Legal notice

2. Personal data — GDPR

Controller and contact

SUN AVOCATS, SELARL, 70 rue de Ponthieu, 75008 Paris, handles enquiries sent to the firm. For privacy questions or to exercise your rights, contact info@sunassocies.comor write to this address.

Data and purposes

The form collects your name, email address, subject, message and preferred meeting format. Company, telephone number and availability are optional. Required fields allow us to handle your enquiry. Information is used to respond, assess the enquiry and arrange a discussion. Sending a message confirms neither an appointment nor acceptance of instructions.

Please do not include confidential documents, sensitive data or unnecessary details about other people in your first message. The firm will explain how to provide documents if needed.

Legal bases

Preparing a service you request is based on precontractual steps taken at your request (GDPR Article 6(1)(b)). Other enquiries and protection against abuse rely on the firm’s legitimate interests in responding to requests and securing its service (Article 6(1)(f)). The form does not subscribe you to marketing or constitute consent to commercial offers.

Recipients and operation

Enquiries are sent to the firm’s mailbox and accessible to authorised personnel. Hosting, maintenance and email providers may process data within their assigned tasks and necessary access. This version is hosted on Sites, an OpenAI service. The form uses Resend to transmit enquiries to the firm’s mailbox, which remains managed by OVHcloud. The same information is recorded in the firm’s private follow-up workspace, hosted on Sites (an OpenAI service) and accessible only to authorised accounts. No copy is sent to social networks.

Retention

Correspondence is retained while handling and following up your enquiry. Further retention depends on whether instructions are accepted, applicable obligations and the need to protect the firm’s rights; unnecessary data must be deleted or placed in restricted archives. Hashed identifiers used to limit repeated submissions expire after one minute. Technical logs and backups follow retention arrangements with the relevant providers.

Your rights

Subject to GDPR conditions, you may request access, rectification, erasure or restriction. You may object on grounds relating to your situation to processing based on legitimate interests and request portability where applicable. Proportionate identity checks may be necessary. You may lodge a complaint with the CNIL.

Cookies and website statistics

With your permission, SUN AVOCATS uses Google Analytics to understand website traffic and improve the website. Statistics include pages visited, links and buttons used, website language, device type, page scrolling and contact form steps. A submission is counted when the email delivery service confirms that it has accepted the request; this does not confirm an appointment.

Message content, information entered in forms and free-text searches are not sent to Google Analytics. The firm uses aggregated statistics. Collection includes pseudonymous technical identifiers; this data is not fully anonymous.

Google Analytics is loaded only after you give permission. You can accept or decline statistics and change your choice at any time using the cookie settings link in the footer. Declining statistics does not prevent you from using the website or contact form. Change my choice

Where your browser allows it, your choice is saved in its local storage for six months, solely to remember your decision. Google Analytics cookies, including _ga and _ga_…, are configured to expire within 180 days, without automatically extending their lifespan on subsequent visits.

Retention of detailed user and event data in Google Analytics is set to 14 months, with resetting on new activity disabled. This setting does not apply to standard aggregated statistical reports, which may remain available for longer.

Advertising features and Google Signals are disabled. The firm does not use these statistics for advertising. Google describes its processing, including recipients and international transfers, in its Privacy Policy and its notice about sites that use its services.

Google Maps. The Google Maps map embedded on the Contact page loads automatically. Displaying it establishes a connection to Google’s servers independently of your statistics choice. Statistics preferences do not change how this map is displayed. Google’s Privacy Policy describes the processing associated with this service. Directions, social media and other external links open their services when you choose to follow them.

Platform sign-in and service protection functions may use technically necessary trackers. Audio reading uses your browser’s speech synthesis. Depending on the browser, operating system and voice, processing may involve the provider’s service. These services apply their own conditions, including international data transfers.

Updated 10 November 2026.