Skip to content
Brunets Legal — home

Legal

Privacy Policy

Effective date: 14 October 2026

This Privacy Policy explains how personal data is processed when you visit brunetslegal website (the "Website") or contact us through it. It applies to the Website only. Personal data processed in the course of providing services to clients is governed by the relevant engagement terms.

1. Who we are

The controller of your personal data is Volodymyr Brunets, trading as Brunets Legal (sole proprietorship, eenmanszaak), Oscar Hammersteinstraat 17, 3543 CV Utrecht, the Netherlands, registered with the Netherlands Chamber of Commerce (KvK) under number 96926538 ("Brunets Legal", "we", "us").

For any privacy question or request, contact us at brunets.legal@gmail.com.

2. What we collect and why

We collect as little personal data as possible. We do not use analytics, advertising pixels, tracking cookies, session recording or profiling.

a) Contact form

When you submit the contact form, we process your name, company, work email address, role, the situation you select and, if you choose to provide it, a description of your main challenge.

Purpose: to respond to your enquiry and discuss a possible engagement.

Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).

Please do not include confidential or sensitive information in the form.

b) Email correspondence

If you email us directly, we process your email address and the content of your message for the same purposes and on the same legal bases as above.

c) Technical data

When you visit the Website, our hosting provider automatically processes technical data such as your IP address, browser type, requested page and time of access in server logs.

Purpose: to deliver the Website and keep it secure and functioning.

Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

We do not use your personal data for automated decision-making or profiling, and we do not sell it.

3. Who receives your data

We share personal data only with service providers that process it on our behalf and only to the extent necessary:

  • Hostinger (Hostinger International Ltd.) — website hosting;
  • Resend (Resend, Inc., United States) — delivery of contact form submissions to our mailbox;
  • Google (Google Ireland Limited) — email service (Gmail) on which enquiries are received and answered;

We may also disclose personal data where required by law or to establish, exercise or defend legal claims.

Links to third-party websites (for example LinkedIn or a scheduling service) are subject to the privacy policies of those third parties. Clicking such a link does not transfer data from the contact form.

4. International transfers

Some of our service providers, or their sub-processors, are located outside the European Economic Area, including in the United States. Where this is the case, transfers take place on the basis of an adequacy decision (including the EU–US Data Privacy Framework, where the provider is certified) or Standard Contractual Clauses approved by the European Commission, together with appropriate supplementary measures.

5. How long we keep your data

  • Enquiries and correspondence that do not lead to an engagement: deleted within 12 months after our last contact, unless you ask us to delete them earlier.
  • Enquiries that lead to an engagement: retained in accordance with the engagement terms and our statutory record-keeping obligations.
  • Server logs: kept by our hosting provider for a limited period necessary for security and operation.

6. Cookies and similar technologies

The Website does not use cookies or similar technologies, and does not use analytics or tracking tools.

7. Your rights

Under the GDPR and, where applicable, the UK GDPR, you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email brunets.legal@gmail.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); in the United Kingdom, the Information Commissioner's Office (ico.org.uk).

8. Security

We take appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), limited access and protection against automated spam submissions.

9. Changes

We may update this Privacy Policy from time to time. The current version is always available on the Website, with the date of the latest update shown at the top.