Legal
Privacy policy
This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.
Who is responsible for your data
NV PARTNERS, an EURL registered at 173 rue de Courcelles, 75017 Paris, France under number 109 269 878 R.C.S. Paris and trading as Systematic Partners, is the controller of the personal data described here. You can reach us at esteban@systematic.studio.
We are established in France, so the EU General Data Protection Regulation applies to our processing wherever in the world the people concerned are located. Where we handle the data of United States residents, applicable state privacy laws may give additional rights, which are set out below.
Two groups of people
We process personal data about two distinct groups, and the treatment differs for each.
Law firms and their staff
If you contact us or engage our services, we process business contact details, correspondence and billing information. The lawful basis is our legitimate interest in responding to enquiries and running our business, and performance of a contract once you become a client.
People who submit legal inquiries
Our campaigns invite members of the public to describe a potential legal matter. Depending on the practice area, that information can include the nature and date of an incident, injuries sustained, medical treatment received, employment circumstances, and whether the person is already represented.
Information about physical or mental health is a special category of personal data under article 9 GDPR. We collect it only where the person has given explicit consent at the point of submission, for the specific purpose of being connected with a law firm that may be able to help them. Consent may be withdrawn at any time by contacting us.
Why we process it
- To assess whether an inquiry meets the criteria a client firm has set.
- To verify the information in an inquiry, including by contacting the person where necessary.
- To transmit qualifying inquiries to the client firm.
- To measure and improve the performance of our campaigns.
- To meet our legal, accounting and tax obligations.
Who we share it with
Qualifying inquiries are transmitted to the client law firm whose criteria they meet. That firm becomes an independent controller of the data from the point of delivery and applies its own privacy practices. Inquiries that do not qualify are not transmitted to any firm.
We also use the service providers below, who process data on our behalf under written terms and only on our instructions.
- Vercel Inc.
- Website hosting and server logs. United States. 440 N Barranca Avenue #4133, Covina, CA 91723.
- Supabase Inc.
- Database storage for inquiries submitted through forms on this website. United States. Data is stored in the AWS US East (North Virginia) region.
- Telegram
- Operational alerts notifying us that a new inquiry has arrived. Telegram FZ-LLC, Dubai, United Arab Emirates.
International transfers
Our client firms are located in the United States, so delivering an inquiry involves transferring personal data outside the European Economic Area. Our service providers are also established outside the EEA: inquiries are stored by Supabase in the United States, the website is hosted by Vercel in the United States, and operational alerts are delivered by Telegram in the United Arab Emirates. Personal data collected through this website is therefore stored and processed outside the EEA from the moment it is submitted.
For these transfers we rely on the European Commission’s standard contractual clauses, or on the explicit consent of the person concerned, and we assess the safeguards in place before transferring. Alerts sent over Telegram are limited to the fact that an inquiry has arrived and do not contain health information or the substance of a claim.
How long we keep it
- Inquiries that do not meet a client firm’s criteria are deleted within 30 days.
- Inquiries delivered to a client firm are retained for 24 months so that billing and replacement claims can be resolved.
- Business correspondence and accounting records are kept as French law requires.
Cookies and tracking
This website does not currently set any advertising or analytics cookies. Where we introduce them, including advertising pixels operated by Meta, Google or Reddit, we will ask for your consent before any non-essential cookie or similar technology is placed on your device, and you will be able to refuse or withdraw that consent as easily as you gave it. Strictly necessary cookies required to serve the site do not require consent.
Your rights
Under the GDPR you may request access to your personal data, correction of it, erasure of it, restriction of or objection to its processing, and portability of it. Where processing rests on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
If you are a United States resident, applicable state law may additionally give you the right to know what personal information is collected, to have it deleted or corrected, and to opt out of its sale or sharing. We do not sell personal information as that term is generally defined in those laws.
To exercise any of these rights, write to esteban@systematic.studio. If you believe we have not handled your data properly, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French supervisory authority.
Security
We apply technical and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit, and limits on who inside the business can view inquiry records.
Last updated