# Privacy Policy

- Link: https://aftraduction.fr/en/privacy-policy/
- Published: 2026-04-05T22:09:53+02:00
- Author: AFTraduction

_Last updated: 6 May 2026_

This policy describes how **AFTRADUCTION** processes the personal data of people
who use its website [aftraduction.fr](https://aftraduction.fr/en/), request a quote,
order a translation or interpreting service, or contact the agency by telephone,
email or any other channel.

It has been drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016(
the “GDPR”) and the amended French Act No. 78-17 of 6 January 1978 on information
technology, data files and civil liberties (the “Loi Informatique et Libertés”).

---

## 1. Data controller

The controller of your personal data is:

**AFTRADUCTION**, a simplified joint-stock company (SAS) with share capital of €
10,000

 * Registered office: 32 Boulevard Paul Vaillant-Couturier, Bâtiment B, 93100 Montreuil,
   France
 * Registered with the Bobigny Trade and Companies Register (RCS) under number **
   919 659 862**
 * APE code: 7430Z (translation and interpreting)
 * Represented by its President, Mr Adlane DEBASSI, expert translator sworn before
   the Court of Appeal of Dijon
 * Telephone: +33 1 84 74 56 56
 * Email: [contact@aftraduction.fr](https://aftraduction.fr/en/privacy-policy/contact@aftraduction.fr)

## 2. Data protection contact

For any question about this policy or about exercising your rights:

 * By email: **[rgpd@aftraduction.fr](https://aftraduction.fr/en/privacy-policy/rgpd@aftraduction.fr)**
 * By post: AFTRADUCTION – Personal Data Contact, 32 Bd Paul Vaillant-Couturier,
   Bât. B, 93100 Montreuil, France

AFTRADUCTION is not required to appoint a Data Protection Officer (DPO) within the
meaning of Article 37 of the GDPR, but has appointed an internal contact person 
responsible for monitoring compliance.

## 3. Data collected and purposes

AFTRADUCTION collects only the data strictly necessary for its activities. For each
processing operation, the purposes, the legal basis and the retention period are
set out below.

### 3.1 Quote requests and performance of services

  |  Purpose |  Data processed |  Legal basis |  Retention period |  
   |  Preparing a quote, processing the order, performing the translation or interpreting service, managing the customer relationship |  Identity, business or personal contact details, content of the document to be translated, source/target languages, deadlines, data required for the assignment |  Performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR) |  Duration of the contractual relationship, followed by intermediate archiving for 5 years (civil limitation period, Article 2224 of the French Civil Code) |  
 |  Invoicing and accounting obligations |  Billing details, amounts, any bank details, invoices |  Legal obligation (Art. 6(1)(c) GDPR) |  10 years (Article L.123-22 of the French Commercial Code) |  
 |  Tax obligations |  Accounting records and supporting documents |  Legal obligation |  6 years (Article L.102 B of the French Tax Procedures Code (Livre des procédures fiscales)) |

### 3.2 Documents entrusted for translation or interpreting

In the course of its assignments, AFTRADUCTION may process documents containing **
sensitive data** within the meaning of Article 9 of the GDPR (health data, data 
relating to private life, court proceedings, civil status, etc.) and, where applicable,
data relating to criminal convictions (Article 10 of the GDPR).

The processing of such data is strictly limited to **performing the service requested**
and is based on:

 * the performance of the contract concluded with the client (Art. 6(1)(b) GDPR),
   and
 * depending on the case, the processing being necessary for the establishment, 
   exercise or defence of legal claims (Art. 9(2)(f) GDPR), or the explicit consent
   of the data subject (Art. 9(2)(a) GDPR).

Original documents and their translations are kept in secure archives for the **
minimum period required by the obligations of the expert translator** (register 
of sworn translations), then destroyed or returned to the client. In any event, 
they are not kept for more than **5 years**, unless a specific legal obligation 
or a request from a judicial authority requires otherwise.

### 3.3 Telephone and video interpreting

For interpreting assignments, AFTRADUCTION processes the contact details of the 
clients commissioning the service, of the interpreters and, where applicable, of
the people for whom the service is provided.

AFTRADUCTION does **not** record interpreted conversations. If an institutional 
client records a conversation on its side, it is the sole controller of that processing.

Call metadata (date, time, duration, calling and called numbers, language, interpreter
assigned) are kept for as long as necessary for invoicing and quality monitoring,
then archived under the conditions set out in section 3.1.

### 3.4 Purchases from the online shop

When you place an order on the [aftraduction.fr](https://aftraduction.fr/en/) shop,
AFTRADUCTION processes your billing and delivery details as well as the data required
to process the payment. Card data are collected and processed directly by our PCI
DSS-certified payment provider (see section 5); AFTRADUCTION does not store your
full card number.

### 3.5 Contact form and correspondence

Data sent through the website forms or by email are processed solely to respond 
to your request, on the basis of your consent (Art. 6(1)(a) GDPR) or of the agency’s
legitimate interest in responding to its prospective clients (Art. 6(1)(f) GDPR).
They are kept for 3 years from the last contact, in line with the CNIL’s guidance.

### 3.6 Direct marketing

Data used for direct marketing (mainly B2B) are kept for **3 years from the last
contact initiated by the prospective client**, in line with the CNIL’s recommendations.
You may object to receiving such communications at any time by clicking the unsubscribe
link included in every message or by writing to [rgpd@aftraduction.fr](https://aftraduction.fr/en/privacy-policy/rgpd@aftraduction.fr).

### 3.7 Recruitment and collaboration

The CVs, references and contact details of translator and interpreter applicants
are kept for 2 years from the last contact, unless they object.

### 3.8 Cookies and trackers

See the dedicated section 7.

## 4. Professional secrecy

As AFTRADUCTION is run by and made up of translators and interpreters, some of whom
are sworn before a court of appeal, the agency and its staff are bound by **professional
secrecy** under Article 226-13 of the French Criminal Code. Every staff member or
subcontractor with access to a client document signs a confidentiality undertaking.

## 5. Recipients of the data

Personal data are accessible only to those who strictly need them for the purposes
described:

 * **Authorised AFTRADUCTION staff** (project managers, administrative team, management).
 * **Subcontracted translators and interpreters**, contractually bound by a confidentiality
   obligation, within the limits of the assignment entrusted to them.
 * **Technical service providers**, acting as processors within the meaning of Article
   28 of the GDPR:
    - host of the website and databases;
    - provider of the project management and invoicing system;
    - provider of the business telephone system;
    - email delivery provider;
    - online payment provider.

A detailed list of current processors, with their names, is available on request
from [rgpd@aftraduction.fr](https://aftraduction.fr/en/privacy-policy/rgpd@aftraduction.fr).

 * **Authorised third parties**: administrative or judicial authorities acting on
   a lawful request, the chartered accountant, the statutory auditor where applicable,
   and legal advisers in the event of a dispute.

No data are sold, rented or exchanged for commercial purposes.

## 6. Transfers outside the European Union

AFTRADUCTION gives preference to providers that host data within the European Union.
Where a transfer to a third country is necessary (for example through certain payment
or communication tools), it is covered either by an adequacy decision of the European
Commission (Art. 45 GDPR) or by the standard contractual clauses adopted by the 
Commission (Art. 46 GDPR). Details of current transfers are provided on request.

## 7. Cookies and trackers

The aftraduction.fr website uses cookies and trackers to ensure that it works properly,
to measure its audience and, where applicable, to improve your experience.

 * **Strictly necessary cookies**: essential for the website to work (basket, session,
   security). They do not require your consent.
 * **Audience measurement and performance cookies**: placed only after you have 
   given your consent through the cookie banner. You may withdraw your consent at
   any time by clicking the “Cookie preferences” link at the bottom of the page.
 * **Third-party cookies**: some embedded content (videos, maps, social networks)
   may place its own cookies, which are subject to the policies of the respective
   publishers.

The maximum lifetime of cookies is **13 months**; data derived from these cookies
are kept for no more than **25 months**, in line with the CNIL’s recommendations.

## 8. Security

AFTRADUCTION implements technical and organisational measures to protect your data
against loss, unauthorised access, disclosure, alteration or destruction. These 
measures include in particular: encryption of communications (HTTPS/TLS), individual
access control to internal tools, strong authentication on sensitive accounts, regular
backups, staff awareness training and confidentiality undertakings with all staff
members and subcontractors.

In the event of a data breach likely to result in a risk to your rights and freedoms,
AFTRADUCTION notifies the CNIL within 72 hours and, where required by law, informs
the data subjects (Articles 33 and 34 of the GDPR).

## 9. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights 
over your personal data:

 * **Right of access**: to obtain confirmation that your data are being processed
   and to receive a copy of them.
 * **Right to rectification**: to have inaccurate or incomplete data corrected.
 * **Right to erasure** (the “right to be forgotten”), subject to legal retention
   obligations.
 * **Right to restriction** of processing.
 * **Right to object** to processing, in particular for direct marketing purposes.
 * **Right to data portability**, where applicable.
 * **Right to withdraw your consent** at any time, where processing is based on 
   consent, without affecting the lawfulness of processing carried out before the
   withdrawal.
 * **Right to give instructions** on what happens to your data after your death (
   Article 85 of the Loi Informatique et Libertés).

To exercise these rights, write to **[rgpd@aftraduction.fr](https://aftraduction.fr/en/privacy-policy/rgpd@aftraduction.fr)**
or by post to the registered office address, enclosing any relevant proof of identity
in case of reasonable doubt. You will receive a reply within one month (which may
be extended by two months where the request is complex).

If, after contacting us, you consider that your rights have not been respected, 
you have the right to lodge a complaint with the **Commission Nationale de l’Informatique
et des Libertés (CNIL)**, the French data protection authority:

> CNIL – 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, France
>  Telephone:
> +33 1 53 73 22 22 – [www.cnil.fr](https://www.cnil.fr/fr)

## 10. Changes

This policy may be amended to reflect regulatory or technical developments or changes
in the agency’s activities. The date of the latest update appears at the top of 
this document. We invite you to consult it regularly.