Privacy policy
Controller
H Law SRL, Boulevard Louis Schmidt 29 bte 15, 1040 Brussels, company number 0831.134.701, is responsible for the processing of your personal data. Questions can be sent through the contact page.
What we process and why
- Enquiries
- Messages sent through the contact form or by email (name, contact details, opposing party if any, content of the message). We use them to answer you and, where relevant, to check for conflicts of interest. For messages sent through the contact form, we also record the IP address, browser type and referring page, to detect abuse; they are deleted together with the message.Legal basis Steps taken at your request before a possible engagement, and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
- Client files
- Data needed to handle your matter, including the identification documents required by anti-money laundering rules, correspondence and invoices.Legal basis The engagement contract and our legal obligations (Art. 6(1)(b) and (c) GDPR).
- Other persons involved in a matter
- Data about opposing parties, witnesses or other persons, received from our clients or from public sources, used only to handle the matter. Professional secrecy may prevent us from informing these persons.Legal basis Our legitimate interest and that of our client in exercising or defending their rights (Art. 6(1)(f) GDPR).
- Website visits
- The server records technical data (IP address, date and time, page requested, browser) to deliver the website and keep it secure. We also keep our own visit statistics, without cookies: page visited, date and time, referring page and campaign tags of the link, browser language, type of browser and device, and the IP address shortened by removing its last part. We use them only to see how the website is used.Legal basis Our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
How long we keep it
- Enquiries
- One year after our last exchange, if they do not lead to an engagement.
- Client files
- Five years after the end of the matter, the period after which lawyers are released from keeping files.
- Identification documents
- Ten years after the end of the relationship, as required by the anti-money laundering law of 18 September 2017.
- Invoices and accounting records
- Ten years, as required by tax and accounting law.
- Visit statistics
- 13 months, then deleted automatically.
- Server logs
- For a limited period set by our hosting provider in line with its legal obligations.
Who receives it
We do not sell data. We share it only with service providers we need to run the firm, bound by confidentiality: OVHcloud (website hosting, servers in France) and Microsoft (email, Microsoft 365). Where a matter or the law requires it, data is also shared with courts, other lawyers, experts, bailiffs or authorities.
Microsoft stores our email data in the European Union. Any access from outside the European Economic Area is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
Cookies
This website uses no analytics or advertising cookies and no third-party tracking tools. Fonts are hosted on our own server. Our hosting provider may set a technical cookie that spreads traffic across its servers. It is strictly necessary and does not require consent.
Your rights
You may ask for access to your data, its correction or deletion, restriction of processing or a copy in a portable format, and you may object to processing based on our legitimate interest. Professional secrecy and legal retention duties may limit these rights. We answer within one month.
You do not have to give us your data, but without it we cannot answer you or act for you. No decision about you is taken by automated means.
You may also lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.