Privacy Policy

Last updated: 2026-01-27

1. Identity of the Data Controller

The law firm ORESTE AVOCATS, a professional civil company or association of lawyers registered with the Strasbourg/Mulhouse Bar Association, is responsible for processing personal data collected on the website www.oreste-avocats.fr.

Addresses:

  • Strasbourg: 32 allée de la Robertsau, 67000 Strasbourg
  • Mulhouse: 42 avenue Roger Salengro, 68100 Mulhouse

Contact: contact@oreste-avocats.fr

2. Personal Data Collected

2.1. Contact Form and Appointment Booking

When you contact us or book an appointment, we collect:

  • First and Last Name
  • Email Address
  • Phone Number (if applicable)
  • Content of your Message

Purpose: To respond to your requests and follow up on your contact.

Retention Period: 3 years from the last contact, unless a case is opened (retention according to the ethical rules of the legal profession).

2.2. Browsing Data

Without your prior consent, no browsing data is collected.

With your consent, we use Google Analytics 4 (GA4) to analyze website traffic. The data collected includes:

  • Pages Viewed
  • Visit Duration
  • Traffic Source
  • Technical Data (device type, browser)

Purpose: To improve the usability and content of the website.

Legal Basis: Consent (Article 6.1.a of the GDPR).

Retention Period: 14 months maximum.

3. Cookies

3.1. Consent Management

We use Axeptio to collect and manage your cookie consent. During your first visit, a banner allows you to accept or refuse non-essential cookies.

You can change your choices at any time by clicking on the Axeptio widget on the website.

3.2. Cookies Used

  • Axeptio – Remembers your consent choices – Duration: 12 months – Consent required: No (essential)
  • WPML – Remembers your language preference – Duration: Session – Consent required: No (essential)
  • Google Analytics 4 – Audience Measurement – Duration: 14 months – Consent required: Yes

4. Recipients of Data

Your data may be shared with:

  • Google LLC (GA4) – only with your consent, within the framework of the EU-US Data Privacy Framework
  • Axeptio (consent management) – GDPR-compliant subcontractor

Your data is never sold or transferred to third parties for commercial purposes.

5. Transfers Outside the EU

If you consent to GA4 cookies, data may be transferred to the United States. Google LLC adheres to the Data Privacy Framework, ensuring an adequate level of protection.

6. Your Rights

In accordance with the GDPR, you have the following rights:

  • Access to your data
  • Rectification of inaccurate data
  • Erasure of your data
  • Restriction of processing
  • Objection to processing
  • Data Portability
  • Withdrawal of Consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

To exercise these rights, contact us at: contact@oreste-avocats.fr

You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

The website uses the HTTPS protocol to secure data exchanges.

8. Changes to the Policy

We reserve the right to modify this policy. The ‘Last updated’ date at the top of the page indicates the latest revision. We encourage you to consult it regularly.