Privacy policy
Last updated : 6 September 2026
1. Data controller
The controller of the personal data collected through fr.andersen.com is Andersen Société d'Avocats.
- Address: 174 avenue Victor Hugo, 75116 Paris, France
- Data protection contact: contact@fr.andersen.com
2. Personal data we collect
Andersen Société d'Avocats collects the following categories of personal data:
- Contact forms: first name, surname, email address, company and message — in order to respond to your enquiry
- Newsletter: email address — in order to send you our publications
- Job applications (Careers page): CV, covering letter and contact details — in order to consider your application
- Technical browsing data: anonymised IP address, browser type and pages visited — only where you have consented to cookies
3. Lawful bases and purposes
We process your personal data on the following lawful bases (Article 6 GDPR):
- Consent (Article 6(1)(a)): the newsletter and non-essential cookies
- Performance of a contract or pre-contractual steps (Article 6(1)(b)): responding to a business enquiry
- Legitimate interests (Article 6(1)(f)): anonymised website analytics and site security
- Legal obligation (Article 6(1)(c)): retention of accounting and tax records relating to client engagements
4. Retention periods
- Non-client contact data: three years from the last exchange
- Client data: the term of the engagement plus five years (limitation period)
- Accounting records: ten years (French Commercial Code)
- Newsletter data: until you unsubscribe
- Technical data: thirteen months at most (CNIL guidance)
5. Recipients
Your personal data is accessible only to authorised personnel within Andersen Société d'Avocats. It may be disclosed to our technical processors — our French hosting provider and Brevo for email delivery — each bound by a GDPR-compliant processing agreement.
No personal data is transferred outside the European Union. Andersen Société d'Avocats uses no United States-based data collection service: neither Google Analytics nor the Meta Pixel is installed on this website.
6. Your rights
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
- Right of access to your personal data
- Right to rectification where data is inaccurate
- Right to erasure (the right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr)
To exercise these rights, please write to contact@fr.andersen.com.
7. Security
Andersen Société d'Avocats implements appropriate technical and organisational measures to protect your personal data: TLS encryption, access controls, regular backups and continuing staff training on confidentiality.
8. Changes to this policy
This policy may be updated from time to time. You will be notified of any material change.