GDPR Data Retention Periods: Understanding Your Obligations

The GDPR strictly governs data retention periods, requiring the controller to define, justify and document them according to the purpose.
GDPR Processor Liability for a Personal Data Breach

Data breach: when civil liability and the risk of a CNIL penalty fall on the processor, in light of Articles 82 and 83 of the GDPR.
Buying Email Lists and Databases: GDPR Legality and Business Risks

Since the GDPR became applicable in 2018, buying databases containing personal data has been strictly regulated for any processing that identifies a person…
GDPR and Newsletter Consent: Compliance and Good Practice for Managing Subscriptions

Newsletters are an essential tool for organisations that want to maintain a close relationship with their audience.
How to Check Whether a Website Is GDPR Compliant in France

The GDPR (Regulation (EU) 2016/679) is the legal framework for data protection, supplemented by the ePrivacy Directive on cookies.
What Is Personal Data under the GDPR? Definition and Examples

The GDPR, applicable since 25 May 2018, defines personal data in Article 4(1) as any information relating to a natural person…
E-commerce Terms and Conditions in France: Specific Rules and Template Examples

Any e-commerce business must provide terms and conditions of sale that contain the strict mandatory information set by the French Consumer Code.
B2B Terms and Conditions in France: Essential Clauses to Include

Terms and conditions between businesses make B2B dealings legally sound, prevent disputes and protect companies’ strategy.
Do You Need a Lawyer for Terms and Conditions and Terms of Use?

A lawyer is not a legal requirement, but a lawyer adapts your terms of sale (CGV) and terms of use (CGU) to your business and limits the risk of costly litigation.
Email Marketing Opt-In in France: What Are the Legal Rules for Emailing Consumers?

Sending marketing emails to consumers is governed by the GDPR and by Article L. 34-5 of the French Postal and Electronic Communications Code (Code des postes et des communications électroniques, CPCE).
SaaS GDPR Clauses: Essential Contract Terms and Key Templates for Compliance

The SaaS contract, or Software as a Service agreement, is the cornerstone of the relationship between provider and user when software is…