Legal notice and data protection information  

Declaration according to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) as amended, and in accordance with the French law no. 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties, as amended. 

1. Name and address of the controller  
The controller is : 
Dr. Stefanie Lüer, member of the Paris Bar, 11, Place Dauphine, 75001 Paris, France, and of the Frankfurt bar, having its offices at 12, rue Bessièrs, 75017 Paris, France. 

2. Principles of processing of personal data   
(a) Legal basis for the processing of personal data 
Where we obtain consent from a data subject for the purposes of processing personal data, Art. 6, para. 1 a) of the EU General Data Protection Regulation (GDPR) applies to the processing of personal data. Where processing of personal data is necessary for the performance of a contract to which the data subject  is party, Art. 6, para. 1 b) GDPR is the legal basis. Where processing of personal data is necessary to comply with a legal requirement to which our business is subject, Art 6, para. 1 c) GDPR applies. 
In the event that such processing is necessary to protect legitimate interests of Dr. Stefanie Lüer or of a third party and if the interests or fundamental rights of the data subject do not prevail, Art 6, para. 1 f) GDPR is applicable. 
(b) Objective and duration of storage 
The personal data of a data subject will be erased as soon as the purpose of the initial storage no longer applies, notably after expiry of the contractual relationship with Dr. Stefanie Lüer. Personal data may be stored for longer periods as far as responsibility may be claimed.  

3. Rights in favour of the data subject     
(a) Right to request for information 
If your personal data is processed and you are domiciled within the European economic area, you may claim the following rights against the controller: 
(i) whether personal data relating to you is processed by us; 
(ii)  the purposes for which the personal data is processed; 
(iii)  the categories of personal data which are processed; 
(iv)  the recipient or categories of recipients to whom your personal data has been or will be disclosed; 
(v)  the planned duration of the storage of your personal data or, where specific details are not possible, the criteria for establishing the storage duration; 
(vi)  the existence of the right to rectification or erasure of your personal data, a right to restriction of the processing by the controller or the right to object to this processing; 
(vii)  all available information about the origin of the data, where the personal data was not collected from the data subject; 
(viii)  the existence of a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects yourself; 
(ix) if your personal data will be transferred to a third country or an international organisation, you may request information about the appropriate safeguards with respect to such transfer. A transfer of personal data to a third country or an international organisation only on condition that enforceable data subject rights and effective legal remedies for data subjects are available (according to Art. 46 GDPR). 
(b) Right of portability 
You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person. 
(c) Right to rectification 
You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you, without undue delay. 
(d) Right to erasure 
You have the right, in certain circumstances, to require us to erase your personal information without undue delay, on the condition that the continued processing of the personal information concerned is not justified. 
(e) Right to restrictive use of personal data 
You may request the restriction of processing of your personal data under the following conditions: 
- if you dispute the accuracy of the personal data about you, for a period which enables the controller to check the accuracy of the personal data; 
– if the processing is unlawful and you refuse erasure of the personal data and instead request restriction of the use of the personal data; 
– if the controller no longer requires the personal data for the purposes of the processing, however, you require this for the establishment, exercise or defence of legal claims or 
- if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been established whether the legitimate grounds of the controller override your grounds. 
(f) Right to object to data processing 
You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if this is the case. You can object anytime to marketing activities, for any reason. 
If you wish to exercise one of these rights, please contact us at:  dpo@drluer-conseil.eu. 
You also have the right to lodge a complaint with your national data protection authority. Further information about contact details of your national data protection authority is available at: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. 
In the event that you wish to receive more detailed information concerning the content of the GDPR, please refer to the following website: https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX:32016R0679.  

Use of cookies     
The drluer-conseil.eu site uses cookies to improve the user experience, analyse traffic and offer content tailored to your interests. Cookies are files placed on your terminal (computer, tablet, smartphone) when you visit our site. These files enable us to collect information about your browsing habits. All data processing is carried out by OVH on servers located in Europe, ensuring strict compliance with regulatory obligations and increased security vigilance against data leakage.  

Types of cookies used      
Strictly necessary cookies: These cookies are essential for the site to function properly. For example, they enable us to remember your browsing preferences or secure your connection. These cookies do not require your prior consent. 
Performance and analysis cookies: These cookies are used to measure audience size and analyze site usage, in order to improve content and ergonomics. The data collected is anonymized and does not allow you to be identified directly. 
Advertising cookies: These cookies are used to offer you advertising. They require your prior consent before being stored on your terminal. 
Third-party cookies: These are cookies placed by third parties (e.g. social networks or analysis services). We ensure that these third parties comply with applicable data protection regulations. 

Consent and cookie management      
Your consent is required for the deposit of certain cookies. When you first visit the site, an information banner is displayed to inform you of the use of cookies and allow you to accept or refuse them. 
You can modify your cookie preferences at any time via the cookie management module accessible on every page of the site. You can also configure your browser to block or delete cookies. However, some site functions may be affected if cookies are deactivated. 

Cookie retention period 
Cookies placed on your terminal have a limited lifetime. As a general rule, this period does not exceed 13 months, in accordance with CNIL recommendations. The data collected via these cookies is kept for a maximum of 25 months for audience measurement cookies. 

Your rights  
In accordance with the General Data Protection Regulation (RGPD) and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights regarding your personal data collected via cookies: 
• Right of access ; 
• Right of rectification ; 
• Right to erasure ; 
• Right to limit processing ; 
• Right to object ; 
• Right to data portability. 
To exercise your rights or if you have any questions about the cookie policy, please contact me at dpo@drluer-conseil.eu.