Personal Data Protection Policy

In the course of its activities, the firm S.C.H LEGAL ("We") collects and processes the personal data of its clients and partners ("You").

Data Controller

The firm S.C.H LEGAL is the data controller for the personal data it collects and processes. S.C.H Legal is represented by Maître Sharon Cohen, whose professional address is located at 1-2 Place des Saisons – Courbevoie (92400) (SIREN 809 255 698). Bar number: 1733. Contact email: sharon.cohen@schlegal-avocats.com

Categories of Personal Data We Collect

We may collect and process your personal data in connection with the provision of our services, when you contact us or request information. This personal data primarily includes:

• Contact details (surname, first name, email address, occupation, etc.),

• Financial information, in particular for payment purposes,

• Sensitive data such as health-related data or data relating to criminal convictions,

• And more generally, any personal data transmitted to us in connection with the provision of our services.

We make every effort to keep personal data accurate and complete. To ensure that we hold up-to-date information, you may notify us of any changes to your contact details or any other data by reaching us at the contact details above.

Cookies

In order to improve your browsing experience, we use technologies such as cookies to remember your preferences, including the language in which the site is displayed. By accepting these technologies, you authorise us to process this data for the purpose of retaining your language settings during your visits. Refusing or withdrawing your consent may limit certain features and affect the quality of your experience on our site.

Use of Google Analytics

This website uses Google Analytics 4, an audience analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States).

Google Analytics collects data relating to your browsing activity, including:

• Pages visited and time spent on each page

• Your country and region of connection

• The type of device and browser used

• The source through which you accessed the website (search engine, direct link, social network, etc.)

IP addresses are anonymised prior to any processing. No data enabling your direct identification is retained. This data is collected in aggregated form and enables us to understand how the website is used in order to improve its content and user experience.

Legal basis: This processing is based on your consent (Article 6(1)(a) of the GDPR), collected via the cookie management banner displayed upon your first visit.

Data retention: Data collected via Google Analytics is retained for a period of 14 months, in accordance with the settings recommended by the CNIL (French Data Protection Authority).

Transfer outside the EU: As Google LLC is established in the United States, your data may be transferred to that country. Such transfer is governed by the standard contractual clauses approved by the European Commission.

Your rights: You may withdraw your consent at any time by clicking on "Manage preferences" in the cookie banner, or by installing the Google Analytics opt-out module. For further information on Google's privacy policy, please visit: policies.google.com/privacy

Purposes and Legal Bases for Processing

We process data as necessary to pursue the following purposes:

• For the day-to-day management of the client relationship and the provision of our services: including management of client files (client contacts, case analysis, assistance, rights advocacy and legal advice, negotiations, etc.), invoicing, management of client accounts, unpaid amounts, and disputes. The processing of this data is necessary for the provision of our services.

• In the performance of our duties, we may process sensitive data and data relating to criminal convictions and offences for the purposes of assisting, advising, and representing clients. Such processing is necessary for the defence of our clients' rights and for the strict requirements of the duties entrusted to us.

• To comply with our legal and regulatory obligations and to handle requests for the exercise of rights in relation to the processing of personal data.

Disclosure of Personal Data

Your personal data may be transmitted, to the extent necessary and subject to prior notice to you, to third parties involved in the performance of the duties entrusted to us (local correspondents, experts, translators, etc.).

Security

We implement appropriate organisational, technical, and software security measures — both physical and digital — to protect personal data against any loss, unauthorised access, disclosure, or alteration.

Data Retention

Personal data that is processed is retained for the period strictly necessary to fulfil the purpose for which it was collected. Data required for the provision of services is retained for the duration of the contractual relationship between the firm and the client, and for five years thereafter. Invoices and other accounting documents are retained for 10 years.

Your Rights

You are informed that, under the conditions set out by law, you have the right to access, rectify, erase, and port your personal data, as well as the right to restrict and object to the processing of such data. You also have the right to make arrangements regarding your personal data in the event of your death, as well as the right to lodge a complaint with the CNIL, whose website is accessible at https://www.cnil.fr and whose registered office is located at 3 Place de Fontenoy, 75007 Paris. You may exercise your rights free of charge by contacting us at the details provided above.