Arcas Law endeavours to guarantee a high-quality service in accordance with applicable rules and regulations; for this, we need to process certain personal data. Arcas Law attaches great importance to assuring protection of its clients' data. This data protection policy sets out for you the means used by Arcas Law in processing your personal data.
For questions regarding the data protection policy generally, please call Arcas Law any time on +32 3 369 19 90 or email us at gdpr@arcaslaw.be. For questions involving more than a simple request for information, you may be asked to provide identification so that we ensure the information and data requested is communicated to the appropriate person.
The party who controls the processing of your personal data (the "controller")
The controller in respect of data concerning you is Arcas Advocaten BV, having its registered office at Joseph Stevensstraat 7, 1000 Brussels, and registered as an enterprise under the number 0644.845.409.
The personal data that is processed
In the handling of client case files: the personal data that is processed is all personal data that is necessary to create and maintain your legal file and provide quality legal assistance and advice. It includes data used to identify you, as well as financial and official data, plus legal data.
With regard to newsletter mailings, we collect your name, e-mail address, the name of your company or organisation, your job title and any preferences you express regarding the types of newsletters you wish to receive.
Regarding job applications: we process the personal data provided by applicants in the context of their application. This includes details for identification purposes, any supporting letter accompying an application and their CV.
Regarding data remaining when you visit our website: to enhance the ease of visits to our website, so-called "cookies" are stored on your device. You can configure your browser to monitor the different "cookie" settings and decide whether to accept each one individually or block "cookie" storage in some or all cases.
Why your personal data is processed
For handling your case files: the purpose of processing the data is to provide legal assistance and/or representation, together with client records administration, registration and billing. We only process such personal data as is needed for the stated purposes, and no personal data is thereafter processed in a way that runs counter to these purposes.
Regarding newsletter mail shots: the purpose of processing the data is to be able to inform you from time to time about legal topics and developments that may be of interest and of events in your field of work.
In the case of job applications, the purpose of processing the data is to carry out an assessment of applicants, to be able to contact them and, in the event of a rejection, to be in a position to advise them of any future, new vacancies.
The statutory basis for processing data concerning you
Your personal data is processed on the basis of either a contractual agreement or our legitimate interest in so doing. For any processing that requires, for its legitimacy, to be carried out based on our having received consent from you to do it, that consent will be requested from you beforehand. Your consent may be withdrawn any time you wish.
Persons with access to your personal data
Your data is mainly processed internally. In this context, the range of access is limited to those within our offices who need, and to the requisite extent, for the purpose of perfoming the task in question or their duties in general.
Outside of this, the data can only be provided to third parties if such is necessary for attainment of the aforementioned purposes. Any such third parties are only involved in terms of the requisite contractual arrangements in place to ensure that your personal data is secure.
Moreover, no data is passed to third parties unless this is legally required or permitted. For example, it can be that your data is sent to your insurer.
How your personal data is protected and how long it is retained
The necessary technical and organisational measures are taken to secure personal data.
Personal data is not stored for longer than is necessary. Once a retention period ends, personal data is erased from relevant records and destroyed within a reasonable time.
Personal data collected for purposes relating to the provision of legal services is kept until no earlier than the end of the service. After provision of the service, we may be obliged to retain your personal data for longer if this is required in order to comply with laws and regulations applicable to the provision of legal services.
Personal data collected for the purpose of newsletter mail shots will be kept for as long as you continue to be signed up for these newsletters. You may withdraw your consent at any time.
Personal data collected in the context of a job application is retained in our databases for a period of two years, so that you can be contacted directly in the event of a subsequent vacancy arising.
Your rights and how to exercise them
You have rights to demand the correction and inspection and to receive a complimentary copy of your personal data (second and subsequent copies may attract a modest charge).
In certain cases, you also have the rights to have a copy of your personal data transferred to another person as named by you, to object to further processing of your personal data, or to request the erasure of your personal data. Your exercise of these rights is subject to the relevant applicable statutory provisions. Requests can be notified by calling +32 3 369 19 90 or sending an e-mail to gdpr@arcaslaw.be. You will be informed of the response to your request within one month. Where complex or repeated requests are made, the response period may be up to two months longer, which you will be informed of as needs be.
If you have a complaint about Arcas Law's processing of your personal data, please get in touch with Arcas Law and we will give the matter our most earnest consideration. You can register your complaint by calling +32 3 369 19 90 or by emailing us at gdpr@arcaslaw.be. In addition, under the laws in force, there is an option open to you to lodge a complaint with the Data Protection Authority.
The effective date of these data protection rules is 25 May 2018. Arcas Law reserves the right to amend this data protection policy from time to time. Changes will be notified on our website and posted in our firm's meeting rooms and waiting room. We therefore recommend you check for changes to the data protection policy at regular intervals.
This data protection policy was last amended on 12 October 2022.