Loading...
Privacy
Last updated: June 2026
This policy describes how Vermeille & Co processes the personal data collected through the "Submit my case" form on the page dedicated to structured products, as well as the rights available to you. It complies with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
Vermeille & Co — Sophie Vermeille, lawyer at the Paris Bar
11 bis rue Ballu, 75009 Paris, France
SIRET 488 874 264 00119 — VAT no. FR70488874264
For any question regarding the processing of your data, you may write to the address above.
When you complete the form, the following may be processed: your identity (full name), your contact details (email address, telephone number) and the information you choose to share about your situation (product concerned, intermediary, approximate date and amount of the investment, description of the context).
Only your name and email address are required to handle your request; the other fields are optional. At this stage, please do not send supporting documents, bank statements, identity documents, health data, information relating to offences or convictions, or any other sensitive data. Such items should only be provided at the firm's express request, through an appropriate channel.
The form stores no data on the website and does not transmit the information you enter to any application server of the firm or to a third-party form provider. When you click "Send my request", your email client opens with a message pre-filled for you to send to the firm yourself. Your information therefore passes through your own email provider and then the firm's, under their respective terms; you remain in control of sending it.
Your data is processed solely to respond to your request, to assess whether your situation is eligible for assistance and, where relevant, to contact you again. The primary legal basis is the performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR). The firm may also rely, on a subsidiary basis, on its legitimate interest in organising the administrative handling of the requests it receives (Article 6(1)(f) GDPR), subject to your rights and freedoms. Your data is not used for any marketing or for any solely automated decision-making.
Your data is intended solely for the firm's authorised lawyers and staff, who are bound by professional secrecy. It is neither sold, transferred, nor disclosed to third parties for commercial purposes. Technical service providers (the website host, the email provider) may access it strictly within the limits of their tasks and under a confidentiality obligation. The website is hosted by DigitalOcean; the firm ensures that its technical providers offer appropriate security and confidentiality safeguards, and any transfer of data outside the European Economic Area, should it occur, would be governed by the safeguards provided for under the GDPR.
If your request does not lead to any follow-up, your data is kept for the time needed to handle it and then deleted no later than twelve (12) months after our last contact with you, unless a legal obligation or a need to retain it for evidential purposes applies. If your request leads to a case being opened, your data is kept for the duration of the relationship and then archived in accordance with the legal, regulatory and professional-conduct obligations applicable to the legal profession.
Beyond the reasonable technical and organisational measures implemented to protect your data, exchanges with the firm are handled in accordance with the rules applicable to lawyers' professional secrecy.
This page is standalone: it sets no tracking cookies and uses no analytics tool. The fonts are hosted directly within the page (embedded in the code), so that viewing it triggers no connection to any third-party server.
In accordance with the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability. You may exercise these rights by writing to contact@vermeille-avocats.com. The firm will respond to your request within one month of receiving it. This period may be extended by two months in the event of particular complexity or multiple requests, in accordance with the GDPR.
You also have the right to lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 (www.cnil.fr).
The firm may update this policy from time to time. The applicable version is the one published on this page at the date of your visit.