FEDIS LAW
Privacy Policy
Last updated: 7 November 2026
1. Data controller
Fedis Law S.à r.l., 124, Boulevard de la Pétrusse, L-2330 Luxembourg — RCS B254396 — VAT LU33047316
Fedis Law has not appointed a Data Protection Officer. Privacy requests may be sent directly to the address below.
2. Data we process
When you use the contact form, we process the information you provide: first name, last name, email address, selected practice area and message. Limited technical data, such as IP address and server logs, may also be processed to operate and secure the website.
For internal audience measurement, we record the time, page, site language, referrer domain, approximate country, device category and browser category. The country is determined locally from the connection address and only the country code is retained. A daily pseudonymous visitor value is calculated from technical connection data using a secret cryptographic key. The raw IP address and full user-agent string are not stored in the analytics journal. No analytics cookie is used.
3. Purposes and legal bases
- Responding to enquiries and taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Operating and protecting the website and preventing abuse, based on our legitimate interests (Article 6(1)(f) GDPR).
- Measuring site use and improving its content, based on our legitimate interests (Article 6(1)(f) GDPR).
- Complying with legal and professional obligations where applicable (Article 6(1)(c) GDPR).
4. Recipients and service providers
Access is limited to authorised persons within Fedis Law and service providers who need the data to provide technical services. Contact-form messages are transmitted using Mailgun’s EU infrastructure. Data may also be disclosed to professional advisers or competent authorities where required by law.
5. Retention
Contact-form data is normally retained for up to 12 months after the last relevant exchange. A longer period may apply where the enquiry becomes a client matter or where retention is required to establish, exercise or defend legal claims or comply with legal and professional obligations.
The detailed audience-measurement journal, including the daily pseudonymous value, is retained for 90 days. After that period, only anonymous daily totals and distributions are retained without a visitor identifier, IP address or full user-agent string. These aggregate statistics are retained without a fixed expiry in order to compare long-term site use.
6. Google Maps and external links
Google Maps is not loaded automatically. If you choose to load the map, your browser connects directly to Google and Google may receive technical data under its own privacy terms. Links to third-party websites, including LinkedIn, only initiate a connection when you follow them.
7. Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction or portability of your data, and you may object to processing based on legitimate interests. You may also lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD).
8. Automated decisions
The website does not use automated decision-making or profiling producing legal or similarly significant effects.
9. Country database attribution
Country detection uses the open user-country database from the ip-location-db project and is performed locally on the Fedis Law server.