Privacy policy

Data controller

The controller of the personal data collected on this website is:

Selarl Boissière Pujol Avocats
Represented by Maître Jérôme Pujol, partner
Email: contact@pujolavocats.com
Telephone: +33 9 86 07 96 26

Data collected through the appointment form

When you complete the appointment booking form, the following data is collected:

• Surname and first name
• Email address
• Telephone number
• Company name (optional)
• Subject of the request, profile, degree of urgency
• Preferred location and time for the appointment
• Free-text message (optional)

Purpose: to answer your appointment request, arrange a first conversation and, where applicable, open a file.

Legal basis: performance of pre-contractual measures taken at your request (article 6.1.b of the GDPR).

Retention period: the data is kept for as long as is necessary to deal with your request. If the request does not lead to a file being opened, it is deleted within a maximum of three years from the last contact. Where a file is opened, the data is kept in accordance with the professional obligations of the profession of avocat (five years after the file is closed).

Recipients: the data is intended solely for the lawyers and staff of the firm responsible for dealing with your request. It is not sold or disclosed to third parties for commercial purposes.

Marketing attribution data

When you send an appointment request through the form, the website automatically records certain information about where your visit came from:

• The campaign parameters present in the URL (UTM parameters: source, medium, campaign, term, content, campaign identifier)
• The click identifiers added by advertising networks (gclid, msclkid, fbclid and equivalents)
• The landing page on the website and the referring site (the site from which you followed a link to ours)
• The time of arrival and the number of visits since the first one

This recording takes place only if you have accepted the “Advertising and campaign measurement” category of the cookie management banner. For as long as you have not answered, nothing is written in your browser; if you refuse, nothing is written and anything that might have been written during an earlier visit is erased.

Where the recording is authorised, two touchpoints are kept: that of your first visit (localStorage, 90 days) and that of the current visit (sessionStorage, for the duration of the session). These records are transmitted to the firm only at the moment you send the form — they are never sent if you do not submit a request.

Purpose: to measure the effectiveness of the firm's communication activities (search, online advertising, social networks) and to decide whether to continue or stop an acquisition budget.

Legal basis: consent (article 6.1.a of the GDPR, article 82 of the French Data Protection Act, the loi Informatique et Libertés). Your consent is obtained through the “Advertising and campaign measurement” category of the cookie management banner, before any recording. It may be withdrawn at any time, with the same effect as an initial refusal.

Retention period: the first touchpoint is kept for 90 days in localStorage in your browser. The session touchpoint is erased when the tab is closed. The data transmitted to the firm in the appointment request email is kept with the corresponding file.

Clarifications: this recording is distinct from the audience measurement described below (Google Analytics 4). The information recorded comes exclusively from the parameters that the advertising network itself added to the destination URL. IP address, device type, geolocation and browser used are not collected by this mechanism.

Audience measurement and advertising

This website uses Google Tag Manager (GTM) to manage the deployment of the following services:

• Google Analytics 4 (GA4) — audience measurement: pages viewed, duration of visits, source of traffic, device and browser type. GA4 places the _ga and _ga_* cookies (maximum duration: 13 months, in accordance with the recommendations of the CNIL, the French data protection authority).
• Google Ads (conversion tracking and remarketing) — measurement of the effectiveness of the firm's advertising campaigns. Google Ads may place the _gcl_au, _gcl_aw and IDE cookies (maximum duration: 13 months). These cookies make it possible to connect an appointment request to the advertising click that produced it and, where applicable, to show you the firm's adverts on other websites in the Google network.

Purpose: to understand how the website is used, to measure the return on investment of advertising campaigns and to improve the content and usability of the website.

Legal basis: consent (article 6.1.a of the GDPR, article 82 of the French Data Protection Act). No measurement or advertising cookie is placed until you have given your agreement through the cookie management banner.

Recipient: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to the United States under the EU-U.S. Data Privacy Framework.

Retention period: audience measurement data is kept for 14 months by Google Analytics. The cookies expire no later than 13 months after they are placed.

Managing cookie consent

On your first visit, a banner offers you the choice of accepting measurement and advertising cookies or of customising your choice. The “Customise” button opens a panel where you can refuse everything in a single click, or authorise audience measurement and advertising separately. No box is pre-ticked: without action on your part, nothing is placed.

Your choice is recorded in your browser and kept for thirteen months, after which you are asked again. You can change or withdraw it at any time, without giving reasons, through the “Manage cookies” link in the footer — and, if you have refused all or part of the cookies, through the preference management icon displayed at the bottom left of the screen.

Refusing measurement and advertising cookies prevents neither browsing the website nor sending an appointment request, and entails no restriction of access.

Browser local storage

Independently of cookies, the website uses the browser's local storage (localStorage and sessionStorage) for the following purposes:

• Resuming the appointment form (sessionStorage): the answers being entered are kept for the duration of the session to avoid any loss if the window is closed accidentally. Consent is never restored. The data is erased when the form is sent or at the end of the session.
• Marketing attribution (localStorage, 90 days): where the first visit came from, as described above — only if you have accepted the “Advertising and campaign measurement” category.
• Consent preference (localStorage, 13 months): the choice you expressed through the cookie management banner.

localStorage and sessionStorage are not cookies: they are never sent automatically to the server with HTTP requests. You can delete them at any time through your browser settings (Settings > Privacy > Site data), with no consequence for browsing.

Professional secrecy

Exchanges with a lawyer are covered by professional secrecy (article 66-5 of the Act of 31 December 1971). That protection applies to all the information you provide to the firm, including before any file is opened, as long as that information was provided in the context of a request for advice.

Processors and transfers

The website relies on the following processors in order to operate:

• Vercel Inc. (United States) — hosting of the website and execution of server functions. The data passing through Vercel is limited to the HTTP requests necessary to display the pages and to process the form.
• Resend Inc. (United States) — sending of the appointment request emails (internal email to the firm and acknowledgement of receipt to the person making the request).
• Google Ireland Limited (Ireland / United States) — audience measurement (Google Analytics 4), tag management (Google Tag Manager) and advertising conversion tracking (Google Ads). Subject to prior consent.

These processors are located in the United States. Transfers of data to the United States are governed by the EU-U.S. Data Privacy Framework and by the European Commission's standard contractual clauses, in accordance with articles 46 and 47 of the GDPR.

Data security

The website is accessible exclusively over HTTPS. The appointment form includes protection against automated submissions (a honeypot field and a minimum completion time) as well as a limit on the number of submissions per IP address (five requests per hour). The data transmitted is sanitised on the server before any processing.

Your rights

In accordance with Regulation (EU) 2016/679 (GDPR) and with Act no. 78-17 of 6 January 1978 as amended, you have the following rights in respect of your personal data:

• Right of access: to obtain confirmation as to whether or not data concerning you is being processed, and to obtain a copy of it
• Right to rectification: to have inaccurate or incomplete data corrected
• Right to erasure: to request the deletion of your data, subject to legal and professional retention obligations
• Right to restriction: to request that the processing of your data be frozen in the cases provided for by the GDPR
• Right to portability: to receive your data in a structured, commonly used and machine-readable format
• Right to object: to object to the processing of your data on legitimate grounds
• Withdrawal of consent: where the processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal

These rights are exercised by email to contact@pujolavocats.com or by post to the address of the firm's registered office. A reply will be sent to you within one month.

You also have the right to lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés), the French data protection authority: cnil.fr.

Updates to this policy

This privacy policy may be updated to reflect changes to the website or to the applicable regulations. The date of the last update appears below. We invite you to consult it regularly.

Last updated: August 2026.

For information relating to the publisher of the website, the host and intellectual property, see our legal notice.