Privacy Policy

Effective Date: January 2, 2026  

1. Identity of the Data Controller 

This Privacy Policy describes how ECLIPSE AVOCATS À LA COUR, a law firm association established at 8, rue des Girondins – L-1626 Luxembourg (hereinafter “the Firm”), processes personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended Luxembourg Law of 1 August 2018 on the protection of individuals with regard to the processing of personal data.  

The data controller is the Firm itself, represented by its partners.  

The Data Protection Officer (DPO) is Me Aurore MERZ-SPET, who can be contacted at:  a.merzspet@eclipselegal.lu 

2. Purposes of Processing 

The Firm processes only the personal data strictly necessary for the performance of its mission and the fulfilment of its legal and regulatory obligations.  

The purposes of processing include, in particular:  

• The management and follow-up of client files, including correspondence and the management of documents and evidence;  

• The fulfilment of legal obligations incumbent upon lawyers, particularly regarding anti–money laundering and counter–terrorist financing (AML/CFT);  

• Invoicing, accounting and administrative management of the Firm;  • The management of contacts through the website (contact form);  • The management of relationships with the Firm’s service providers and suppliers;  • The management of spontaneous job applications.  

3. Legal Basis for Processing 

Processing activities are based on the following legal grounds, in accordance with Article 6 of the GDPR:  

• Article 6(1)(b) – Performance of a contract or pre-contractual measures;  

• Article 6(1)(c) – Compliance with a legal obligation (notably those imposed on lawyers under Luxembourg law); 

• Article 6(1)(f) – The Firm’s legitimate interest in ensuring the proper management of its activities;  

• Article 6(1)(a) – Consent, where expressly required (for example, for inquiries submitted via the website contact form).  

4. Categories of Personal Data Processed 

The categories of personal data that may be collected and processed include:  

• Identification data (name, first name, address, nationality, date and place of birth, ID number, etc.);  

• Contact details (postal address, e-mail, telephone number);  

• Data relating to professional, economic or family circumstances, where necessary for case management;  

• Financial and banking data (statements, supporting documents, IBAN details, etc.);  

• Website usage data (IP address, date and time of messages sent via the contact form).  

5. Data Recipients and Processors 

Personal data are processed exclusively by members of the Firm, all bound by professional secrecy.  

Certain data may, where strictly necessary, be shared with service providers acting as processors, including:  

• The IT service provider and website host;  

• The Firm’s accounting service provider;  

• The software service provider (case management and document exchange tools);  • The compliance tool provider (KYC/AML).  

These processors act under contractual agreements guaranteeing confidentiality,  security, and GDPR compliance.  

6. Data Transfers Outside the European Union 

No personal data are transferred to countries outside the European Union (EU) or the European Economic Area (EEA). 

7. Data Retention Period 

Personal data are retained only for as long as necessary for the purposes for which they were collected, subject to the legal and ethical obligations applicable to lawyers.  

• Client files are retained for five (5) years from the date of case closure, unless a longer period is required by law.  

• Accounting records are retained for the legally required period.  

• Contact form submissions are retained only for the time necessary to process the request, after which they are deleted.  

8. Security and Confidentiality 

The Firm implements appropriate technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data, in compliance with GDPR requirements.  

All data are hosted exclusively within the European Union, in secure environments, with access restricted to authorised personnel only.  

9. Rights of Data Subjects 

Any individual whose data are processed by the Firm has the following rights, under the conditions set out in the GDPR:  

• Right of access (Article 15);  

• Right to rectification of inaccurate or incomplete data (Article 16);  • Right to erasure (“right to be forgotten”) (Article 17);  

• Right to restriction of processing (Article 18);  

• Right to object to processing (Article 21);  

• Right to data portability (Article 20), where applicable.  

Any request concerning these rights may be addressed to:  

a.merzspet@eclipselegal.lu 

or by post to:  

ECLIPSE AVOCATS À LA COUR – 8, rue des Girondins – L-1626 Luxembourg.  

The Firm reserves the right to request proof of identity in order to verify the identity of the applicant. 

10. Right to Lodge a Complaint 

Any data subject has the right to lodge a complaint with the competent supervisory authority:  

Commission nationale pour la protection des données (CNPD) 

15, Boulevard du Jazz 

L-4370 Belvaux 

info@cnpd.lu 

www.cnpd.lu 

11. Updates to the Privacy Policy 

The Firm reserves the right to modify this Privacy Policy at any time to reflect legal,  regulatory, or technical developments.  

The updated version will be published on the website www.eclipselegal.lu and will indicate the date of its most recent update.  

12. Governing Law and Jurisdiction 

This Policy shall be governed by and construed in accordance with the laws of the Grand Duchy of Luxembourg.  

Any dispute relating to the validity, interpretation, performance, or termination of this Policy,  as well as any related dispute, shall be submitted to the exclusive jurisdiction of the courts of Luxembourg City (Grand Duchy of Luxembourg).  

ECLIPSE AVOCATS À LA COUR 

Law Firm Association registered with the Luxembourg Bar 

8, rue des Girondins – L-1626 Luxembourg 

a.merzspet@eclipselegal.lu 

Effective Date: January 2, 2026