Privacy Policy

01

Introduction

Phénix Avocats ("we", "us", or "our") is a law firm established in Luxembourg. We are committed to protecting your personal data and respecting your privacy in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and applicable Luxembourg data protection law.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website at phenixavocats.lu (the "Website").

02

Data Controller

The data controller responsible for your personal data is:

03

What Personal Data We Collect

Data you provide voluntarily

When you submit an enquiry through our contact form, we collect the following information:

• Full name
• Email address
• Phone number
• Your message and details of the legal matter you are enquiring about

Data collected automatically

When you visit our Website, certain technical data is automatically collected to ensure the site functions correctly:

• Session cookies necessary for basic site navigation (deleted when you close your browser)

Data processed via third-party services

Our Website uses Google Maps to display our office location. When the map is loaded, Google may process your IP address and location data in accordance with Google's own Privacy Policy. We do not control this processing.

04

Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interest (Article 6(1)(f) GDPR): to respond to your legal enquiries and provide information about our services.
• Consent (Article 6(1)(a) GDPR): for the use of non-essential cookies, where you have provided consent via our cookie banner.
• Legal obligation (Article 6(1)(c) GDPR): where processing is required to comply with applicable law, including professional obligations applicable to lawyers in Luxembourg.

05

How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiries and assess whether we can assist with your legal matter
• Manage our client relationships and communications
• Comply with our professional and legal obligations as a law firm
• Ensure the technical functioning and security of our Website

06

Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law:

• Enquiry form submissions: retained for the duration of our pre-contractual or contractual relationship, and thereafter for up to 5 years in accordance with applicable limitation periods under Luxembourg law.
• Session cookies: deleted at the end of your browser session.

07

Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: trusted technology providers who assist us in operating our Website (e.g., Webflow Inc. for website hosting), under strict data processing agreements.
• Legal obligations: where we are required to disclose information by law, court order, or regulatory authority.
• Professional obligations: where required under the rules of the Luxembourg Bar (Barreau de Luxembourg).

08

Cookies

Our Website uses cookies — small text files placed on your device when you visit a website.

We use the following types of cookies:

• Essential cookies: necessary for the Website to function. These cannot be disabled.

You can manage your cookie preferences at any time by clicking the "Preferences" button displayed on our Website. For more information about cookies generally, please visit allaboutcookies.org.

09

Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: to obtain a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restriction: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@phenixavocats.lu. We will respond within one month. In complex cases, this period may be extended by a further two months, of which we will notify you.

10

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Luxembourg data protection supervisory authority:

11

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our Website is served over HTTPS (encrypted connection).

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the Policy was last revised. We encourage you to review this Policy periodically.

13

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us: