Privacy Policy

AIUS LEGAL | 2025

1. Who We Are

This privacy policy describes how Advokatfirman Aius Legal SRL (“we”, “us”, “our”) collects and processes personal data in connection with our legal services, events, marketing activities, recruitment, and business relationships.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

Data Controller:

Advokatfirman Aius Legal SRL, registered with the Belgian Crossroads Bank for Enterprises (Banque Carrefour des Entreprises – Kruispuntbank van Ondernemingen) under number1020.274.011 and with registered offices at Avenue Louis Lepoutre 91, B-1050 Brussels.

www.aiuslegal.com

Email for Data Protection Queries: info@aiuslegal.com

2. Scope of This Policy

This policy applies to:

  • Clients and client representatives

  • Suppliers, consultants, and professional contacts

  • Individuals attending events or subscribing to communications

  • Recruitment applicants

  • Visitors to our offices or website

3. What Personal Data We Collect

We collect and process the following categories of personal data:

  • Identification and contact details: name, title, email, phone, address, date and place if birth, national identification number, company, job role, etc.

  • Client-related data: billing information including bank account numbers, case records, conflict and AML data

  • Recruitment data: CVs, applications, interview notes, test results

  • Marketing and communications data: preferences, event participation, newsletter subscriptions

  • Technical and security data: CCTV footage, building access, IP addresses, website usage data (e.g. through cookies)

  • Special categories (only where necessary):health data (e.g., for accessibility at events), criminal background checks (e.g., AML compliance)

We generally do not process data from minors or collect data that is unnecessary for our stated purposes.

4. Why and How We Use Your Data

Your personal data is processed for the following purposes:

Legal Services

  • Client intake (including conflict of interest and anti-money laundering checks)

  • Engagement and performance of legal work

  • Billing, accounting, and regulatory compliance

Business Development & Marketing

  • Event registration and administration

  • Sending legal updates, invitations, and firm news (opt-out available)

  • Internal analytics and relationship management

Recruitment

  • Reviewing job applications and candidate suitability

  • Managing internship and student program participation

  • Talent pool communications (with your consent)

Legal Grounds for Processing

We rely on the following legal bases:

  • Performance of a contract (e.g., client engagement)

  • Legal obligation (e.g., AML and tax compliance)

  • Legitimate interest (e.g., marketing, business development, recruitment)

  • Consent, where required (e.g., storing CVs beyond recruitment period)

5. Data Sharing and Transfers

We may share your personal data with:

  • Group or partner firms for internal administration

  • Government authorities or regulators (e.g., tax, AML, courts)

  • Professional advisers, IT service providers, or vendors

  • Event partners or venue hosts (for event logistics only)

We do not sell your personal data.

International Transfers

If personal data is transferred outside the EEA, we will ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)

  • Binding Corporate Rules (BCRs)

  • Adequacy decisions under GDPR

We do not routinely transfer personal data to third countries without ensuring such safeguards.

6. Data Retention

We retain personal data as follows:

  • Client and case data: 10 years years from completion of the engagement (in line with the applicable professional and legal obligations requirements)

  • Recruitment data: Up to 2 years (or 5 years with consent for student activities)

  • Marketing contacts: Up to 2 years from last contact, unless unsubscribed

  • Accounting and legal compliance data: As required by law

We may anonymize data for statistical or historical analysis.

7. Your Rights

You have the following rights under GDPR:

  • Access – request a copy of your personal data

  • Rectification – correct inaccurate or incomplete data

  • Erasure – request deletion of your data (in certain cases)

  • Restriction – limit how your data is processed

  • Data portability – receive your data in a machine-readable format

  • Object – object to processing based on legitimate interests

  • Withdraw consent – if processing is based on consent

  • Lodge a complaint – with the Belgian Data Protection Authority (DPA) or the relevant supervisory authority in your country

To exercise these rights, contact us at: info@aiuslegal.com

8. Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

9. Contact Us

If you have any questions about this policy or your data, contact:

Data Protection Contact

Advokatfirman Aius Legal SRL

info@aiuslegal.com | +32 470 880 774 | Avenue Louis Lepoutre 91, 1050, Brussels

Belgian Authority for Privacy Protection: https://www.dataprotectionauthority.be/