This Privacy Policy explains how Eurolegia collects, uses, stores and protects the personal data of visitors to eurolegia.com and individuals who contact us for a consultation. This Policy has been prepared in accordance with the requirements of the European Union General Data Protection Regulation (GDPR).
1. Who Processes Your Personal Data
Eurolegia is the controller of personal data processed through this website. If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us using the contact form available on the website.
Once a legal entity has been established or the official website owner has been determined, this section should be updated to include the full legal name, registration details, address and a dedicated contact for data protection matters.
2. Who This Policy Applies To
This Policy applies to website visitors, users of our contact forms, prospective and existing Eurolegia clients, and individuals who contact us through the communication channels listed on the website.
3. Personal Data We May Collect
- Information you provide: your name, telephone number or messenger ID, email address, country, current status, the purpose of your enquiry and any information included in your message.
- Communication data: the contents of your enquiries, attached documents and information required to prepare a response or provide an agreed service.
- Technical data: your IP address, device and browser type, operating system, date and time of your visit, pages viewed, referral source, security logs and technical identifiers.
- Cookie data: information stored using essential, analytical or other cookies in accordance with your selected consent preferences.
Please do not submit unnecessary information, copies of documents or special categories of personal data through the general contact form unless they have been specifically requested for the assessment of your situation.
4. Purposes and Legal Bases for Processing
- Responding to enquiries and preparing consultations — taking steps at your request before entering into a contract or performing a contract (Article 6(1)(b) GDPR).
- Communication and support — performing a contract or pursuing our legitimate interest in providing organised, consistent and high-quality assistance in response to enquiries (Article 6(1)(b) or 6(1)(f) GDPR).
- Website operation and security — our legitimate interest in maintaining website stability, preventing misuse and protecting information systems (Article 6(1)(f) GDPR).
- Compliance with legal obligations and protection of rights — complying with legal obligations and, where necessary, establishing, exercising or defending legal claims (Article 6(1)(c) GDPR and other applicable laws).
- Optional cookies, analytics and marketing technologies — your consent, where required by law (Article 6(1)(a) GDPR). You may withdraw your consent at any time.
Where processing is based on a legitimate interest, we balance our interests against your rights and reasonable expectations. We do not use data collected through the website for incompatible purposes without an additional legal basis.
5. Cookies and Similar Technologies
The website may use essential cookies required for its operation and security. Analytical, functional and marketing cookies are used only after obtaining your consent where such consent is required. You may change or withdraw your preferences using the cookie management tool available on the website or delete cookies through your browser settings. Disabling essential cookies may affect the operation of certain website features.
6. Who May Receive Your Data
Access to personal data may be provided only to the extent necessary for the relevant purpose:
- website hosting, technical support and security providers;
- email, contact form and communication service providers;
- analytics providers, where the required consent has been obtained;
- professional advisers and contractors who are subject to confidentiality obligations;
- public authorities and other recipients where disclosure is required by law or necessary to protect legitimate rights.
We do not sell personal data.
7. International Data Transfers
Some technical service providers or communication tools may process data outside the European Economic Area. In such cases, data is transferred using a safeguard recognised under the GDPR, such as a European Commission adequacy decision, Standard Contractual Clauses or another applicable legal mechanism.
8. Data Retention
- data relating to initial enquiries is generally retained for no longer than 12 months after the last meaningful contact, unless our cooperation continues;
- data relating to the provision of services is retained for the duration of our cooperation and for any subsequent period required to comply with legal obligations and protect legal rights;
- technical logs are generally retained for up to 90 days, unless longer retention is required to investigate an incident or protect the website;
- data processed on the basis of consent is retained until consent is withdrawn or the relevant purpose no longer applies.
The specific retention period may depend on the nature of the enquiry, applicable legal requirements and the need to establish, exercise or defend legal claims. Once the applicable retention period has expired, the data is deleted or anonymised.
9. Data Security
We implement reasonable organisational and technical measures to protect personal data against loss, unauthorised access, alteration, disclosure and destruction. Access is granted only to individuals who require the data to perform the relevant tasks. However, no method of transmitting or storing data can guarantee absolute security.
10. Special Categories of Data and Documents
Enquiries concerning legalisation matters may involve sensitive information. We do not intend to collect health information, biometric data, information concerning racial or ethnic origin, religious beliefs, criminal convictions or other sensitive categories of data through the general contact form. Where such information is objectively necessary, the procedure and legal basis for its processing will be determined separately, and the amount of data collected will be limited to what is strictly necessary.
11. Your Rights
Where provided for by the GDPR, you have the right to:
- receive information about the processing of your personal data and obtain access to it;
- request the correction of inaccurate or incomplete data;
- request the deletion of your data;
- restrict the processing of your data;
- object to processing based on legitimate interests;
- receive your data in a portable, machine-readable format;
- withdraw your consent without affecting the lawfulness of processing carried out before its withdrawal;
- lodge a complaint with a competent data protection supervisory authority, particularly in the country where you live, work or where the alleged infringement occurred.
To exercise your rights, please use the contact form available on the website. Before responding to your request, we may ask you to provide information necessary to verify your identity. Some rights are not absolute and may be restricted under applicable law.
12. Automated Decision-Making
Eurolegia does not use this website to make decisions based solely on automated processing that produce legal or similarly significant effects for users.
13. Children’s Data
The website is not intended for independent use by individuals under the age of 18. Where the processing of a child’s data is necessary in connection with a family enquiry, the relevant information must be provided by a parent, legal representative or another authorised person.
14. Changes to This Policy
We may update this Policy to reflect changes to the website, the services we use or applicable legal requirements. The current version will be published on this page together with the date of the latest update.
15. How to Contact Us
If you have any questions about privacy, personal data processing or the exercise of your rights, please contact Eurolegia using the contact form available on the website.