Privacy Notice
LAST UPDATED: June 2026
This Privacy Notice explains the processing of your Personal Data on the websites that are operated by
EXPATS LAW FIRM as the controller under GDPR and your rights under GDPR.
The respective offices of EXPATS LAW FIRM provide client corporate and legal services and process
Personal Data for their respective clients, events or other local services.
Definitions
"EXPATS LEGAL CONSULTANCY FZ-LLC", “EXPATS LAW FIRM”, "we", "us" or "our" - EXPATS LEGAL CONSULTANCY FZ-LLC and/or its associated offices depending on context.
"EXPATS Offices" - EXPATS LEGAL CONSULTANCY FZ-LLC offices and their connected businesses.
"Cookies" - A small text file that is stored by your browser. Each time you return to the same website, your browser retrieves and sends the relevant cookie(s) to the website's server. We also refer to similar technologies such as web storage or pixel tags by the term "Cookies".
"GDPR" - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and/or Regulation (EU) 2016/679 as amended and incorporated into UK law under the UK European Union (Withdrawal) Act 2018, as applicable.
"Personal Data" - Information relating to you which can be used to personally identify you (either directly or indirectly). Examples : your Name, telephone number or IP address.
"Websites" - Our Website at [ https://expatslawfirm.com ] and EXPATS LAW FIRM online tools.
A. WHY DO WE USE YOUR PERSONAL DATA?
1. Delivery of the Websites
If you access our Websites Personal Data is temporarily stored. The following data is collected in this
context:
IP address and host name of your computer
Date and time of access
Page visited on our Websites
Website from which the Websites were accessed
Whether the access was successful, and the amount of data transferred
Your browser type and operating system
And any Personal Data you are providing to us
The processing of this Personal Data is necessary to deliver the Websites to you. The legal basis for this
processing of your Personal Data is our legitimate interest (Art. 6 (1) f) GDPR).
To provide the Websites we use the following service providers:
IONOS
IONOS is the hosting, domain name, and professional email service provider used by EXPATS LAW
FIRM. We use IONOS services to host and maintain our Websites, manage domain names, store Website
data, and operate our business email communications.
As part of providing these services, IONOS may process technical and Personal Data such as IP
addresses, server logs, email metadata, browser information, and security-related data necessary to ensure
the stability, availability, and security of our Websites and communications systems. IONOS is provided by
IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Personal Data processed through IONOS
is generally hosted within the European Economic Area (EEA). Where international transfers occur,
IONOS implements appropriate safeguards in accordance with applicable data protection laws and
GDPR requirements. The legal basis for this processing is our legitimate interest (Art. 6 (1) (f) GDPR) in
ensuring the secure and efficient operation of the Websites, infrastructure, and communications of
EXPATS LAW FIRM. You can find more information in IONOS's Privacy Policy.
Google Tag Manager
Google Tag Manager is a tag management system provided by Google Cloud EMEA Limited, 70 Sir John
Rogerson's Quay, Dublin 2, Ireland ("Google") that we use on our Websites. Google Tag Manager has
access to all personal data described under A.1. The Google Tag Manager allows us to add code and other
snippets such as pixels to our Websites. Google is only processing your IP address as an independent
controller. Any transfers to the US are covered by Google's participation in the EU-US Data Privacy
Framework which has been found to provide an adequate level of data protection (Art. 45 GDPR).
Google will not combine your IP address with Personal Data from other sources. The legal basis for the
transfer to Google is our legitimate interest (Art. 6 (1) f) GDPR) in providing the Website efficiently. You
can find more information in Google's Privacy Policy.
Other website service providers
Further service providers used to provide the Websites are described in our Cookie Notice.
2. Log data
Further storage of the data used to deliver the Websites takes place in log files in order to ensure the
functionality of our website and, if necessary, to check and enforce our rights or property, our terms of
use and the rights of third parties. The log files are stored as long as necessary for the respective purpose
(at most for 30 days). The legal basis is our legitimate interest (Art. 6 (1) f) GDPR).
3. Analytics
We use analytics services (without Cookies) to better understand your interests and to continuously
improve our Websites. These services allows us to analyze traffic and usage patterns of individual users
(without further identifying them) or groups. The legal basis is our legitimate interest (Art. 6 (1) f) GDPR)
in improving our website. In particular, we use the following analytics services:
Google Analytics
We use Google Analytics to analyse the use of our Websites and improve our services and user
experience. Google Analytics uses Cookies and similar technologies to collect information such as IP
address, browser type, device information, pages visited, time spent on the Websites, and interactions with
content.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland, acting as our processor. Where Personal Data is transferred outside the European Economic
Area (EEA), such transfers are protected by appropriate safeguards implemented by Google in
accordance with applicable data protection laws and GDPR requirements.
Where possible, IP anonymisation is enabled. The legal basis for this processing is your consent (Art. 6
(1) (a) GDPR). You can find more information in Google's Privacy Policy.
4. Cookies
For our use of Cookies see our Cookie Notice.
5. Registration, communication and contact forms
We use your Personal Data to communicate with you, for example when you register, log in, participate in
training courses and events, or send us messages.
We collect your Personal Data, if you provide it to us by filling out forms on our Websites. We may use
this Personal Data to respond to your queries or to provide services that you have requested. We also use
the Personal Data you provide to us when you participate in campaigns on our social media channels
(LinkedIn etc.) or send us inquiries or comments.
The legal basis is performance of a contract to which you are party or for answer to your messages or
requests (Art. 6 (1) b) GDPR). The provision of your personal data is required as otherwise it will not be
possible to communicate with you.
6. Webinars
We use the Personal Data that you provide when you register for an EXPATS LAW FIM Webinar to :
identify you as a registered attendee of the relevant Webinar ; give you access to the webinar,
contact you in relation to the Webinar agenda and speakers,
send reminders and let you know if there are any changes to the Webinar (e.g., a change in the
time and date when it will take place).
The legal basis is performance of a contract to which you are party or for answer to your messages or
requests (Art. 6 (1) b) GDPR). The provision of your personal data is required as otherwise it will not be
possible to participate in the webinar.
We may share your contact details (e.g., email address) with the speakers in order to contact you after the
webinar to provide you with their presentations and webinar recordings and to request your feedback.
Webinars are recorded for training purposes and to help us improve the services that we provide. We may
also use your Personal Data to contact you after the Webinar, in order to request your feedback. We use
service providers to offer you webinars. These service providers allow us to track registration,
participation, and the quality of the webinars. The legal basis is our legitimate interest (Art. 6 (1) f)
GDPR).
7. Social media pages
Our social media partners provide us with statistics and analytics on the use of our social media offerings.
These statistics do not contain any names or other information about individual users. With the help of
these services, we can analyse and improve our social media activities. This is our legitimate interest for
using these statistics (Art. 6 (1) f) GDPR).We do not use any social media share plugins by which information is automatically transferred to the provider of social media services when you visit our Websites. Any forwarding to social media providers such as LinkedIn or instagram takes place exclusively via link.
In particular, we use the following social media platforms :
We use LinkedIn to communicate with you and to advertise our work. The legal basis is legitimate interest
(Art. 6 (1) f) GDPR). For more information see LinkedIn's Privacy Policy.
When processing Personal Data on our LinkedIn page, we and LinkedIn act as so called "Joint
Controllers" according to Art. 26 GDPR. We have therefore concluded a separate agreement that can be
found under https://legal.linkedin.com/pages-joint-controller-addendum. For any further processing of
your data, LinkedIn is the sole controller. If you wish to exercise your rights to information, deletion, etc.
(see section "Your Rights"), LinkedIn is responsible for the fulfilment of your rights as part of our Joint
Controllership.
We use Instagram to communicate with you and to advertise our work. The legal basis is legitimate
interest (Art. 6 (1) (f) GDPR). For more information see Instagram's Privacy Policy. When processing
Personal Data on our Instagram page, we and Instagram may act as so called "Joint Controllers"
according to Art. 26 GDPR. For further processing of your data, Instagram is the sole controller. If you
wish to exercise your rights to information, deletion, etc. (see section "Your Rights"), Instagram is
responsible for the fulfilment of your rights as part of this Joint Controllership.
8. Newsletters & publications
We will only send you publications or newsletters when you have provided us with your specific consent
or have expressed your interest to us in a certain type of information or legal area. We also process your
Personal Data in order to provide you with tailored and relevant marketing, updates and invitations
including, with your consent, how you access and use our emails. We use service providers to provide you
with tailored marketing, publications and information about our services, and invitation to events. These
service providers allow us to track with your consent deliverability, opt outs, clicks on links and
downloads of stored materials in order to optimise our mailing campaigns. Where possible we are
anonymising IP addresses.
The legal basis is your consent (Art. 6 (1) a) GDPR).
In particular, we use the following service provider for sending newsletters analytics :
Brevo
Brevo is a service used for email marketing and newsletter communications. We use this service to send
newsletters, legal updates, event invitations and other email communications, and to provide link tracking
and open rate reporting. The service is provided by Sendinblue SAS (Brevo), 106 boulevard Haussmann,
75008 Paris, France, acting as our processor. Where international data transfers occur, Brevo implements
appropriate safeguards in accordance with applicable data protection laws and GDPR requirements. The
legal basis for this processing is your consent (Art. 6 (1) (a) GDPR). You can find more information in
Brevo's Privacy Policy.
9. Legal Updates subscription service
EXPATS LAW FIRM Legal Updates : if you choose to subscribe to the EXPATS LAW FIRM Legal
Updates subscription service, we use Personal Data that you provide during the subscription process to
set-up and maintain your Legal Updates account and to send you relevant Legal Updates content by
email. This will consist of information on legal and business issues that are relevant to your preferences.
Your agreement to the use of your Personal Data for these purposes is optional. If you decide not to
subscribe to Legal Update emails, we will not send Legal Update communications, but your use of our
Website will remain otherwise unaffected. You can change your Legal Update email preferences at any
time by logging into your account.
Legal Updates opt-out - you are entitled to opt-out from receipt of Legal Updates communications at any
time. You can do so by visiting the Manage Preferences pages and deselecting all email options. You can
also use the "unsubscribe" option included in all Legal Update e-mails. Alternatively, you can email the
Legal Updates support team who will process "unsubscribe" requests for you. When you unsubscribe we will keep a record of this, and once your request has been processed, you will stop receiving Legal Update emails. You can still use our Websites once you have unsubscribed.
The legal basis for sending you Legal Update emails is your consent (Art. 6 (1) a) GDPR).
10. Recruitment
If you apply to a vacancy at EXPATS LAW FIRM, we use the Personal Data you provide to us to decide
on your application. The legal basis is to take steps at your request to evaluate your application (Art. 6 (1)
b) GDPR). The provision of your personal data is required as otherwise it will not be possible to
communicate with you. With your consent (which you can withdraw at any time) your application may be
stored for future vacancies in case that your application is not accepted (Art. 6 (1) a) GDPR).
In some cases, you will be directed to our dedicated application portals. In these cases, you will be
provided with specific information about how your Personal Data will be handled in connection with
your application at the time that you submit your Personal Data.
For other vacancies we do not use an application portal. Instead, we either ask you to contact us directly
by email or we request that you upload a copy of your C.V . and covering letter so that we can consider
your suitability for the role.
11. Further purposes
If necessary, we process your Personal Data for additional purposes, especially to fulfil contracts and in
the context of existing or new business relationships (please note that for client services EXPATS LAW
FIRM offices will act as separate controllers). We will process this Personal Data for the performance of a
contract (Art. 6 (1) b) GDPR), to comply with legal obligations, court orders or other binding decisions
of public authorities (Art. 6 (1) c) GDPR) and to satisfy our legitimate interests, including but not limited
to protecting the rights of EXPATS LAW FIRM and others and exercising legal claims (Art. 6 (1) f)
GDPR).
B. WHO WILL WE SHARE YOUR PERSONAL DATA WITH?
1. Service providers
In addition to the service providers described under A. we also share your Personal Data with other
third-party service providers who act on our behalf to :
provide support services in relation to our Websites for the purposes of hosting and maintaining
our Websites ; providing data storage ; assisting us with database management, and to assist us
with related tasks or processes
send out our surveys and record and process the results
manage the invitation and registration process for our events.
All of our service providers are bound by written contract to process Personal Data provided to them
only for the specific service and to maintain appropriate security measures to protect your Personal Data.
2. Sharing within EXPATS LAW FIRM
EXPATS LAW FIRM and its offices share your Personal Data with other offices :
• if you ask us to do so in an online form (legal basis : performance of a contract pursuant to Art. 6 (1) b) GDPR)
• to organise and/or manage an event that you have registered to attend (legal basis : performance of a contract pursuant to Art. 6 (1) b) GDPR)
• where we need to do so in order to provide the services or information that you have requested. (legal basis : performance of a contract pursuant to Art. 6 (1) f) GDPR).
3. Other third parties
We share your Personal Data with :
• our accountants, auditors, lawyers, or similar advisers when we ask them to provide us with professional advice
• investors and other relevant third parties in the event of an actual potential sale or other corporate transaction related to EXPATS LEGAL CONSULTANCY FZ-LLC
• to comply with a legal obligation
• to comply with a court, tribunal, regulator, or government agency order.
C. IN WHICH COUNTRIES IS MY PERSONAL DATA TRANSFERRED?
EXPATS LAW FIRM is located in the United Arab Emirates. Offices located outside of the EEA, service providers and other third-party recipients may also process personal data outside the EEA/UK. In these cases, we ensure an adequate level of data protection to comply with the requirements of European/UK law (this is usually done with the help of EU standard contractual clauses of the European Commission, the UK Addendum to the EU standard contractual clauses and, if necessary, other appropriate guarantees). You can request a copy of the EU standard contractual clauses from our data protection officer listed in the contact information below.
D. HOW LONG DO WE STORE YOUR PERSONAL DATA?
Unless a specific duration of data storage is specified in this Privacy Notice, we will only process your data as long as this is necessary for the respective purposes. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted.
This means for example, that we store your user account data (login, profession, name etc.) until you delete it. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods. For information on how long Cookies are stored, please refer to our Cookie Notice.
E. WHAT ARE MY RIGHTS?
You can request access to your Personal Data. If you have provided Personal Data based on a contract or
consent, you have the right to receive this Personal Data in a commonly used and machine-readable
format.
In addition, you can also request the deletion, rectification, or restriction of the processing of your
Personal Data subject to the conditions and limitations set out in GDPR.
If your Personal Data is transferred to a country outside the EEA that does not provide an adequate level
of data protection, you can request a copy of the contract that ensures the adequate level of protection.
You can withdraw your consent at any time.
You can make a complaint to a data protection authority, in particular in the Member State of your
residence, your place of work or the place of the alleged infringement.
Right to object :
To the extent we base the processing of your Personal Data on our legitimate interests (Art. 6 (1) f)
GDPR), you may object to such processing at any time on grounds of your particular situation. In this
case, we will not process such Personal Data any longer, unless our interests prevail. You can object to the
use of your Personal Data for direct marketing purposes at any time without stating a reason.
F . WHO CAN I CONTACT?
Please address your questions or concerns regarding the processing of your Personal Data to :
info@expatslafirm.com.
G. COUNTRY-SPECIFIC PROVISIONS
Contact data, legal information and privacy notices for EXPATS LAW FIRM offices can be found in the
Legal Information.
France
The following Privacy Policy covers the use by EXPATS LAW FIRM whose registered office is located at 11 boulevard Sébastopol, 75001 Paris (France ("we", "us", "our", "EXPATS LEGAL CONSULTANCY FZ-LLC", “EXPATS LAW FIRM”) of personal data concerning (I) its clients, prospects and (II) members of the alumni community ("your information").
EXPATS LAW FIRM may be required to disclose certain information about you to other associated offices. The terms and conditions of use of the data concerned by the recipients are governed by a "data sharing" contract concluded between the associated offices and aimed at ensuring the security of your data. For more information on the transfer of some of your data with our associated offices, please refer to our website. Please review the following Privacy Policy which explains how we use and protect your information. For any request concerning the processing of your personal data, you may contact our Data Protection Officer, by e-mail at info@expatslawfirm.com or by contacting us on +33 7 82 88 48 28. For the purposes of this document, the terms "Personal Data", "Processing", "Controller" and "Processor" have the definition given to these terms in Article 4 of the European Regulation, 2016/679 of 27 April 2016 (hereinafter the "General Data Protection Regulation" or "GDPR"). The expression "Applicable Data Protection Legislation" refers to the GDPR and French Data Protection Law No. 78-17 of 6 January 1978.
