PRIVACY STATEMENT

Last updated: 12 June 2026

This Privacy Statement explains, in simple terms, how Just. Data. Lawgic. – JDL, a Luxembourg law office operated by Maître Evangelia Ntovolou, Avocate exerçant sous son titre d’origine, uses and protects personal data. It applies when you interact with JDL via any means, including its website.
Any processing carried out by JDL is in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the Luxembourg law of 1 August 2018 implementing the GDPR, the professional secrecy duty of lawyers as governed by Luxembourg law and the Luxembourg Bar Association and any other applicable legislation (together, the Applicable Law).

PERSONAL DATA

Just. Data. Lawgic. collects and processes your personal
data in the following context:
a. You have been, are or will be a client on your own or your company’s behalf or if you are a contact person or a representative of a client; or
b. You are a concerned or opposing party in a client’s matter; or
c. You apply as a candidate for a job or internship opportunity; or
d. You are a former, current, or prospective service provider or contact person/ representative of a service provider; or
e. You navigate on the website www.JDLawgic.eu or through targeted advertising/ marketing campaigns.

Just. Data. Lawgic. may process the following categories of data:

PURPOSE

Only the data necessary for the purposes outlined below and supported by a valid legal basis will be processed.
a. For the performance of the services in the context of an agreement or of any precontractual arrangements with you – based on art. 6.1.b GDPR (performance of precontractual measures or of a contract);
b. For client or service provider relationship management, including the maintenance of contracts, billing, archiving,
client acceptance, accounting – based on art. 6.1.b GDPR (performance of pre-contractual measures or of a contract);
c. To perform Anti-money laundering and Know your client (AML/KYC) checks, identifications and risk assessments –
based on art. 6.1.c GDPR and the Luxembourg Law of 12 November 2004 as updated (legal obligation);

RETENTION

In principle, personal data is only retained for as long as necessary for the performance of the related purpose.

• AML documents – 5 years after the end of the business relationship
• Professional documents related to a
  mission – Kept strictly for the time necessary to fulfil their purpose and comply with legal, regulatory
  and ethical obligations applicable to lawyers, in line with the principles of minimisation and storage limitation. In practice between 5 and 10 years from file closure, depending on the nature of the matter and associated risks, or if susceptible to dispute, until the full
  settlement of the issue.
• Internal admin documents (e.g. invoicing, comms, registers, etc.) – 10 years from the end of the financial year when they were created
• Client communication data – 2 years from the end of the relationship
• HR data – If not hired, immediate destruction upon end of recruitment process. If hired, during the employment relationship and 10 years thereafter.
• Cookies – 30 days from cookie installation on browser.

COLLECTION AND HOSTING

Your data is collected directly from you or may also be collected from colleagues of yours, providers, and third parties involved in the missions. It may also be collected from publicly
available sources, registers, or databases.

Your data is hosted exclusively in the European Union unless you instruct us or consent to transfer it after being informed about the risks this may entail due to the absence of an adequate level of data protection.

THIRD PARTIES

Your personal data is only accessed by the authorised lawyer or internal staff on a need-to-know basis. It is possible that your personal data is shared with third parties in limited circumstances, such as (a) the Luxembourg Bar Association in case of disputes, (b) administrative or judicial authorities when so required by law, (c) our vetted service providers subject to contractual, technical and organisational safeguards ensuring security and confidentiality, and (d) with our online providers for the purposes of subscription to the newsletter, booking an online meeting with us or reaching out via social media, subject to your agreement.

YOUR RIGHTS

You have the following rights based on Applicable Law:
Access – You can ask if JDL has your personal data and get a copy of it.
Rectification – You can ask JDL to correct your personal data if it is wrong or incomplete.
Deletion – You can ask JDL to delete your personal data when the law allows (for example, when it’s no longer needed or when you withdraw your consent).
Restriction – You can ask JDL to limit how your personal data is used in certain cases (for example, during a dispute or for
the legal hold).
Portability – If JDL processes your data based on consent or a contract, you can ask to receive it in a machine-readable
format or to have it sent to another organisation.
Objection – You can object to processing based on JDL legitimate interests if you explain your reason. JDL may still refuse if legitimate rights override your grounds.
Withdraw consent – When JDL relies on your consent, you may withdraw it at any time (this does not affect past processing).
Complain – If you believe your data or a request of yours has not been treated appropriately, you may file a complaint with JDL.
To exercise any of the above rights, simply contact Just. Data. Lawgic. at privacy@JDLawgic.eu .

SECURITY

JDL uses a combination of contractual, technical and organisational measures to protect your personal data. This includes encryption and secure communication tools, strong authentication and password protection, secure backup systems, locked storage for physical files, up-to-date IT security tools,
and internal policies and contractual templates governing confidentiality, teleworking, and use of infrastructure.