This Privacy Policy aims to inform users of the website https://white-field.com/ (hereinafter the โSiteโ), operated by Whitefield law firm, about how their personal data is collected, processed, and protected in compliance with applicable legislation, notably:
- Regulation (EU) 2016/679 of April 27, 2016 (the โGDPRโ)
- Law No. 78-17 of January 6, 1978, as amended, relating to information technology, files, and freedoms
- Law No. 2018-493 of June 20, 2018, relating to the protection of personal data
- Recommendations and guidelines of the French Data Protection Authority (CNIL)
1. Data Controller Identity
The data controller is:
Whitefield, with registered office at 167 Bis, Avenue Victor Hugo, 75116 PARIS,
represented by Maรฎtre Tarek TERAS in his capacity as Publishing Director.
Contact email: cabinet@white-field.com
2. What Personal Data Is Collected?
Whitefield collects only the personal data strictly necessary for the proper operation of the Site and for managing relationships with visitors.
Data collected via forms:
- Last name, first name
- Email address
- Phone number
- Job title and/or company
- Purpose of the inquiry
Technical data collected automatically:
- IP address
- Browser type
- Operating system
- Visited pages, date and time of connection
All mandatory data fields are marked with an asterisk (*) during collection. Failure to provide such data will prevent the processing of your request.
3. Purpose of Data Processing
The processing operations implemented by Whitefield pursue the following purposes:
- Responding to contact requests or appointment scheduling
- Managing pre-contractual relations (e.g., quotes) and contractual relations (e.g., file opening)
- Ensuring accounting, administrative, and legal management
- Sending newsletters or updates (subject to prior consent)
- Ensuring the security of the Site and preventing fraudulent activities
- Complying with legal obligations (e.g., anti-money laundering)
The legal basis for processing depends on the case: your consent (Article 6.1.a GDPR), performance of a contract or pre-contractual measures (Article 6.1.b), or our legitimate interest (Article 6.1.f), particularly regarding Site security.
4. Data Recipients
- Data is accessible only to authorized members of Whitefield, bound by professional secrecy (Article 226-13 of the French Penal Code) and strict confidentiality obligations.
- Your data is never transferred to third parties for commercial purposes.
- Data may, if necessary, be shared with legal professionals (notaries, lawyers, bailiffs), courts, or technical service providers (web hosting, maintenance), who are also bound by GDPR compliance.
Some services used on the Site are provided by Google (see section 8.2). When they are used, data such as your IP address may be processed by Google outside the European Economic Area (EEA), in particular in the United States. Such transfers are carried out under the safeguards provided by Google, such as the European Commission's standard contractual clauses or, where applicable, the EU-U.S. Data Privacy Framework.
5. Data Retention Period
Personal data is retained only for the period strictly necessary for the purpose of the processing, in accordance with Article 5.1.e of the GDPR:
- Contact form data: 12 weeks if no follow-up
- Data related to a legal or judicial case: 3 years from the last action
- Data related to accounting obligations: 10 years
- Connection data and cookies: maximum 13 months
6. Data Security
Whitefield implements all appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data:
- SSL/TLS encryption protocols for data exchanges
- Access controls, firewalls, and regular backups
- Staff training on data protection
7. Your Rights Regarding Personal Data
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure (โright to be forgottenโ) in applicable cases
- Right to restrict processing
- Right to data portability
- Right to object, notably to marketing communications
- Right to define post-mortem instructions regarding the handling of your data (Article 85 of the French Data Protection Act)
To exercise your rights, you may contact:
cabinet@white-field.com
or by mail at: Whitefield, 167 bis, avenue Victor Hugo, 75116 Paris.
Whitefield commits to respond within a maximum of 1 month, extendable to 2 months in case of complexity.
You also have the right to file a complaint with the CNIL (www.cnil.fr).
8. Cookie Policy
8.1 What Is a Cookie?
A cookie is a small text file deposited on your device when you visit the Site. It does not allow direct identification but helps track your navigation or remember your preferences.
8.2 Cookies Used
- Strictly necessary cookies: ensure the proper functioning of the Site (navigation, security). Your cookie preferences are stored in your browser so that they are remembered.
- Analytics cookies and similar technologies (subject to your consent): Google Analytics, which collects statistics on how the Site is used, and Google reCAPTCHA, which protects the Contact form against spam. These services are only loaded once you have accepted this category.
- Embedded map: the Contact page displays a Google Maps map showing the firm's location. This service is provided by Google and may place cookies or collect technical data, such as your IP address, when the map is displayed.
- Fonts: the Arabic version of the Site loads its fonts from Google Fonts, which involves the transmission of your IP address to Google.
8.3 Consent
- In accordance with CNIL guidelines dated September 17, 2020, only non-essential cookies require your prior consent, obtained through an information banner.
- If you take no action, no non-essential cookie will be placed.
- You can withdraw your consent at any time via the cookie manager or your browser settings.
8.4 Retention Period
Cookies are retained for a maximum of 13 months from the date of placement.
8.5 Learn More
For more information about cookies and how to manage them:
9. Updates to the Privacy Policy
This privacy policy may be updated at any time to reflect changes in legal or technical obligations.
Last updated: September 23, 2026