Privacy Policy

Data controller

The data controller for personal data collected through this website and the intake form is JURISITA, represented by Agnieszka Maria Sità, [Street, Postal code, Brussels, Belgium]. For any question concerning your data or this policy, please write to privacy@jurisita.eu.

What data we collect

Depending on your interaction with JURISITA, we may process:

• Contact and identification data submitted through the intake form or by email: name, email address, telephone number, country of residence and nationality, family status where relevant.
• Matter data: information you choose to share about your legal situation, including sensitive data where you provide it (family circumstances, children, financial situation, health information where relevant to the matter). We ask you to share only what is truly necessary.
• Documents you attach or send subsequently, only for the purposes of assessing and handling your matter.
• Technical data: strictly necessary technical logs (IP address, browser type, timestamps) used to keep the site secure and functional.

Purposes and legal bases

• Responding to your request and preparing a first consultation, on the basis of steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Providing legal coordination services once a formal engagement is signed, on a contractual basis (Art. 6(1)(b) GDPR).
• Complying with our legal obligations (anti-money laundering, accounting, professional record keeping), on the basis of Art. 6(1)(c) GDPR.
• Processing sensitive data strictly necessary to your matter, on the basis of your explicit consent or of the establishment, exercise or defence of legal claims (Art. 9(2)(a) and (f) GDPR).
• Site security, on the basis of our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).

Recipients and international transfers

Data is accessed only by JURISITA and, when necessary to your matter, by independent lawyers, mediators, translators or notaries you have been informed of and, where appropriate, agreed to. These professionals act as independent controllers or joint controllers, bound by their own professional secrecy.

Technical service providers (hosting, form intake, secure email) act as data processors under a written agreement. Where a provider is located outside the European Economic Area, transfers are protected by an adequacy decision of the European Commission or by Standard Contractual Clauses, together with additional safeguards where required.

Retention

• Intake requests that do not lead to an engagement: kept for up to 12 months, then deleted.
• Active client files: kept for the duration of the mandate.
• Closed files: archived for the period required by professional and legal rules (currently 5 years after closure for civil liability purposes, up to 10 years for accounting), then destroyed.
• Technical logs: rotated after a short technical period.

Your rights

You have the right to:

• access the data we hold about you and receive a copy;
• request rectification of inaccurate or incomplete data;
• request erasure where the legal grounds for processing no longer apply;
• request restriction of processing;
• object to processing based on our legitimate interest;
• data portability for data you provided under a contract or consent;
• withdraw your consent at any time, without affecting past processing;
• lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the supervisory authority of your habitual residence.

To exercise your rights, write to privacy@jurisita.eu. We may ask for reasonable identification when a request is unclear or where required to protect your data.

Automated decisions

JURISITA does not use automated decision-making or profiling that produces legal effects on you.

Security

We use reasonable technical and organisational measures to protect personal data, including encrypted transport (HTTPS), access controls, restricted document storage and confidentiality obligations for anyone involved in the matter.