Legal · 2026
Privacy Policy
Elexa Avocat · Avocats au Barreau de Paris
This Privacy Policy sets out how Elexa Avocat, a société d’exercice libéral à responsabilité limitée (SELARL), registered with the Paris Bar (Barreau de Paris) under toque number E 2367, SIREN 994 228 211, practising at 21B boulevard de Port-Royal, 75013 Paris, and operating this website under the trading name Your Global Move, processes the personal data of visitors to the website yourglobalmove.com, prospective clients, and clients.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the French Data Protection Act of 6 January 1978 (Loi Informatique et Libertés), as amended.
Data disclosed to the Firm in the context of a legal mandate is additionally protected by attorney-client privilege (secret professionnel) under Article 66-5 of the Law of 31 December 1971, which applies independently of and in addition to data protection law.
Last updated: 18 August 2026.
1. Data Controller
Data controller: Elexa Avocat, SELARL registered with the Barreau de Paris under toque E 2367. SIREN: 994 228 211 — SIRET: 994 228 211 00011 — VAT: FR23 994 228 211. Address: 21B boulevard de Port-Royal, 75013 Paris, France. Contact: info@yourglobalmove.com — +33 6 77 31 58 55.
2. Data Collected
Depending on your relationship with the Firm, the following categories of personal data may be collected:
- Identification data: first name, last name, date and place of birth, nationality, civil status, copies of passports and identity documents.
- Contact data: postal address, email, telephone number.
- Enquiry data: the information submitted through the contact form on the website — name, email, telephone, nationality, target timeframe for completing the case, and the content of your message.
- Family and case data: family composition and relationships relevant to the matter (filiation, marriage, PACS, adoption), civil-status records of relatives, residence and nationality history, prior visa or permit decisions including refusals.
- Professional, academic and financial data: profession, employment contracts, qualifications and diplomas, income and resources (required for Visitor, Talent and Entrepreneur visa files), business plans, bank statements and proof of funds.
- Data relating to criminal convictions and offences (Art. 10 GDPR): criminal record extracts where the relevant procedure requires them.
- Health-related data (Art. 9 GDPR): limited to health insurance cover documents and medical certificates where the procedure requires them.
- Browsing data: IP address, browser and device type, pages visited, and referrer, collected through cookies and tag management containers (see § 7).
- KYC data: identification and verification documents required under Articles L. 561-1 et seq. of the French Monetary and Financial Code, where the mandate falls within scope.
3. Purposes & Legal Bases
| Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|
| Responding to enquiries via the contact form, email or telephone | Art. 6.1.b (pre-contractual measures) | 3 years if no engagement follows |
| Assessing eligibility and issuing a fixed-fee proposal | Art. 6.1.b (pre-contractual measures) | 3 years if no engagement follows |
| Performance of the legal mandate (preparation and filing of visa, residence permit and citizenship applications) | Art. 6.1.b (performance of contract) | Duration of the mandate + applicable limitation period |
| Processing of special category and criminal-record data within a case file | Art. 9.2.f and Art. 10 (establishment, exercise or defence of legal claims), with explicit consent where required (Art. 9.2.a) | Duration of the mandate + applicable limitation period |
| Issuance of invoices and accounting | Art. 6.1.c (legal obligation — Art. L. 123-22 French Commercial Code) | 10 years |
| Anti-money-laundering and counter-terrorism vigilance | Art. 6.1.c (legal obligation — Art. L. 561-1 et seq. CMF) | 5 years post-mandate |
| Publication of client testimonials (first name and initial only) | Art. 6.1.a (consent) | Until consent is withdrawn |
| Prospecting (newsletters, commercial communications) | Art. 6.1.a (consent for prospects) / Art. 6.1.f (legitimate interest for existing clients) | 3 years from last interaction |
| Audience measurement and advertising tags | Art. 6.1.a (consent via cookie banner) | 13 months maximum |
| Website operation and security | Art. 6.1.f (legitimate interest) | 12 months |
| Recruitment (spontaneous or advertised applications) | Art. 6.1.b (pre-contractual measures) | 1 year from the application |
| Defence in the event of dispute or legal proceedings | Art. 6.1.f (legitimate interest) | Applicable limitation period |
Where processing rests on consent, that consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.
4. Recipients of Data
Personal data may be shared, on a strict need-to-know basis, with:
- The lawyer or lawyers practising within the Firm, and any collaborator or service provider assisting with a file, all bound by professional secrecy or by an equivalent contractual confidentiality undertaking.
- Correspondent lawyers and foreign counsel where a jurisdiction outside France is involved, with the Client’s prior information.
- Sworn translators (traducteurs assermentés), notaries and apostille or legalisation providers, where the Client’s documents require it.
- Technology service providers acting as data processors under Art. 28 GDPR: website hosting, email and productivity tools, CRM and case management, appointment scheduling, electronic signature, payment processing, accounting software, and tag management and audience-measurement providers. All are bound by data processing agreements compliant with the GDPR.
- Competent French and foreign authorities as the case requires: préfectures, consulates and visa centres, the ANEF platform, OFII, the Pôle de la nationalité française, the Service central d’état civil in Nantes, URSSAF and commercial registries for entrepreneur files, and administrative courts.
- Judicial or administrative authorities, where required by a court order or legal obligation.
Personal data is not sold to third parties.
5. International Transfers
The Firm processes personal data within the European Economic Area wherever possible. Certain technology providers may be located outside the EEA (notably in the United States). In such cases, transfers are framed by appropriate safeguards: an adequacy decision of the European Commission, Standard Contractual Clauses under Art. 46 GDPR, or supplementary technical and organisational measures.
Where an immigration procedure requires it, data may also be transmitted to consular or governmental authorities in your country of residence or nationality, outside the EEA. Such transfers are necessary for the performance of the mandate within the meaning of Art. 49.1.b GDPR.
Specific information on transfers may be requested at info@yourglobalmove.com.
6. Security
The Firm implements technical and organisational measures to ensure the security and confidentiality of personal data, including: encrypted hosting and transmission, access restricted on a need-to-know basis to the lawyer handling the file, two-factor authentication, regular backups, secure destruction of physical documents, and confidentiality undertakings from all staff and providers. Documents covered by attorney-client privilege are stored separately and protected in accordance with French rules on professional secrecy.
In the event of a personal data breach likely to result in a high risk to your rights, you and the CNIL will be notified in accordance with Articles 33 and 34 GDPR.
7. Cookies
The website yourglobalmove.com uses cookies and similar technologies, including tags deployed through Google Tag Manager. The following categories apply:
- Strictly necessary cookies: required for the site to function — page delivery, security, form submission and spam prevention. Exempt from consent under Article 82 of the French Data Protection Act and cannot be disabled.
- Audience-measurement cookies (analytics): help us understand how visitors use the site, in aggregated form. Subject to your consent.
- Advertising and remarketing cookies: measure the performance of our campaigns and may be used to show you our content on other platforms. Subject to your consent.
- Functional cookies: remember your preferences. Subject to your consent.
No cookie other than a strictly necessary one is deposited before you have given consent through the banner displayed on your first visit. Refusing is as straightforward as accepting.
You may withdraw or change your consent at any time via the “Cookie preferences” link in the footer, or by deleting cookies through your browser settings. Consent choices are retained for a maximum of six months, and audience-measurement cookies for no more than thirteen months, in line with CNIL guidance.
A full list of the cookies used, with their purpose, issuer and duration, is available in our Cookie Policy at yourglobalmove.com/cookie-policy.
8. Data of Minors
Where a minor child is included in a family application, their data is provided by a parent or legal guardian, who confirms they are entitled to do so. Independent use of the website’s forms requires the user to be at least 15 years old, in accordance with Article 45 of the French Data Protection Act.
9. Your Rights
You hold the following rights under the GDPR:
- Right of access (Art. 15) — to obtain confirmation that data concerning you is processed, and a copy thereof.
- Right to rectification (Art. 16) — to correct inaccurate or incomplete data.
- Right to erasure (Art. 17) — subject to legal retention obligations and to professional secrecy.
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20) — for data processed on the basis of consent or a contract.
- Right to object (Art. 21) — including to commercial prospecting, at any time.
- Right not to be subject to a fully automated decision (Art. 22). The Firm carries out no automated decision-making or profiling.
- Right to give post-mortem instructions regarding your data, in accordance with Article 85 of the French Data Protection Act.
To exercise these rights, contact info@yourglobalmove.com or write to Elexa Avocat, 21B boulevard de Port-Royal, 75013 Paris. A copy of an identity document may be requested where there is reasonable doubt as to your identity. A response will be provided within one month, extendable by two further months for complex requests.
Certain rights may be limited where the data is covered by professional secrecy, or where retention is required to comply with a legal obligation or to defend a legal claim.
10. Right to Lodge a Complaint
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):
- Postal address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
- Website: www.cnil.fr
You may also lodge a complaint with the supervisory authority of your country of residence.
11. Nature of the Website’s Content
The content published on this website is general information on French immigration procedures. It does not constitute legal advice, does not create a lawyer-client relationship, and cannot be substituted for advice on your individual circumstances. Immigration rules are subject to frequent change.
12. Changes to this Policy
This Privacy Policy may be updated to reflect legal, regulatory or technical developments. The current version is always available at yourglobalmove.com/privacy-policy. Material changes will be communicated by visible notice on the website or by email to active clients.
Elexa Avocat · SELARL · Avocats au Barreau de Paris · Toque E 2367 SIREN 994 228 211 · SIRET 994 228 211 00011 · VAT FR23 994 228 211 21B boulevard de Port-Royal, 75013 Paris · info@yourglobalmove.com · +33 6 77 31 58 55
yourglobalmove.com · Privacy Policy · 2026