Privacy Notice
LAST UPDATED: June 2026
This Privacy Notice explains the processing of your Personal Data on the websites that are operated by
EXPATS LAW FIRM as the controller under GDPR and your rights under GDPR.
The respective offices of EXPATS LAW FIRM provide client corporate and legal services and process
Personal Data for their respective clients, events or other local services.
Definitions
"EXPATS LEGAL CONSULTANCY FZ-LLC", “EXPATS LAW FIRM”, "we", "us" or "our" - EXPATS LEGAL CONSULTANCY FZ-LLC and/or its associated offices depending on context.
"EXPATS Offices" - EXPATS LEGAL CONSULTANCY FZ-LLC offices and their connected businesses.
"Cookies" - A small text file that is stored by your browser. Each time you return to the same website, your browser retrieves and sends the relevant cookie(s) to the website's server. We also refer to similar technologies such as web storage or pixel tags by the term "Cookies".
"GDPR" - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and/or Regulation (EU) 2016/679 as amended and incorporated into UK law under the UK European Union (Withdrawal) Act 2018, as applicable.
"Personal Data" - Information relating to you which can be used to personally identify you (either directly or indirectly). Examples: your Name, telephone number or IP address.
"Websites" - Our Website at [ https://expatslawfirm.com ] and EXPATS LAW FIRM online tools.
A. WHY DO WE USE YOUR PERSONAL DATA?
1. Delivery of the Websites
Si vous accédez à nos sites web, des données personnelles sont temporairement stockées. Les données suivantes sont collectées dans ce
contexte :
L'adresse IP et le nom d'hôte de votre ordinateur
La date et l'heure de l'accès
La page consultée sur nos sites web
Le site web à partir duquel vous avez accédé à nos sites web
Si l'accès a réussi et la quantité de données transférées
Le type de votre navigateur et votre système d'exploitation
Et toutes les données personnelles que vous nous fournissez
Le traitement de ces données personnelles est nécessaire pour vous fournir les sites web. La base juridique de ce
traitement de vos données personnelles est notre intérêt légitime (art. 6 (1) f) RGPD).
Pour fournir les sites web, nous utilisons les prestataires de services suivants :
IONOS
IONOS is the hosting, domain name, and professional email service provider used by EXPATS LAW
FIRM. We use IONOS services to host and maintain our Websites, manage domain names, store Website
data, and operate our business email communications.
As part of providing these services, IONOS may process technical and Personal Data such as IP
addresses, server logs, email metadata, browser information, and security-related data necessary to ensure
the stability, availability, and security of our Websites and communications systems. IONOS is provided by
IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Personal Data processed through IONOS
is generally hosted within the European Economic Area (EEA). Where international transfers occur,
IONOS implements appropriate safeguards in accordance with applicable data protection laws and
GDPR requirements. The legal basis for this processing is our legitimate interest (Art. 6 (1) (f) GDPR) in
ensuring the secure and efficient operation of the Websites, infrastructure, and communications of
EXPATS LAW FIRM. You can find more information in IONOS's Privacy Policy.
Google Tag Manager
Google Tag Manager is a tag management system provided by Google Cloud EMEA Limited, 70 Sir John
Rogerson's Quay, Dublin 2, Ireland ("Google") that we use on our Websites. Google Tag Manager has
access to all personal data described under A.1. The Google Tag Manager allows us to add code and other
snippets such as pixels to our Websites. Google is only processing your IP address as an independent
controller. Any transfers to the US are covered by Google's participation in the EU-US Data Privacy
Framework which has been found to provide an adequate level of data protection (Art. 45 GDPR).
Google will not combine your IP address with Personal Data from other sources. The legal basis for the
transfer to Google is our legitimate interest (Art. 6 (1) f) GDPR) in providing the Website efficiently. You
can find more information in Google's Privacy Policy.
Other website service providers
Further service providers used to provide the Websites are described in our Cookie Notice.
2. Log data
Further storage of the data used to deliver the Websites takes place in log files in order to ensure the
functionality of our website and, if necessary, to check and enforce our rights or property, our terms of
use and the rights of third parties. The log files are stored as long as necessary for the respective purpose
(at most for 30 days). The legal basis is our legitimate interest (Art. 6 (1) f) GDPR).
3. Analytics
We use analytics services (without Cookies) to better understand your interests and to continuously
improve our Websites. These services allow us to analyze traffic and usage patterns of individual users
(without further identifying them) or groups. The legal basis is our legitimate interest (Art. 6 (1) f) GDPR)
in improving our website. In particular, we use the following analytics services:
Google Analytics
We use Google Analytics to analyse the use of our Websites and improve our services and user
experience. Google Analytics uses Cookies and similar technologies to collect information such as IP
address, browser type, device information, pages visited, time spent on the Websites, and interactions with
content.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland, acting as our processor. Where Personal Data is transferred outside the European Economic
Area (EEA), such transfers are protected by appropriate safeguards implemented by Google in
accordance with applicable data protection laws and GDPR requirements.
Where possible, IP anonymisation is enabled. The legal basis for this processing is your consent (Art. 6
(1) (a) GDPR). You can find more information in Google's Privacy Policy.
4. Cookies
For our use of Cookies see our Cookie Notice.
5. Registration, communication and contact forms
Nous utilisons vos Données Personnelles pour communiquer avec vous, par exemple lorsque vous vous inscrivez, vous connectez, participez à
des formations et des événements, ou nous envoyez des messages.
Nous collectons vos Données Personnelles si vous nous les fournissez en remplissant des formulaires sur nos Sites Internet. Nous pouvons utiliser
ces Données Personnelles pour répondre à vos demandes ou pour fournir les services que vous avez demandés. Nous utilisons également
les Données Personnelles que vous nous fournissez lorsque vous participez à des campagnes sur nos réseaux sociaux
(LinkedIn, etc.) ou lorsque vous nous envoyez des demandes ou des commentaires.
Le fondement juridique est l'exécution d'un contrat auquel vous êtes partie ou pour répondre à vos messages ou
demandes (Art. 6 (1) b) du RGPD). La fourniture de vos données personnelles est obligatoire, sans quoi il ne sera pas
possible de communiquer avec vous.
6. Webinars
Nous utilisons les Données Personnelles que vous fournissez lors de votre inscription à un webinaire EXPATS LAW FIM pour :
vous identifier en tant que participant inscrit au webinaire concerné ; vous donner accès au webinaire,
vous contacter au sujet du programme et des intervenants du webinaire,
vous envoyer des rappels et vous informer de tout changement concernant le webinaire (par exemple, un changement de
date ou d'heure de diffusion).
La base juridique est l'exécution d'un contrat auquel vous êtes partie ou pour répondre à vos messages ou
demandes (Art. 6 (1) b) RGPD). La fourniture de vos données personnelles est obligatoire, sans quoi il ne sera pas
possible de participer au webinaire.
Nous pouvons partager vos coordonnées (par ex., adresse e-mail) avec les intervenants afin de vous contacter après le
webinaire pour vous fournir leurs présentations et les enregistrements du webinaire et pour solliciter vos commentaires.
Les webinaires sont enregistrés à des fins de formation et pour nous aider à améliorer les services que nous fournissons. Nous pouvons
également utiliser vos Données Personnelles pour vous contacter après le webinaire afin de solliciter vos commentaires. Nous utilisons
des prestataires de services pour vous proposer des webinaires. Ces prestataires nous permettent de suivre l'inscription, la
participation et la qualité des webinaires. La base juridique est notre intérêt légitime (Art. 6 (1) f)
RGPD).
7. Social media pages
Our social media partners provide us with statistics and analytics on the use of our social media offerings.
These statistics do not contain any names or other information about individual users. With the help of
these services, we can analyse and improve our social media activities. This is our legitimate interest for
using these statistics (Art. 6 (1) f) GDPR).We do not use any social media share plugins by which information is automatically transferred to the provider of social media services when you visit our Websites. Any forwarding to social media providers such as LinkedIn or instagram takes place exclusively via link.
In particular, we use the following social media platforms :
We use LinkedIn to communicate with you and to advertise our work. The legal basis is legitimate interest
(Art. 6 (1) f) GDPR). For more information see LinkedIn's Privacy Policy.
When processing Personal Data on our LinkedIn page, we and LinkedIn act as so called "Joint
Controllers" according to Art. 26 GDPR. We have therefore concluded a separate agreement that can be
found under https://legal.linkedin.com/pages-joint-controller-addendum. For any further processing of
your data, LinkedIn is the sole controller. If you wish to exercise your rights to information, deletion, etc.
(see section "Your Rights"), LinkedIn is responsible for the fulfilment of your rights as part of our Joint
Controllership.
We use Instagram to communicate with you and to advertise our work. The legal basis is legitimate
interest (Art. 6 (1) (f) GDPR). For more information see Instagram's Privacy Policy. When processing
Personal Data on our Instagram page, we and Instagram may act as so called "Joint Controllers"
according to Art. 26 GDPR. For further processing of your data, Instagram is the sole controller. If you
wish to exercise your rights to information, deletion, etc. (see section "Your Rights"), Instagram is
responsible for the fulfilment of your rights as part of this Joint Controllership.
8. Newsletters & publications
We will only send you publications or newsletters when you have provided us with your specific consent
or have expressed your interest to us in a certain type of information or legal area. We also process your
Personal Data in order to provide you with tailored and relevant marketing, updates and invitations
including, with your consent, how you access and use our emails. We use service providers to provide you
with tailored marketing, publications and information about our services, and invitation to events. These
service providers allow us to track with your consent deliverability, opt outs, clicks on links and
downloads of stored materials in order to optimise our mailing campaigns. Where possible we are
anonymising IP addresses.
The legal basis is your consent (Art. 6 (1) a) GDPR).
In particular, we use the following service provider for sending newsletters analytics :
Brevo
Brevo is a service used for email marketing and newsletter communications. We use this service to send
newsletters, legal updates, event invitations and other email communications, and to provide link tracking
and open rate reporting. The service is provided by Sendinblue SAS (Brevo), 106 boulevard Haussmann,
75008 Paris, France, acting as our processor. Where international data transfers occur, Brevo implements
appropriate safeguards in accordance with applicable data protection laws and GDPR requirements. The
legal basis for this processing is your consent (Art. 6 (1) (a) GDPR). You can find more information in
Brevo's Privacy Policy.
9. Legal Updates subscription service
EXPATS LAW FIRM Legal Updates : if you choose to subscribe to the EXPATS LAW FIRM Legal
Updates subscription service, we use Personal Data that you provide during the subscription process to
set-up and maintain your Legal Updates account and to send you relevant Legal Updates content by
email. This will consist of information on legal and business issues that are relevant to your preferences.
Your agreement to the use of your Personal Data for these purposes is optional. If you decide not to
subscribe to Legal Update emails, we will not send Legal Update communications, but your use of our
Website will remain otherwise unaffected. You can change your Legal Update email preferences at any
time by logging into your account.
Legal Updates opt-out - you are entitled to opt-out from receipt of Legal Updates communications at any
time. You can do so by visiting the Manage Preferences pages and deselecting all email options. You can
also use the "unsubscribe" option included in all Legal Update e-mails. Alternatively, you can email the
Legal Updates support team who will process "unsubscribe" requests for you. When you unsubscribe we will keep a record of this, and once your request has been processed, you will stop receiving Legal Update emails. You can still use our Websites once you have unsubscribed.
The legal basis for sending you Legal Update emails is your consent (Art. 6 (1) a) GDPR).
10. Recruitment
If you apply to a vacancy at EXPATS LAW FIRM, we use the Personal Data you provide to us to decide
on your application. The legal basis is to take steps at your request to evaluate your application (Art. 6 (1)
b) GDPR). The provision of your personal data is required as otherwise it will not be possible to
communicate with you. With your consent (which you can withdraw at any time) your application may be
stored for future vacancies in case that your application is not accepted (Art. 6 (1) a) GDPR).
In some cases, you will be directed to our dedicated application portals. In these cases, you will be
provided with specific information about how your Personal Data will be handled in connection with
your application at the time that you submit your Personal Data.
For other vacancies we do not use an application portal. Instead, we either ask you to contact us directly
by email or we request that you upload a copy of your C.V . and covering letter so that we can consider
your suitability for the role.
11. Further purposes
Si nécessaire, nous traitons vos Données Personnelles à des fins supplémentaires, en particulier pour exécuter des contrats et dans
le cadre de relations d'affaires existantes ou nouvelles (veuillez noter que pour les services clients, les bureaux d'EXPATS LAW
FIRM agiront en tant que responsables de traitement distincts). Nous traiterons ces Données Personnelles pour l'exécution d'un
contrat (Art. 6 (1) b) RGPD), pour nous conformer aux obligations légales, aux ordonnances judiciaires ou à d'autres décisions contraignantes
des autorités publiques (Art. 6 (1) c) RGPD) et pour satisfaire nos intérêts légitimes, y compris mais sans s'y limiter
à la protection des droits de EXPATS LAW FIRM et d'autres personnes et à l'exercice de réclamations juridiques (Art. 6 (1) f)
RGPD).
B. WHO WILL WE SHARE YOUR PERSONAL DATA WITH?
1. Service providers
In addition to the service providers described under A., we also share your Personal Data with other
third-party service providers who act on our behalf to:
provide support services in relation to our Websites for the purposes of hosting and maintaining
our Websites; providing data storage; assisting us with database management, and to assist us
with related tasks or processes
send out our surveys and record and process the results
manage the invitation and registration process for our events.
All of our service providers are bound by written contract to process Personal Data provided to them
only for the specific service and to maintain appropriate security measures to protect your Personal Data.
2. Sharing within EXPATS LAW FIRM
EXPATS LAW FIRM and its offices share your Personal Data with other offices :
• if you ask us to do so in an online form (legal basis : performance of a contract pursuant to Art. 6 (1) b) GDPR)
• to organise and/or manage an event that you have registered to attend (legal basis : performance of a contract pursuant to Art. 6 (1) b) GDPR)
• where we need to do so in order to provide the services or information that you have requested. (legal basis : performance of a contract pursuant to Art. 6 (1) f) GDPR).
3. Other third parties
We share your Personal Data with:
• our accountants, auditors, lawyers, or similar advisers when we ask them to provide us with professional advice
• investors and other relevant third parties in the event of an actual potential sale or other corporate transaction related to EXPATS LEGAL CONSULTANCY FZ-LLC
• to comply with a legal obligation
• to comply with a court, tribunal, regulator, or government agency order.
C. IN WHICH COUNTRIES IS MY PERSONAL DATA TRANSFERRED?
EXPATS LAW FIRM is located in the United Arab Emirates. Offices located outside of the EEA, service providers and other third-party recipients may also process personal data outside the EEA/UK. In these cases, we ensure an adequate level of data protection to comply with the requirements of European/UK law (this is usually done with the help of EU standard contractual clauses of the European Commission, the UK Addendum to the EU standard contractual clauses and, if necessary, other appropriate guarantees). You can request a copy of the EU standard contractual clauses from our data protection officer listed in the contact information below.
D. HOW LONG DO WE STORE YOUR PERSONAL DATA?
Unless a specific duration of data storage is specified in this Privacy Notice, we will only process your data as long as this is necessary for the respective purposes. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted.
This means for example, that we store your user account data (login, profession, name etc.) until you delete it. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods. For information on how long Cookies are stored, please refer to our Cookie Notice.
E. WHAT ARE MY RIGHTS?
Vous pouvez demander l'accès à vos Données Personnelles. Si vous avez fourni des Données Personnelles sur la base d'un contrat ou d'un
consentement, vous avez le droit de recevoir ces Données Personnelles dans un format couramment utilisé et lisible par
machine.
De plus, vous pouvez également demander la suppression, la rectification ou la limitation du traitement de vos
Données Personnelles sous réserve des conditions et limitations définies dans le RGPD.
Si vos Données Personnelles sont transférées vers un pays situé en dehors de l'EEE qui n'assure pas un niveau adéquat
de protection des données, vous pouvez demander une copie du contrat qui garantit ce niveau de protection adéquat.
Vous pouvez retirer votre consentement à tout moment.
Vous pouvez introduire une réclamation auprès d'une autorité de protection des données, en particulier dans l'État membre de votre
résidence, votre lieu de travail ou le lieu de l'infraction présumée.
Droit d'opposition :
Dans la mesure où nous fondons le traitement de vos Données Personnelles sur nos intérêts légitimes (Art. 6 (1) f)
du RGPD), vous pouvez vous opposer à un tel traitement à tout moment pour des raisons tenant à votre situation particulière. Dans ce
cas, nous ne traiterons plus ces Données Personnelles, à moins que nos intérêts ne prévalent. Vous pouvez vous opposer à
l'utilisation de vos Données Personnelles à des fins de marketing direct à tout moment, sans justification.
F. WHO CAN I CONTACT?
Please address your questions or concerns regarding the processing of your Personal Data to:
info@expatslafirm.com.
G. COUNTRY-SPECIFIC PROVISIONS
Contact data, legal information and privacy notices for EXPATS LAW FIRM offices can be found in the
Legal Information.
France
La politique de confidentialité suivante couvre l'utilisation par le cabinet d'avocats EXPATS LAW FIRM dont le siège social est situé au 11 boulevard Sébastopol, 75001 Paris (France) ("nous", "notre", "nos", "EXPATS LEGAL CONSULTANCY FZ-LLC", "EXPATS LAW FIRM") des données personnelles concernant (I) ses clients, prospects et (II) les membres de la communauté des anciens élèves ("vos informations").
EXPATS LAW FIRM peut être amené à divulguer certaines informations vous concernant à d'autres bureaux associés. Les conditions d'utilisation des données concernées par les destinataires sont régies par un contrat de "partage de données" conclu entre les bureaux associés et visant à assurer la sécurité de vos données. Pour plus d'informations sur le transfert de certaines de vos données avec nos bureaux associés, veuillez consulter notre site internet. Veuillez prendre connaissance de la politique de confidentialité suivante qui explique comment nous utilisons et protégeons vos informations. Pour toute demande concernant le traitement de vos données personnelles, vous pouvez contacter notre Délégué à la Protection des Données par e-mail à l'adresse info@expatslawfirm.com ou en nous contactant au +33 7 82 88 48 28. Aux fins du présent document, les termes "Données personnelles", "Traitement", "Responsable du traitement" et "Sous-traitant" ont la définition qui leur est donnée à l'article 4 du Règlement européen 2016/679 du 27 avril 2016 (ci-après le "Règlement général sur la protection des données" ou "RGPD"). L'expression "Législation applicable en matière de protection des données" fait référence au RGPD et à la loi française Informatique et Libertés n° 78-17 du 6 janvier 1978.
