Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller is DAIRIA Avocats, a French law firm (société d'exercice libéral), registered at the Bar of Lyon.
Address: 65 rue Hénon, 69004 Lyon, France
Email: s.coly@dairia-avocats.com
Phone: +33 6 72 42 24 86

2. Data We Collect

We may collect the following personal data:

  • Identity data: name, job title, company name
  • Contact data: email address, phone number, postal address
  • Technical data: IP address, browser type, pages visited, time spent on site (via analytics)
  • Communication data: messages sent via our contact form or email
  • AI interaction data: queries submitted to DAIRIA AI (processed in accordance with our AI policy)

3. Legal Basis for Processing

We process your personal data on the following legal bases (GDPR Art. 6):

  • Consent: when you submit a contact form or interact with our AI tools
  • Legitimate interest: to improve our services, ensure security, and respond to inquiries
  • Contractual necessity: to provide legal services you have requested
  • Legal obligation: compliance with French bar regulations and anti-money laundering rules

4. How We Use Your Data

  • To respond to your inquiries and provide legal services
  • To operate and improve our website and AI tools
  • To send you relevant legal updates (only with your consent)
  • To comply with legal and regulatory obligations
  • To ensure the security of our systems

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Hosting providers: Vercel Inc. (website hosting, servers in EU/US)
  • AI sub-processors: Anthropic (Claude), OpenAI, Mistral AI — for AI-powered legal assistance. Data is processed under strict contractual safeguards.
  • Cloud services: AWS (eu-west-3 Paris region) for data storage
  • Professional obligations: French judicial or regulatory authorities, when required by law

6. Data Retention

  • Contact form data: 3 years from last contact
  • Client files: 5 years after the end of the engagement (French bar rules)
  • AI interaction logs: 12 months maximum
  • Analytics data: 26 months

7. International Transfers

Some data may be transferred outside the EU/EEA (e.g., to AI sub-processors in the United States). Such transfers are safeguarded by EU Standard Contractual Clauses (SCCs) or an adequacy decision.

8. Your Rights

Under the GDPR and French Data Protection Act (Loi Informatique et Libertés), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise your rights, contact us at s.coly@dairia-avocats.com. You also have the right to lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés).

9. Cookies

Our website uses essential cookies for site functionality. We may also use analytics cookies (with your consent) to understand how visitors use the site. You can manage your cookie preferences via your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including AES-256 encryption at rest, TLS 1.3 in transit, and strict access controls. As a law firm, we are also bound by professional secrecy (secret professionnel).

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available at this URL. Material changes will be communicated via the website.