1. Data controller
The data controller for the processing of your personal data on hecht-rigas.dk is:
Højbro Plads 10
DK-1200 Copenhagen K
CVR no. 45156842
info@hecht-rigas.dk
+45 31 58 23 53
If you have any questions about how we process your personal data, you are always welcome to contact us at the details above.
2. Personal data we process
We process only the personal data that you actively provide to us — typically in connection with enquiries via our contact form or directly by email or telephone. This may include:
- Name
- Email address
- Telephone number
- The contents of your enquiry
- Any company details you provide
In addition to the information you actively provide, the website automatically records technical log data on each visit — including IP address, browser type, operating system and time of visit. This information is processed on the basis of legitimate interest for the purposes of operational reliability and security of the website.
The website uses Google Analytics for anonymous visitor statistics. Google Analytics is only activated if you give consent via the cookie banner.
3. Purpose and legal basis
We process your information for the purposes of responding to your enquiry and assessing whether we can provide the legal services you are seeking. The legal basis is:
- GDPR Article 6(1)(b) — processing is necessary to take steps at your request prior to entering into a contract; or
- Article 6(1)(f) — our legitimate interest in being able to respond to and administer incoming enquiries.
If an actual client engagement is established, the processing of personal data will additionally be governed by our client terms and the rules of professional conduct for attorneys, including the duty of confidentiality.
4. Retention and deletion
Enquiries that do not lead to a client engagement are deleted no later than 12 months after receipt, unless there is a legitimate reason for longer retention — for example, conflict-of-interest checks or statutory documentation.
Information related to a client engagement is retained in accordance with the rules of professional conduct for attorneys and the Danish Bookkeeping Act, typically for at least 5 years after the matter has been concluded.
5. Third parties
Your information is not disclosed to third parties for marketing purposes. To the extent that handling a matter requires the involvement of counterparties, courts, authorities or other partners, disclosure occurs solely in accordance with the agreed engagement and applicable law.
The website is hosted on Vercel (Vercel Inc., USA). Contact-form data is processed via Vercel Edge Functions and Resend and may consequently be transmitted to servers in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework.
7. Your rights
As a data subject, you have the following rights against us as data controller under the GDPR:
- Right of access — you can request access to the information we process about you.
- Right to rectification — you can request correction of inaccurate information.
- Right to erasure — in certain cases you can request deletion of your information.
- Right to restriction — you can request that processing be restricted while an objection is being considered.
- Right to object — you can object at any time to processing based on legitimate interest.
- Right to data portability — in certain cases you may receive your information in a structured, machine-readable format.
Requests concerning your rights should be sent to info@hecht-rigas.dk. We will respond to requests no later than within 30 days.
8. Contact and complaints
If you have any questions about this privacy policy or our processing of your personal data, you are welcome to contact us:
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you consider that our processing of your personal data is in breach of the data protection rules: