KIMBROUGH & ASSOCIÉSATTORNEYS · PARIS FR|EN

Privacy policy

Personal data protection

In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.

Data controller

The controller of the data collected on this site is the firm Kimbrough & Associés (details at the bottom of the page).

Data collected and purposes

The firm collects only strictly necessary data. When you use the contact form or write to the firm, the following may be collected:

  • Identity and contact data: surname, first name, email address, telephone number, company where applicable;
  • Content of your request: the subject and message you send us;
  • Technical browsing data (see the “Cookies and trackers” section).

This data is processed solely in order to: respond to your request and contact you; manage the resulting relationship; comply with the firm's legal and professional obligations. No data is used for commercial prospecting or transferred to third parties.

When you submit an application (internship, associate position or other), through the form on the Careers page or by email, the following may be collected:

  • Identity and contact data: surname, first name, email address, telephone number where applicable;
  • Application materials: the nature of your request, CV, cover letter, message and the information they contain.

This data is processed solely in order to review your application, correspond with you about it and, if you consent, contact you about another opportunity. We invite you to provide only the information useful for reviewing your application.

Legal basis

  • your consent and/or the performance of pre-contractual measures taken at your request, for handling your contact requests (Art. 6.1.a and 6.1.b GDPR);
  • the performance of pre-contractual measures taken at your request, for reviewing your application (Art. 6.1.b GDPR), and your consent for keeping it with a view to another opportunity (Art. 6.1.a GDPR);
  • the firm's legitimate interest in ensuring the proper functioning and security of the site, and in defending itself in the event of a dispute (Art. 6.1.f GDPR);
  • compliance with the legal obligations to which the firm is subject (Art. 6.1.c GDPR).

Recipients

The data is intended solely for authorized members of the firm. It may be processed, for technical purposes only, by the firm's hosting and email providers, acting as processors within the meaning of the GDPR.

Transfers outside the European Union

The data you send us (emails, contact and application forms) is hosted by our provider OVH, in France, and accessed by the firm using email software connected to those servers: as such, it is not transferred outside the European Union.

On the Contact page, the site displays an access map provided by Google Maps. When you consent, your IP address may be transmitted to Google LLC (United States). This transfer is framed by the adequacy decision « EU–US Data Privacy Framework » of 10 July 2023, to which Google is certified, and, on a subsidiary basis, by the European Commission's standard contractual clauses. A copy of the safeguards may be obtained on request.

Retention period

  • Contact requests (prospects): kept for the time needed to handle the request, then archived for a maximum of 5 years from the last contact left without follow-up;
  • Unsuccessful applications: kept for the time needed to review them. If you consent, they are kept for a maximum of 2 years from the last contact, so that we can contact you about another opportunity. Otherwise, they are deleted, except for items useful to the firm's defence in the event of a dispute, which are archived for a maximum of 5 years;
  • Data relating to a client matter: kept for the duration of the relationship and then in accordance with the lawyer's legal and professional obligations (in particular limitation periods).

Mandatory nature of the data

The data requested in the contact and application forms, other than fields marked as optional, is necessary to handle your request; failing that, the firm will not be able to follow up.

Your rights

You have the right of access, rectification, erasure, restriction and objection to processing, the right to data portability, the right to withdraw your consent at any time (without affecting the lawfulness of processing already carried out) and the right to give directives concerning the fate of your data after your death.

To exercise these rights, write to contact@kimbroughlaw.com or by post to the registered office (address at the bottom of the page), providing proof of identity. You may also lodge a complaint with the French data protection authority, the CNIL — www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Cookies and trackers

The site does not use any audience-measurement or advertising cookie without your consent. The only third-party service liable to set cookies or establish a connection to an external server is:

  • Google Maps (access map, Contact page) — © Google.

The fonts are self-hosted and generate no call to any third-party server.

No non-strictly-necessary cookie or third-party service is set before your consent, which is collected via a banner allowing you to accept, reject (as easily as to accept) or configure it by purpose. You can change or withdraw your choices at any time via the “Manage cookies” module, available on every page, or set your browser to refuse cookies.

Last updated: 1 November 2026.