 reforming certain judicial and legal professions, and with the provisions of the Règlement Intérieur National of the avocat profession, all correspondence and information exchanged between a client or prospective client and the firm, in connection with an engagement or with a view to legal advice, is covered by legal professional privilege.

Legal professional privilege is general, absolute and unlimited in time. It covers all advice given by an avocat to a client, all correspondence exchanged between the avocat and the client or between fellow lawyers, meeting notes and, more generally, all documents in the file.

In the event of a conflict between the exercise of a right provided for by the GDPR (in particular the rights of access, rectification or erasure) and the obligations arising from legal professional privilege or from the retention of documents in a file, legal professional privilege and professional obligations prevail, on the terms and within the limits provided for by law and case law. The avocat remains, in all circumstances, the guarantor of the confidentiality of the information entrusted to them.

12. Amendments to this policy

This privacy policy may be amended to reflect legislative, regulatory, case-law and technical developments. The date of last update appearing at the head of the document identifies the version in force. Users are invited to consult this page regularly.