Privacy Policy

Last updated: 6 May 2026

This policy describes how AFTRADUCTION processes the personal data of people who use its website aftraduction.fr, request a quote, order a translation or interpreting service, or contact the agency by telephone, email or any other channel.

It has been drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and the amended French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (the “Loi Informatique et Libertés”).

---

1. Data controller

The controller of your personal data is:

AFTRADUCTION, a simplified joint-stock company (SAS) with share capital of €10,000

• Registered office: 32 Boulevard Paul Vaillant-Couturier, Bâtiment B, 93100 Montreuil, France
• Registered with the Bobigny Trade and Companies Register (RCS) under number 919 659 862
• APE code: 7430Z (translation and interpreting)
• Represented by its President, Mr Adlane DEBASSI, expert translator sworn before the Court of Appeal of Dijon
• Telephone: +33 1 84 74 56 56
• Email: contact@aftraduction.fr

2. Data protection contact

For any question about this policy or about exercising your rights:

• By email: rgpd@aftraduction.fr
• By post: AFTRADUCTION – Personal Data Contact, 32 Bd Paul Vaillant-Couturier, Bât. B, 93100 Montreuil, France

AFTRADUCTION is not required to appoint a Data Protection Officer (DPO) within the meaning of Article 37 of the GDPR, but has appointed an internal contact person responsible for monitoring compliance.

3. Data collected and purposes

AFTRADUCTION collects only the data strictly necessary for its activities. For each processing operation, the purposes, the legal basis and the retention period are set out below.

3.1 Quote requests and performance of services

3.2 Documents entrusted for translation or interpreting

In the course of its assignments, AFTRADUCTION may process documents containing sensitive data within the meaning of Article 9 of the GDPR (health data, data relating to private life, court proceedings, civil status, etc.) and, where applicable, data relating to criminal convictions (Article 10 of the GDPR).

The processing of such data is strictly limited to performing the service requested and is based on:

• the performance of the contract concluded with the client (Art. 6(1)(b) GDPR), and
• depending on the case, the processing being necessary for the establishment, exercise or defence of legal claims (Art. 9(2)(f) GDPR), or the explicit consent of the data subject (Art. 9(2)(a) GDPR).

Original documents and their translations are kept in secure archives for the minimum period required by the obligations of the expert translator (register of sworn translations), then destroyed or returned to the client. In any event, they are not kept for more than 5 years, unless a specific legal obligation or a request from a judicial authority requires otherwise.

3.3 Telephone and video interpreting

For interpreting assignments, AFTRADUCTION processes the contact details of the clients commissioning the service, of the interpreters and, where applicable, of the people for whom the service is provided.

AFTRADUCTION does not record interpreted conversations. If an institutional client records a conversation on its side, it is the sole controller of that processing.

Call metadata (date, time, duration, calling and called numbers, language, interpreter assigned) are kept for as long as necessary for invoicing and quality monitoring, then archived under the conditions set out in section 3.1.

3.4 Purchases from the online shop

When you place an order on the aftraduction.fr shop, AFTRADUCTION processes your billing and delivery details as well as the data required to process the payment. Card data are collected and processed directly by our PCI DSS-certified payment provider (see section 5); AFTRADUCTION does not store your full card number.

3.5 Contact form and correspondence

Data sent through the website forms or by email are processed solely to respond to your request, on the basis of your consent (Art. 6(1)(a) GDPR) or of the agency’s legitimate interest in responding to its prospective clients (Art. 6(1)(f) GDPR). They are kept for 3 years from the last contact, in line with the CNIL’s guidance.

3.6 Direct marketing

Data used for direct marketing (mainly B2B) are kept for 3 years from the last contact initiated by the prospective client, in line with the CNIL’s recommendations. You may object to receiving such communications at any time by clicking the unsubscribe link included in every message or by writing to rgpd@aftraduction.fr.

3.7 Recruitment and collaboration

The CVs, references and contact details of translator and interpreter applicants are kept for 2 years from the last contact, unless they object.

3.8 Cookies and trackers

See the dedicated section 7.

4. Professional secrecy

As AFTRADUCTION is run by and made up of translators and interpreters, some of whom are sworn before a court of appeal, the agency and its staff are bound by professional secrecy under Article 226-13 of the French Criminal Code. Every staff member or subcontractor with access to a client document signs a confidentiality undertaking.

5. Recipients of the data

Personal data are accessible only to those who strictly need them for the purposes described:

• Authorised AFTRADUCTION staff (project managers, administrative team, management).
• Subcontracted translators and interpreters, contractually bound by a confidentiality obligation, within the limits of the assignment entrusted to them.
• Technical service providers, acting as processors within the meaning of Article 28 of the GDPR:
  • host of the website and databases;
  • provider of the project management and invoicing system;
  • provider of the business telephone system;
  • email delivery provider;
  • online payment provider.

A detailed list of current processors, with their names, is available on request from rgpd@aftraduction.fr.

• Authorised third parties: administrative or judicial authorities acting on a lawful request, the chartered accountant, the statutory auditor where applicable, and legal advisers in the event of a dispute.

No data are sold, rented or exchanged for commercial purposes.

6. Transfers outside the European Union

AFTRADUCTION gives preference to providers that host data within the European Union. Where a transfer to a third country is necessary (for example through certain payment or communication tools), it is covered either by an adequacy decision of the European Commission (Art. 45 GDPR) or by the standard contractual clauses adopted by the Commission (Art. 46 GDPR). Details of current transfers are provided on request.

7. Cookies and trackers

The aftraduction.fr website uses cookies and trackers to ensure that it works properly, to measure its audience and, where applicable, to improve your experience.

• Strictly necessary cookies: essential for the website to work (basket, session, security). They do not require your consent.
• Audience measurement and performance cookies: placed only after you have given your consent through the cookie banner. You may withdraw your consent at any time by clicking the “Cookie preferences” link at the bottom of the page.
• Third-party cookies: some embedded content (videos, maps, social networks) may place its own cookies, which are subject to the policies of the respective publishers.

The maximum lifetime of cookies is 13 months; data derived from these cookies are kept for no more than 25 months, in line with the CNIL’s recommendations.

8. Security

AFTRADUCTION implements technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration or destruction. These measures include in particular: encryption of communications (HTTPS/TLS), individual access control to internal tools, strong authentication on sensitive accounts, regular backups, staff awareness training and confidentiality undertakings with all staff members and subcontractors.

In the event of a data breach likely to result in a risk to your rights and freedoms, AFTRADUCTION notifies the CNIL within 72 hours and, where required by law, informs the data subjects (Articles 33 and 34 of the GDPR).

9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data:

• Right of access: to obtain confirmation that your data are being processed and to receive a copy of them.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure (the “right to be forgotten”), subject to legal retention obligations.
• Right to restriction of processing.
• Right to object to processing, in particular for direct marketing purposes.
• Right to data portability, where applicable.
• Right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to give instructions on what happens to your data after your death (Article 85 of the Loi Informatique et Libertés).

To exercise these rights, write to rgpd@aftraduction.fr or by post to the registered office address, enclosing any relevant proof of identity in case of reasonable doubt. You will receive a reply within one month (which may be extended by two months where the request is complex).

If, after contacting us, you consider that your rights have not been respected, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority:

CNIL – 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, France
Telephone: +33 1 53 73 22 22 – www.cnil.fr

10. Changes

This policy may be amended to reflect regulatory or technical developments or changes in the agency’s activities. The date of the latest update appears at the top of this document. We invite you to consult it regularly.