Privacy policy
This policy explains how AFFIRMA collects, uses and protects personal data relating to users, prospects and clients of affirma.fr.
AFFIRMA is committed to ensuring a high level of personal data protection, in accordance with Regulation (EU) 2016/679 (GDPR), the French Data Protection Act and the professional obligations applicable to chartered accountants, including professional secrecy.
Last updated: June 2026.
Data controller
Personal data is processed by Affirma EURL, a chartered accountancy firm, 32 rue de l'Arcade, 75008 Paris, France — SIRET: 531 281 277 00016.
For any question about personal data: contact@affirma.fr.
Categories of data collected
In the course of its activities, AFFIRMA may process identification and contact data, including name, email address, phone number, address, role and company.
AFFIRMA may also process professional, accounting, financial, tax and social data, as well as information and documents required to perform its assignments.
When browsing the website, certain technical data may be processed by the server delivering the website, for example the IP address, browser type, request date and time, URL viewed and information required for service security and operation.
The website does not include a contact form at this stage. Data voluntarily sent by email, phone or through an external link is processed to respond to the relevant request.
Purposes of processing
Data is processed to respond to requests sent to AFFIRMA, manage client and prospect relationships, perform accountancy assignments, prepare tax and social declarations, comply with legal and regulatory obligations, prevent fraud, secure the website and improve services.
In the current website code, technical browsing data is not used for targeted advertising or marketing analytics.
Legal bases
Depending on the case, processing is based on contractual or pre-contractual performance, including the engagement letter, on compliance with legal obligations, including accounting, tax, social and AML/CFT obligations, on AFFIRMA's legitimate interest in securing its services and communicating with people who contact it, or on consent where required.
Consent is required in particular for certain non-essential cookies or third-party services, including the display of Google Maps embedded on the website.
Recipients
Personal data may be transmitted to AFFIRMA's authorised teams, competent administrations, including DGFiP and URSSAF, social bodies, advisers and professional partners, as well as processors and technical providers acting in compliance with the GDPR.
In connection with the firm’s assignments, certain business software or providers, such as accounting, payroll or hosting solutions, may process data on behalf of AFFIRMA or its clients.
All recipients are subject to confidentiality obligations appropriate to the nature of the data processed.
Professional secrecy
AFFIRMA is bound by professional secrecy in accordance with the rules applicable to the chartered accountancy profession, including the French ordinance of 19 September 1945.
Data entrusted to the firm is strictly confidential and may not be disclosed except with the relevant person’s consent, where necessary to perform the assignment, or where required by law or regulation.
Specific regulatory obligations
In accordance with anti-money laundering and counter-terrorist financing regulations (AML/CFT), AFFIRMA may be required to collect and verify identity information, retain certain data for the legal retention period and report to competent authorities where regulations so require.
Cookies, Google Maps and local storage
No audience analytics tool, advertising tag, marketing pixel or tag manager has been identified in the website code at this stage.
The website occasionally uses browser session storage for navigation and language interactions. This storage is temporary and is not intended to track users for advertising purposes.
The contact page includes embedded Google Maps. These maps are loaded only after the user explicitly consents, by clicking the activation button or through the cookie banner. Before this consent, the Google Maps iframe is not created on the page.
When Google Maps is activated, Google may process technical data linked to the browser, connection, IP address and use of the map, and may place or read its own cookies according to its terms. Google Maps consent is stored in local storage under the maps_consent key and can be reset by clearing browser local storage. Google privacy policy: https://policies.google.com/privacy.
Retention period
Data is retained for periods proportionate to the purposes pursued and in accordance with applicable legal obligations.
Accounting and tax data may be retained for 10 years. Client files are retained for the duration of the assignment and then archived for the applicable legal or evidentiary periods. Prospecting data is retained for 3 years from the last contact. Non-essential cookies and trackers are retained for a maximum of 13 months, unless a shorter period applies or consent is withdrawn.
Transfers outside the European Union
Some tools or third-party services used by AFFIRMA or by the website, including Google Maps and LinkedIn, may involve processing or transfers of data outside the European Union according to their own terms.
Where such transfers take place, they must be governed by appropriate safeguards, including the European Commission’s standard contractual clauses or any other mechanism recognised by applicable regulations.
Your rights
Under the conditions provided by applicable regulations, you have the right to access, rectify, erase, object to, restrict processing of and port your personal data.
You can exercise your rights by writing to contact@affirma.fr. If you consider that your rights have not been respected, you may lodge a complaint with the CNIL: www.cnil.fr.
Security
AFFIRMA implements appropriate technical and organisational measures to preserve the confidentiality, integrity and security of personal data against unauthorised access, loss, alteration or disclosure.
Changes to this policy
This policy may be amended at any time to reflect legal, regulatory, technical or organisational changes.