Privacy Notice - Lefevre Arbitration SRL
Updated the 17th of May 2022
We take data privacy seriously. We recognise and value the trust that individuals place in us when providing us with personal information. We are committed to safeguarding the privacy and security of personal data we may collect from visitors to our website and/or the clients to whom we provide legal and other services.
This Privacy Notice aims to give you information about how we collect, process, and handle your personal data.
1. What personal information do we collect about you?
This Privacy Notice is intended to inform people outside Lefevre Arbitration SRL whose personal data we process about the handling of their personal data. This includes (i) our clients; (ii) their representatives and personnel; (iii) other lawyers, whether also representing our client or other parties; (iv) prospective clients; (v) potential arbitrators to be appointed in a dispute for which we provide legal services (whether as representatives, as arbitrator, or otherwise); (vi) staff of courts, arbitral institutions and other third parties; (vii) persons who have shown an interest in our services; (viii) job candidates; (ix) visitors to our offices; (x) attendees of events we may organise; (xi) service providers; (xii) users of our website; (xiii) persons involved in our mediation processes; and (xiv) other persons with whom we come into contact in the context of the delivery of our services.
While providing our legal services, we may also receive the personal data of people connected to a particular legal matter from third parties, including contractual counterparties or partners and their personnel, advisors, consultants, experts, witnesses, personnel of courts and arbitral institutions, and persons identifiable from documents or evidence in the course of legal advice or legal proceedings.
When we receive such personal data indirectly from other sources, we often have no contact with the individuals whose data is processed. In those circumstances, providing individuals with the information in this Privacy Notice is either impossible, would involve disproportionate effort, would be contrary to an obligation of professional secrecy or would otherwise be inappropriate in the context of dispute resolution proceedings. If we have direct contact with you and you provide us with personal data about others, you should therefore bring this Privacy Notice to the attention of those persons and ensure that they are duly informed of the disclosure as required by applicable law.
Personal data includes any information relating to an identified or identifiable natural person. It does not include data that cannot be linked in an individual (anonymous data).
We collect, use, store and transfer different kinds of personal data about you. We process the following kinds of personal data:
Identity and Contact Data: including your first name, middle names, maiden name, family name, email, address, phone number, date of birth, passport number, marital status, language, gender and nationality.
Legal Services Data: personal data related to or included in any legal advice, dispute, litigation, arbitration, or other legal proceedings.
Financial Data: your bank account details, payment card details, billing information, and other personal data necessary to process payments to and by us.
Sensitive Data: In limited circumstances, where necessary for legal services we are providing, we may collect “special categories of personal data” (GDPR Article 9(1)), i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
Professional Information Data: including your job title, email address, phone number and addresses.
Recruitment Data: your educational and employment history, tax status, referees, and other information included in your CV or application.
Marketing and Communications Data: your marketing preferences, and attendance or participation in events or other marketing initiatives we may organise. And other communications data when you contact us with an inquiry or other communication, any personal data included in the correspondence.
2. How do we collect it?
We collect personal data from you directly when you provide it to us, for example in the context of our legal services, when you offer or provide us with services, when you apply for a job with us, provide us with your business card, attend an event we organise, or otherwise communicate with us. We may collect personal data about you indirectly from other sources in the course of our legal services, for example from our client, government agencies, public records, or parties in legal proceedings. We may also collect data from third parties during recruitment procedures.
If you choose not to provide us with your personal data, depending on the circumstances we may not be able to provide you with a particular service or opportunity. We will advise you as necessary if this is the case.
3. Who is the controller for the processed personal data?
A “controller” is a person or organisation who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. This notice is issued on behalf of Lefevre Arbitration SRL as controller. Unless we notify you otherwise Lefevre Arbitration SRL is the controller for your personal data.
Lefevre Arbitration SRL is a data controller for the purposes of the EU General Data Protection Regulation 2016/679 and Belgian law implementing that Regulation (“GDPR”).
4. How do we use it?
We process the personal data described above for a number of purposes. Below we set out the various purposes for which we process data, the type of data processed for that purpose, potential recipients of that data, and the legal basis for processing.
Where we process data on the basis of our legitimate interests, such processing is only carried out to the extent such interests are not overridden by your interests or fundamental rights and freedoms which require protection of personal data.
In the event that processing of personal data is necessary for a further purpose that is not covered by the activities described below, we will ascertain whether the secondary purpose is compatible with the original purpose for which the data was collected. Where necessary, we will seek your consent to such further processing.
5. International Transfers
Personal data under our control is hosted on our server located in the EU. In pursuit of the processing activities outlined in this Privacy Statement, it may be necessary to transfer your personal data outside the EU to a jurisdiction that is not recognised by the European Commission to ensure an adequate level of protection, or to an international organisation. In those circumstances, we ensure that there is a legal basis for such transfer and adequate protection for personal data under applicable law.
Subject to any specific agreements in a particular matter, we retain personal data for as long as necessary to fulfil the purpose(s) of its processing and/or to comply with our legal obligations.
7. Your Rights
Under the GDPR, you have individual rights to exercise in relation to your personal data. Depending on the circumstances, these may include:
A right of access to your personal data and information about our processing of it, subject to certain exceptions;
A right to rectify inaccurate or incomplete personal data;
A right to have certain personal data erased;
A right to restrict processing of certain personal data;
A right to withdraw your consent, where we have relied on consent to process your personal data;
A right to a copy of your personal data (data portability);
A right to object to certain processing of your personal data;
A right not to be subject to a decision based solely on automated processing.
The extent of your rights may depend on applicable law, the nature of the personal data, and the type of processing.
You also have the right to lodge a complaint with a data protection supervisory authority, such as the Belgian Data Protection Authority, at email@example.com.
9. How can you contact us?
If you have any questions about this Privacy notice or how we process your personal data, please contact us by sending an email to: firstname.lastname@example.org or by writing to:
Lefevre Arbitration SRL
Avenue de la Raquette, 12A