Privacy Policy
Personal Data Protection Policy
The Law Firm KM Legal, led by Maître Katarzyna Martin, Attorney-at-law / Avocat à la Cour admitted to the Luxembourg Bar, places paramount importance on the confidentiality of the information entrusted to it and the scrupulous respect for privacy. This policy aims to transparently explain the conditions under which your data is collected, processed, protected, and retained.
01. Data Controller
The data controller of the personal data collected on this site and in the context of the Firm's activities is:
- Firm: KM Legal — Maître Katarzyna Martin
- Professional Title: Attorney-at-law / Avocat à la Cour, member of the Luxembourg Bar Association
- Professional Address: 39, rue des Jardins, L-4151 Esch-sur-Alzette, Luxembourg
- Telephone: +352 661 410 111
- Email: ul.lagelmk@tcatnoc
02. Attorney-Client Privilege & Ethical Rule
In the Grand Duchy of Luxembourg, the practice of the legal profession is governed by the amended law of August 10, 1991, and by the Internal Regulations of the Luxembourg Bar. The lawyer is bound by the strictest attorney-client privilege, in accordance with the provisions ofArticle 458 of the Luxembourg Penal Code.
Public Order Guarantee
The professional secrecy of the attorney is of general public order. All exchanged correspondences, entrusted documents, and confidences gathered within the Firm in the context of legal consultation or litigation benefit from immunity and enhanced confidentiality, prevailing over general communication obligations.
03. Categories of Data Collected
In application of the principle of minimization provided for in Article 5 of the GDPR, the KM Legal Firm only collects data that is strictly adequate, relevant, and necessary for the purposes pursued:
- Identification and contact data: Name, first name, title, postal address, email address, phone number, company, position or professional status.
- Data related to legal cases: Factual information, contractual documents, correspondences, procedural acts, civil status data necessary for legal assistance, judicial representation, or advice.
- Data related to regulatory compliance (AML / KYC): Copies of official identity documents, proof of residence, verification of beneficial owners (RBE) in accordance with legal obligations to combat money laundering and terrorist financing (Law of 12 November 2004).
- Financial and billing data: Bank details (IBAN/BIC), payment history, fee provisions, and issued invoices.
- Technical navigation data:IP address, timestamp of requests, and technical browser information that may appear in server logs for security and diagnostic purposes.
04. Purposes and Legal Bases of Processing (Art. 6 GDPR)
Each data processing is based on a lawful and formally identified legal basis:
| Purpose of Processing | Legal Basis (GDPR) | Categories of Data |
|---|---|---|
| Processing of contact requests and appointment scheduling via the website. | Execution of pre-contractual measures at the request of the person (Art. 6.1.b). | Identity, email, phone, message. |
| Management, processing, and defense of client files (advice, drafting of documents, litigation). | Execution of a legal assistance agreement or an attorney mandate (Art. 6.1.b). | Identity, case documents, legal elements. |
| AML/KYC identity verification and ethical obligations of the Luxembourg Bar. | Compliance with legal and regulatory obligations applicable to the profession (Art. 6.1.c). | Identity documents, domiciliation, beneficiaries. |
| Billing, accounting of the Law Firm and tax declarations in Luxembourg. | Legal obligation (Commercial Code and Luxembourg tax laws) (Art. 6.1.c). | Accounting data, invoices, IBAN. |
| Website security, anti-spam protection, and fraud prevention. | Legitimate interest of the Law Firm to secure its digital infrastructures (Art. 6.1.f). | Security logs, anonymized IP. |
05. Data Recipients & Hosting
The personal data processed by the Law Firm KM Legal is reserved for the exclusive use of Maître Katarzyna Martin and her collaborators bound by the same professional secrecy obligations.
In the context of the normal execution of entrusted mandates and subject to your consent, certain data may be transmitted:
- To the competent courts, registries, judges, bailiffs / judicial officers, and notaries in Luxembourg.
- To opposing attorneys in the context of legal proceedings and according to the rules of ethical contradiction.
- To service providers necessary for the operation of the website, messaging, or file management, to the extent necessary for their mission and according to data protection obligations.
No personal data is sold, transferred, rented, or transmitted for commercial or advertising purposes.
06. Retention Periods
Retention periods are determined according to Luxembourg's legal, regulatory, and ethical requirements:
| Type of Data | Retention Period | Basis |
|---|---|---|
| Unanswered contact requests | Maximum 2 years after the last exchange | Prospect management and administrative follow-up |
| Legal files and client archives | 10 years from the final closure of the file | Limitation period for civil professional liability in Luxembourg |
| AML / KYC compliance documents | 5 years after the end of the business relationship | Amended Law of 12 November 2004 on combating money laundering |
| Accounting documents and invoices | 10 years from the closure of the financial year | Obligations of the Luxembourg Commercial Code |
07. Your Rights Under the GDPR
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
- Right of access: Obtain confirmation that your data is being processed and receive a clear copy.
- Right to rectification: Request the update or correction of inaccurate or incomplete information.
- Right to erasure ('right to be forgotten'): Obtain the erasure of your data, subject to legal obligations for attorney file retention and limitation periods.
- Right to restriction of processing: Temporarily freeze the use of your data in cases provided by law.
- Right to data portability: Receive your data provided in a structured, commonly used, and machine-readable format.
- Right to object: Object at any time, on legitimate grounds, to processing based on legitimate interest.
To exercise one of these rights, you can contact the Firm by email at ul.lagelmk@tcatnoc or by postal mail at our address in Esch-sur-Alzette. A response will be provided within a maximum of 30 days.
08.Competent Supervisory Authority (CNPD Luxembourg)
If you believe that the processing of your data infringes your rights, you can contact the Firm or lodge a complaint with the competent supervisory authority, notably:
National Commission for Data Protection (CNPD)
Address: 15, Boulevard du Jazz, L-4370 Belvaux, Grand Duchy of Luxembourg
Telephone: (+352) 26 10 60 - 1
Official website: https://cnpd.public.lu
09. Security & Cookie Management
Our website applies a strict privacy by design policy (Privacy by Design). We do not use any intrusive advertising trackers. Any cookies that may be placed are exclusively for ensuring the technical operation and security of navigation.
Last revision and entry into force: March 2026. The Firm KM Legal reserves the right to adapt this policy according to legal and ethical developments.