Foreword
Boury, Tallon & Associés takes the protection of your privacy and personal data extremely seriously.
Boury, Tallon & Associés undertakes to implement appropriate measures to ensure the protection, confidentiality and security of the personal data of any data subject from whom it collects data, in accordance with legal requirements, in particular European Regulation 2016/679 on the Protection of Personal Data (“GDPR”) and national laws applicable within the European Union.
The purpose of this privacy policy (hereinafter the “Data Protection Policy”) is to inform you about the commitments made by Boury, Tallon & Associés to ensure the protection, confidentiality and security of your personal data.
Scope
This Data Protection Policy applies to all processing of personal data relative to external natural persons (hereinafter “You”) that Boury, Tallon & Associés implements within the European Union in the capacity of data controller.
Definitions
“Processing”: any operation(s) performed on personal data, including collection, recording, use, disclosure by transmission.
“Controller”: the legal entity that determines the purposes of processing and the means implemented.
“Subcontractor”: the legal entity that processes personal data on behalf of the controller.
The Data Collected
Boury, Tallon & Associés endeavors to only collect and process personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which they were collected. Boury, Tallon & Associés shall take all useful measures to ensure that your data are accurate, complete and, where necessary, updated.
We process personal data that you communicate to us when you contact us to:
- take part in events or public relations activities organized by Boury, Tallon & Associés
- apply for a job with Boury, Tallon & Associés
- ask us a question or lodge a complaint.
In the these instances, Boury, Tallon & Associés may collect and process the following personal data:
- Your identity: first name, last name, preferred form of address, date of birth, job title and the name of your company, committee or political party
- Your contact details: postal address, e-mail and phone number
- Your job application documents: CV and cover letter.
When you fill out the appropriate forms, the mandatory nature of a field is generally indicated by an asterisk. If you fail to fill in a mandatory field or if Boury, Tallon & Associés deems that a response is not acceptable, Boury, Tallon & Associés may decide not to process your request.
You agree to provide Boury, Tallon & Associés with personal data about yourself that are current, accurate, complete and unequivocal.
The Purposes of Data Collection
Boury, Tallon & Associés undertakes to collect and process your personal data in a fair and lawful manner.
Boury, Tallon & Associés will only process your personal data in the pursuit of specified, explicit and legitimate purposes.
In particular, your data may be processed for the following purposes:
- To send you invitations to events that we are hosting, to provide you with advice or to put you in contact with other parties, in which case the legal grounds for processing is that it is necessary for the legitimate interests pursued by Boury, Tallon & Associés.
- To follow up on your job application, in which case the legal grounds for processing is that it is necessary for the legitimate interests pursued by Boury, Tallon & Associés, specifically our firm’s interest in answering your application and finding suitable candidates to fill open positions at Boury, Tallon & Associés.
Information to be Provided to You When Your Personal Data are Collected
In accordance with the French law on data processing, data files and individual liberties (Loi Informatique et Libertés), Boury, Tallon & Associés undertakes to inform you about the processing of your personal data.
Boury, Tallon & Associés will provide you with the following information, presented in a clear manner:
- the identity of the data controller responsible for the processing of your personal data (in this case, Boury, Tallon & Associés)
- the purpose(s) for which your data are collected
- the data recipients
- the data retention period
- the existence of data subject rights and how to exercise them. You have the right to question the data controller, request access to personal data, have personal data rectified or erased as well as the right to object to the processing of any and all personal data concerning you.
Data Recipients
Our firm is the sole recipient of these personal data.
The personal data collected by Boury, Tallon & Associés is disclosed internally, and only internally, for the purpose of planning our events and otherwise pursuing the legitimate interests of our business.
Your personal data (first name, last name, job title, company, email and phone number, if applicable) are used for no other purpose than to:
- invite you to our events
- ask you to support our events if you have expressed interest to us or if we think they might interest you
- ask you to speak at an event.
Any other data that we process have been “manifestly made public by the data subject”, as mentioned in Article 9 (2) of the General Data Protection Regulation.
Data Retention
The data used for event invitation and registration purposes as well as the information contained in biographical profiles are kept for 6 years, i.e. the maximum length of a French MP’s term of office.
Job application documents may be kept for up to two years, counting from the last contact with the applicants, unless the latter have consented to a longer data retention period in which case the data shall be stored in accordance with the applicable statutory retention period.
Security
Boury, Tallon & Associés implements physical and logical security measures to protect and ensure the security of your personal data. The firm also has an internal data breach policy.
The Rights of Data Subjects
In accordance with the applicable legislation on personal data protection, you have certain rights with respect to the collection and processing of your personal data, i.e.:
The right to be informed: You have the right to be informed about how your personal data will be processed in a manner that is concise, transparent, intelligible and easily accessible.
The right to access: You have the right to obtain (i) confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to obtain (ii) access to, and a copy of, said data.
The right to rectification: You have the right to obtain the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed, including by providing a supplementary statement.
The right to erasure: In certain cases, you have the right to obtain the erasure of personal data concerning you. However, this is not an absolute right and Boury, Tallon & Associés may have legal or legitimate grounds for retaining such data.
The right to lodge a complaint with the competent supervisory authority: You have the right to contact the appropriate supervisory authority (e.g. the CNIL in France) to lodge a complaint concerning the personal data protection practices of Boury, Tallon & Associés.
The right to lodge a complaint with the competent supervisory authority. In the event of a failure to comply with the GDPR and the legislation in force, the parties concerned are entitled to lodge a complaint with the competent supervisory agency (e.g. the CNIL in France).
The right to give instructions concerning the use of personal data after one’s death (this right applies in France): You have the right to give Boury, Tallon & Associés instructions concerning the use of your personal data after your death.
If you wish to exercise any of these rights, please submit your request (together with a copy of a proof-of-identity document) to Pascal Tallon, Senior Partner and Managing Director, or Xavier Chavelet, Data Protection Manager at:
Boury, Tallon & Associés
41-43 rue Saint-Dominique
75007 Paris
France
Changes to this Data Protection Policy
Boury, Tallon & Associés may update this policy at any time to adapt it to new practices and service offers. If and when an update is made, the “last update” date will be changed accordingly. It is up to you to visit Boury, Tallon & Associés websites to check for any policy updates. In the event that Boury, Tallon & Associés makes what it deems to be substantial changes, it will post a notice on its websites for the purpose of notifying you of said changes.
Contact
To obtain more information about this Privacy and Personal Data Protection Policy, please submit a request to our Data Protection Manager at:
Boury, Tallon & Associés
41-43 rue Saint-Dominique
75007 Paris
France
or
Updates
Since we may amend this policy at any time, we advise you to visit our websites regularly to check and see if it has been updated.
Last update: Thursday, February 20, 2020.