Privacy policy

The firm processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg Law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.

1. Controller

Alexis Guillaume, 20, rue des Peupliers, L-2328 Luxembourg.
Contact: alexis.guillaume@barreau.lu

2. Data collected

Depending on the context, the firm may collect:

• identification data you provide voluntarily by email or by telephone (name, email address, telephone number);
• information about your situation that you choose to set out to the firm;
• data necessary to handle a matter entrusted to the firm;
• technical connection data strictly necessary for the operation and security of the site.

3. Purposes and legal bases

• Responding to your enquiry — pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Carrying out an instruction — performance of the retainer (Art. 6(1)(b) GDPR).
• Meeting the firm's legal obligations — including anti-money-laundering and record-keeping duties (Art. 6(1)(c) GDPR).
• Securing the site — the firm's legitimate interest (Art. 6(1)(f) GDPR).

4. Conflict-of-interest checks

Before accepting an instruction, the firm must check that no conflict of interest arises. That check requires recording the names of the parties concerned, including where the enquiry does not proceed further.

5. Recipients

Data are processed by the firm and, where applicable, by staff acting under its responsibility, all bound by professional secrecy. They may be disclosed, strictly as necessary for your matter, to courts, opposing counsel, bailiffs, experts or competent authorities.

The site's hosting provider, Hostinger International Limited (61 Lordou Vironos Street, 6023 Larnaca, Cyprus), acts as a processor within the meaning of Article 28 GDPR, under a data processing agreement. Its access is limited to the technical connection data required for the operation and security of the site. It has access to no correspondence: the site carries no contact form, and emails you send to the firm do not pass through it. The servers are located in France.

The firm does not sell or rent personal data, and passes none of it on for advertising purposes.

6. Retention

• Enquiries not proceeded with: retained only as long as needed to deal with the enquiry, then deleted, subject to conflict-check records.
• Matters handled: 5 years from closure of the file, a period set by reference to the limitation periods applicable to professional liability. Documents belonging to the client are returned on closure.
• Accounting records: 10 years, the statutory retention period for accounting documents in Luxembourg.

7. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. These rights may be exercised by writing to alexis.guillaume@barreau.lu.

Their exercise may be restricted where the data are covered by professional secrecy or necessary for the establishment, exercise or defence of legal claims.

8. Complaints

You may lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux — cnpd.public.lu.

9. Cookies

This site sets no analytics, profiling or advertising cookies, and loads no third-party trackers on page load.

Typefaces are loaded from Google Fonts, which involves a connection to a third-party server that may log your IP address. To remove that transfer, the fonts can be self-hosted on the firm's own server (see the site's technical note).

10. Access map

The contact section offers an access map provided by Google Maps. It is not loaded automatically: until you click “Show the map”, no data is sent to Google. If you display it, Google may receive your IP address and set its own cookies, in accordance with its own privacy policy.

11. Whether providing data is required

The site carries no form: contact is made by email or telephone, directly with the firm and without any technical intermediary. You therefore remain in control of what you send.

To handle an enquiry the firm needs at least your name, a means of replying, and a description of the situation. Without those it can neither assess the matter nor check that no conflict of interest arises.

Where a matter is entrusted to the firm, providing certain data becomes a contractual necessity and, for identification data, a statutory obligation under anti-money-laundering rules.

12. Transfers outside the European Union

Two elements of the site rely on services provided by Google LLC, based in the United States: the typefaces, loaded when pages open, and the access map, loaded only if you click to display it. These calls disclose your IP address to Google.

Those transfers rest on the adequacy decision adopted by the European Commission on 10 July 2023 concerning the EU–US Data Privacy Framework, Google LLC being among the certified organisations.

No data relating to a matter is transferred outside the European Union. The typefaces can be self-hosted on the firm's own server so as to remove the transfer they cause.

13. No automated decision-making

The firm carries out no automated decision-making, no profiling and no algorithmic ranking of the enquiries it receives. Every enquiry is read and assessed by a lawyer.

14. Security

The firm implements appropriate technical and organisational measures to protect data against loss, alteration and unauthorised access. Exchanges through the site are encrypted (HTTPS).

Email is not inherently a secure channel; please do not send sensitive documents before an appropriate method has been agreed with the firm.

15. Changes

This policy may be amended. The version in force is the one published on this page.

Last updated: 19 August 2026.