This English version is provided for information only. The French version of this page is the sole legally binding text; in the event of any discrepancy, the French version prevails. This policy explains which personal data is collected through this site, why it is collected, how long it is kept, and which rights you may exercise. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and with French Law no. 78-17 of 6 January 1978 as amended.
1. Data controller
- Data controller
- Maître Céleste RAGONNEAU
- Address
- 24 rue Octave Feuillet, 75116 Paris
- celeste.ragonneau-avocat@proton.me
- Data protection officer
- None appointed
2. Data collected
The site collects only the data strictly necessary for it to function and for your enquiries to be handled. No data is collected without your knowledge, and no profiling or automated decision-making is carried out.
- Contact form: surname, first name, email address, telephone number, practice area concerned, how you came to the site, and the free text of your message;
- Browsing data: IP address (truncated where applicable), pages viewed, date and time of the visit, browser and device type, referring site;
- Technical server logs, generated automatically for security and proper operation.
The free text field of the form may receive sensitive data within the meaning of article 9 of the GDPR (family circumstances, details of private life, data relating to children). You are advised to give there only what is strictly necessary to make contact, and to leave the detailed account of your situation to the first meeting.
Viewing the information pages of the site — articles, practice area pages and the “Fees” page — gives rise to no collection beyond the browsing data listed above. The site offers no online payment: no bank details are requested, entered or stored there. Payment facilities and accepted means of payment are matters for the fee agreement, which is signed away from the site.
3. Purposes and legal bases
- Answering your enquiry
- Legal basis: steps taken at your request prior to entering into a contract (art. 6.1.b GDPR).
- Managing the client relationship and the matter entrusted
- Legal basis: performance of the contract (fee agreement) and compliance with legal obligations (art. 6.1.b and 6.1.c).
- Processing sensitive data necessary to the matter
- Legal basis: the establishment, exercise or defence of legal claims (art. 9.2.f GDPR).
- Measuring site traffic
- Legal basis: legitimate interest, where the measurement is strictly anonymous and exempt from consent; consent otherwise (art. 6.1.f or 6.1.a).
- Keeping the site secure
- Legal basis: legitimate interest in preventing misuse and intrusion attempts (art. 6.1.f).
- Meeting accounting and anti-money-laundering obligations
- Legal basis: legal obligation (art. 6.1.c GDPR; articles L. 561-1 et seq. of the French Monetary and Financial Code).
4. Professional secrecy
The data you send is covered by lawyers' professional secrecy (article 66-5 of the Law of 31 December 1971), which adds to the safeguards of the GDPR. It is never sold, rented or exploited commercially in any form whatsoever.
5. Recipients and processors
Your data is processed by the lawyer and, where applicable, by the staff of the firm, who are themselves bound by professional secrecy. It may be disclosed to the following technical providers, acting as processors within the meaning of article 28 of the GDPR and bound by a data processing agreement:
- Site hosting: Vercel Inc.;
- Database hosting: MongoDB, Inc. (MongoDB Atlas);
- Email: Resend, Inc. (delivery of the emails the site sends) and Proton AG, Geneva, Switzerland (the firm's mailbox);
- Traffic measurement: Traffic measurement built into the site itself, with no cookie and no transfer to a third party; IP addresses are kept only as a non-reversible fingerprint.
In the course of a matter, data may also be passed to the courts, judicial officers, fellow lawyers, experts or authorities concerned, strictly to the extent necessary to defend your interests.
Articles published on the site may contain links to third-party sites — official texts, administrative forms. Following such a link takes you off this site: from that point the destination site's own privacy policy applies, and the publisher passes on none of your data.
6. Transfers outside the European Union
Some of the technical providers used by this site are established outside the European Economic Area: site hosting and email delivery are provided from the United States, and the firm's mailbox is hosted in Switzerland. Your data may therefore be processed there.
These transfers are governed. Switzerland benefits from an adequacy decision of the European Commission, which recognises its law as offering an equivalent level of protection. Transfers to the United States rely on the standard contractual clauses adopted by the European Commission, where applicable together with the provider's certification under the EU-U.S. Data Privacy Framework, and on the additional measures those clauses require.
7. Retention periods
- Enquiry with no follow-up
- 12 months from the last exchange.
- Prospective client having shown an interest
- 3 years from your last contact.
- Client file
- 5 years from the end of the engagement, the limitation period for actions against a lawyer (article 2225 of the French Civil Code).
- Accounting and invoicing records
- 10 years from the close of the financial year (article L. 123-22 of the French Commercial Code).
- Anti-money-laundering records
- 5 years from the end of the business relationship (article L. 561-12 of the French Monetary and Financial Code).
- Connection logs
- 12 months at most.
- Trackers and traffic measurement data
- 13 months for the trackers, 25 months for the data collected, in line with the recommendations of the CNIL (the French data protection authority).
8. Security
Appropriate technical and organisational measures are in place to preserve the confidentiality and integrity of your data: encryption of exchanges (HTTPS), access control, strong passwords, regular backups and separation of files. In the event of a data breach likely to result in a high risk to your rights and freedoms, you would be informed under the conditions of article 34 of the GDPR.
9. Your rights
You have the following rights over the data concerning you:
- The right of access and to obtain a copy of your data (art. 15);
- The right to rectification of inaccurate or incomplete data (art. 16);
- The right to erasure, within the limits of statutory retention obligations (art. 17);
- The right to restriction of processing (art. 18);
- The right to portability of the data you have provided (art. 20);
- The right to object on grounds relating to your particular situation (art. 21);
- The right to withdraw your consent at any time, where the processing is based on it;
- The right to give directions as to what becomes of your data after your death (article 85 of the French Data Protection Act).
These rights are exercised by email to celeste.ragonneau-avocat@proton.me or by post to the firm's address, together with anything allowing your identity to be verified. You will receive a reply within one month, which may be extended by two months for a complex request.
Certain rights may be restricted where the data is covered by professional secrecy or is necessary for the establishment, exercise or defence of legal claims.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
11. Changes to this policy
This policy may be amended to reflect legal, case-law or technical developments. The version that applies is the one published on this page. Last updated: 8 septembre 2026.
Last updated: 8 septembre 2026.