Privacy Policy.

Note — This English version is a translation provided for convenience. In the event of any discrepancy between this English version and the French version, the French version prevails.

Purpose of this Privacy Policy

The protection of privacy and the security of personal data are important to LexBoard.

This Privacy Policy (the "Policy") describes how and for what purposes LexBoard collects and processes personal data in the course of its activities, including its legal services and its relationships with clients, prospects, suppliers, candidates, website visitors and other third parties.

In this Policy, the term "personal data" means any information relating to an identified or identifiable natural person. The term "data subject" means any natural person whose personal data is processed by LexBoard.

It is understood that you, as a client or prospective client, candidate for employment or collaboration, supplier, visitor to the website www.lexboard.be (the "Website") or any other third party, may yourself be a data subject.

When LexBoard processes personal data, whether obtained directly from the data subject or collected by other means, the processing is carried out in accordance with this Policy and applicable laws and regulations, in particular the General Data Protection Regulation ("GDPR").

For the purposes of applicable data protection legislation, the data controller is:

In this Policy, the terms "LexBoard", "we", "our" or "us" refer to the data controller. The terms "you" or "your" refer to the data subjects.

This Policy does not constitute a contract between us and you, but a commitment regarding the processing of your personal data and the exercise of your rights as a data subject.

I. Differentiated processing of data by category of data subject

Depending on the category of data subject to which you belong, LexBoard may collect and process the following categories of data about you:

• Identification data: first name, surname, date of birth, company, position, profession, contact details, address, email address, phone number, copy of identity card or passport where necessary;
• Administrative and financial data: billing information, VAT number, company number, bank details, payment information, remuneration or other data necessary for administrative, accounting or contractual management;
• Special categories of personal data: data revealing in particular political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, or data concerning the sex life or sexual orientation of a natural person, only on an exceptional basis and to the extent necessary to establish, exercise or defend legal claims, to comply with legal or ethical obligations or to provide legal advice;
• Data relating to criminal convictions and offences, where this is necessary to establish, exercise or defend legal claims, to comply with legal or ethical obligations or to provide legal advice;
• Cookie and browsing data: information collected when browsing the Website, in accordance with our Cookie Policy;
• Application data: curriculum vitae, cover letter, academic and professional background, diplomas, transcripts, languages spoken, legal status, preferred practice areas, results of any tests or interviews, salary expectations and any other data shared in the context of an application;
• Other relevant data: any information necessary for the provision of our legal services, the management of our matters, the management of our contractual or pre-contractual relationships, and compliance with our legal, regulatory or ethical obligations.

In the course of your interactions with LexBoard, you may belong to one or more of the categories of data subjects described below.

1. You are a prospective client, a LexBoard client, or you work for one of its clients

If you are a prospective client or a client of LexBoard, we may collect and process data about you, as well as data concerning your employees, directors, agents, representatives, ultimate beneficial owners, board members, partners, shareholders or other persons connected to your organisation.

We generally collect and process the information you provide to us before you decide to engage our services, during our relationship with you or in connection with our obligations after that relationship has ended.

We may also collect and process information about employees, directors, agents or representatives of your organisation that you share with us. In that case, you must, where necessary, provide them with a copy of this Policy or inform them where it can be consulted.

Where appropriate, we may also collect and process information from public sources, such as public registers, official publications, institutional websites, legal databases, press publications, the Belgian Official Journal, the Crossroads Bank for Enterprises or other publicly accessible sources.

1.1. Matter management and provision of legal services

LexBoard primarily collects and processes your personal data for the purpose of managing the matters entrusted to it and providing legal services.

For these purposes, the data may be retained for the duration of our relationship with you and for up to 10 years after it ends, or for any other period necessary to comply with our legal, regulatory, accounting, tax or ethical obligations, or to establish, exercise or defend legal claims.

The data referred to above may, where necessary, be transferred to third parties outside LexBoard, such as opposing parties, your counterparties, lawyers, advisers, judges, court clerks, arbitrators, mediators, experts, translators, bailiffs, notaries, auditors, administrative or tax authorities, regulatory authorities, service providers and any other person involved in the matter or likely to contribute to its proper handling.

The persons to whom we may transfer your data depend mainly on the type of matter concerned.

If you are involved in judicial, administrative, tax, regulatory, arbitration or transactional proceedings, or in related negotiations, all or part of your data may be communicated to persons participating, in any capacity, in those proceedings or negotiations, in particular opposing parties and their advisers, judges, arbitrators, mediators, experts, court clerks, bailiffs or competent authorities.

If you have requested legal advice, all or part of your data may be transferred to certain persons who may assist us in providing that advice, in particular other lawyers, specialists, experts, administrative authorities or regulators.

If you are involved in a financial, wealth, real estate or corporate operation or transaction — such as a company formation, a restructuring, a share transfer, an acquisition, an asset transfer, a real estate transaction, a financing operation or a wealth transmission — all or part of your data necessary for that operation or transaction may be transferred to the parties concerned and, where applicable, to the competent authorities.

We may also transfer all or part of your data to any competent authority or court, on request or where required under applicable laws and regulations.

Finally, we may share your personal data with third-party service providers, such as IT vendors, hosting providers, communications, billing, payment, accounting, archiving, insurance, secretarial or administration service providers.

Because your data is connected to our practice, it may also be transferred to another lawyer or law firm in the event of a sale, transfer, restructuring, merger, demerger, change of lawyer, professional succession or any other form of reorganisation, in compliance with the GDPR, applicable confidentiality rules and applicable ethical rules.

Apart from the situations described above, and in the context of matter management, we do not share your data with third parties who may use it for their own purposes.

1.2. Commercial communications, legal news and invitations

If we have an established business relationship with you or your organisation, we may also process certain of your data for professional communication purposes.

This use is based on our legitimate interest in increasing the visibility of our firm, maintaining a professional relationship with our contacts and developing our activities. We take your interests into account by sending you only content that is likely to be of interest given your activity, your role or our relationship with you, by allowing you to easily unsubscribe or object to these communications at any time, and by complying with applicable laws and regulations.

For these purposes, your personal data may be retained and processed for as long as you do not unsubscribe or object to the communications we send you, or for a period of 3 years from the most recent relevant contact.

Your data will never be transferred to commercial partners for marketing communication purposes.

1.3. Compliance with legal, regulatory and ethical obligations

LexBoard may process your personal data to carry out activities and programmes aimed at meeting its legal, regulatory or ethical obligations, and to respond to any request from a competent authority.

1.3.1. Anti-money laundering and counter-terrorism financing obligations

For this purpose, the data may be retained for a maximum period of 10 years after the end of the contractual relationship, or for any other period imposed by applicable legislation.

The data referred to above may be transferred, where required or permitted, to bar authorities, the Financial Intelligence Processing Unit, public authorities or any other competent authority.

1.3.2. Ethical obligations

For this purpose, the data may be retained for a period of 10 years after the end of your contractual relationship with us, or for any other period required by applicable professional rules.

The data referred to above is shared only with persons who need to access it within LexBoard or, where necessary, with bar authorities or competent authorities.

1.3.3. Third-party accounts

For this purpose, the data is not retained for longer than is necessary to comply with the relevant obligation.

The data referred to above is shared only with the competent bar authorities and, where applicable, the competent public authorities.

1.3.4. Accounting, tax and administrative obligations

For this purpose, the data is retained for as long as necessary to comply with applicable accounting, tax and administrative obligations, and at least for the applicable statutory periods.

The data referred to above may be shared with accountants, auditors, statutory auditors, administrative providers, sub-processors, public authorities, tax authorities, competent authorities and IT providers.

1.4. Internal management of the firm

LexBoard may process your personal data for its own internal management.

1.4.1. Knowledge management

For this purpose, the data may be retained for as long as the document concerned remains legally, professionally or historically relevant, subject to applicable rules on confidentiality, professional secrecy and retention.

The data referred to above is shared only with authorised lawyers, associates and staff of LexBoard.

1.4.2. Pitches, proposals and tenders

For this purpose, the data may be retained for as long as the document concerned remains relevant or for a period of 10 years.

The data referred to above may be shared with prospects, prospective clients, procurement authorities, tender platforms or other relevant recipients, which may, where applicable, be located outside the European Economic Area if the request originates from outside it.

1.4.3. Rankings, professional directories and institutional communications

For this purpose, the data may be retained for as long as necessary in light of the purpose pursued or for a period of 10 years.

The data referred to above may be shared with ranking operators, professional directory publishers, event organisers, institutional partners or service providers involved in these activities.

1.4.4. Contact list

For this purpose, the data may be retained and processed for 10 years after the end of our contractual relationship or the most recent relevant contact, or for as long as a relevant dispute, proceedings, legal obligation or legitimate interest persists.

The data referred to above is not shared with anyone outside LexBoard, except where necessary for the technical or administrative management of our contact tools.

2. You have applied for a job, an internship or a collaboration with LexBoard

If you apply for a job, an internship or a collaboration with LexBoard, we collect and process the recruitment information you have provided to us in your curriculum vitae, cover letter, exchanges with us, interviews, any tests or any other application document.

Where appropriate, we may also collect and process information from public sources, such as the Internet, professional networks or publicly available publications, within the limits permitted by applicable law.

LexBoard will retain your personal data for as long as necessary to process your application and, in the event of rejection, for a maximum period of 2 years after our last contact, unless you consent to a longer retention period so we can reach out to you later.

You may withdraw your consent or object to the processing of your personal data at any time. In that case, we will no longer be able to contact you about new opportunities at LexBoard.

Your data is shared only within LexBoard, with the lawyers, associates and staff in charge of recruitment or assessment of your application, and with any technical providers involved in managing applications.

3. You are visiting our Website

If you visit our Website, we may automatically collect certain information about your use of it, in particular through the technologies described in our Cookie Policy.

When visiting the Website, you may choose to contact us by email, contact form, telephone or any other channel made available. In that case, we may collect and process the information you share with us.

LexBoard will retain your personal data for a maximum period of 1 year after your enquiry, or for a longer period if a contractual relationship is established with you, if a legal obligation requires it, or if retention is necessary for the establishment, exercise or defence of legal claims.

We will not transfer your data to anyone, except to providers of IT, hosting, communication or Website management services, to the extent necessary.

4. You are a prospective supplier, a LexBoard supplier, or you work for one of its suppliers

If you are a prospective supplier or a supplier of LexBoard, or work for one, we may collect certain information about you.

We process the information you provide during prospection, negotiation, conclusion or performance of a contract, as well as information we find on public sources as part of supplier research or assessment.

We may also collect and process information about employees, representatives or contact persons of your organisation that you share with us. In that case, you must, where necessary, provide them with a copy of this Policy or indicate where it can be consulted.

4.1. Prospection of potential suppliers

LexBoard will retain your data for a period of 3 years after the most recent relevant contact.

The data is used internally within LexBoard. We will not transfer it to anyone, except to our IT service providers or in the event of restructuring, merger, demerger, acquisition, sale or transfer of all or part of the firm's activity.

4.2. Management of existing suppliers

LexBoard will retain your data for a period of 7 years after the end of the contractual relationship, or for any other period necessary to comply with its legal, accounting and tax obligations or to defend its rights.

The data is used internally within LexBoard. We will not transfer it to anyone, except to our IT providers or other suppliers where necessary, such as banks, insurance companies, auditors, accountants, payroll providers, public authorities or competent administrations, or in the event of a restructuring of the firm.

4.3. Compliance with accounting and legal obligations

For this purpose, the data will not be retained longer than necessary in light of the applicable obligations and the proper management of LexBoard.

The data referred to above may be shared with accountants, auditors, statutory auditors, sub-processors, public authorities, tax authorities, IT providers or other recipients required by law or necessary for administrative management.

4.4. Supplier contact list

For this purpose, the data will be retained for as long as you do not object, or for a period of 3 years after the most recent relevant contact.

The data referred to above will not be shared with anyone outside LexBoard, except as necessary for the technical or administrative management of our contact tools.

5. You have voluntarily provided your personal data to LexBoard

If you voluntarily provide your personal data to LexBoard — for instance by handing over your business card, sending an email, subscribing to a publication, attending an event, promoting your services to LexBoard or to one of its lawyers or associates, or by any other means or for any other reason — LexBoard may collect the data you provide in this way.

For these purposes, your personal data may be retained for a period of 3 years after the most recent relevant contact.

We will only process and use your personal data for the purposes for which you provided it, or for purposes compatible with those purposes, and we will only share it to the extent necessary for those purposes.

Where applicable, and where relevant in light of the context in which you sent us your data, your data may be transferred to clients, partners or contacts who may be interested in your services, subject to compliance with applicable rules.

6. LexBoard has received personal data about you from a third party

Where applicable, and if necessary for the proper handling of a matter, LexBoard may receive personal data from third parties, in particular concerning our clients' opposing parties, their counterparties, lawyers, advisers, agents, directors, board members, partners, shareholders, ultimate beneficial owners, magistrates, court clerks, arbitrators, mediators, experts, translators, bailiffs, notaries, auditors, public authorities, administrative or tax authorities, and other persons involved in our clients' matters.

6.1. Client matter management

For these purposes, the data may be retained for the duration of the proceedings, the matter or the relationship with the client, and for up to 10 years after its closure, or for any other period necessary to comply with a legal, regulatory or ethical obligation, or for the establishment, exercise or defence of legal claims.

The data referred to above may, where necessary, be transferred to third parties outside LexBoard, such as the client's opposing parties, their counterparties, lawyers, judges, court clerks, arbitrators, mediators, experts, translators, bailiffs, notaries and other persons involved in the client's matter, service providers, auditors, public authorities and any other person we may contact in the course of handling the client's matter.

6.2. Compliance with legal or ethical obligations relating to the matter

For this purpose, the data is not retained for longer than is necessary to comply with the relevant obligation.

The data referred to above is shared only with the competent bar authorities and, where applicable, the competent public authorities.

6.3. Internal management

LexBoard may process certain personal data received from third parties for its own internal management, in compliance with professional secrecy, applicable confidentiality rules and ethical obligations.

6.3.1. Knowledge management

For this purpose, the data may be retained for as long as the document concerned remains legally, professionally or historically relevant, subject to applicable rules on confidentiality, professional secrecy and retention.

The data referred to above is shared only with authorised lawyers, associates and staff of LexBoard.

6.3.2. Contact list

For this purpose, the data will be retained for as long as you do not object, or for a period of 3 years after the most recent relevant contact.

The data referred to above will not be shared with anyone outside LexBoard, except as necessary for the technical or administrative management of our contact tools.

6.4. Professional communications

If we have an established business or professional relationship with you or your organisation, we may also use your personal data for professional communication purposes.

This use is based on our interest in increasing the visibility of our firm, maintaining a professional relationship with our contacts and developing our activities. We take your interests into account by sending you only content likely to be of interest, by allowing you to easily unsubscribe or object to these communications at any time, and by complying with applicable laws and regulations.

For these purposes, your personal data may be retained and processed for as long as you do not unsubscribe or object to the communications we send you, or for a period of 3 years from the most recent relevant contact.

Your data will never be transferred to commercial partners for marketing communication purposes.

II. Information concerning the processing operations described above

The data referred to above may also be used by LexBoard for the establishment, exercise or defence of legal claims, the general management of the firm, archiving, risk prevention, IT security, business continuity and the documentation of our legal, regulatory and ethical obligations.

This processing may notably be based on Article 6(1)(f) GDPR, where the processing is necessary for the legitimate interests pursued by LexBoard or by a third party, except where the interests or fundamental rights and freedoms of the data subject prevail.

Where your data is processed on the basis of your explicit consent under Article 6(1)(a) GDPR or, where applicable, Article 9(2)(a) GDPR, you may withdraw your consent at any time. However, this withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Where your data is processed on the basis of our legitimate interest under Article 6(1)(f) GDPR, you may object to such processing within the limits provided by Article 21 GDPR.

III. To whom do we transfer your data?

Within LexBoard, access to your personal data is limited to authorised lawyers, associates, employees and providers, on a need-to-know basis or where the law, an ethical obligation or the proper handling of the matter so requires.

For the purposes listed above, or in accordance with legal requirements, LexBoard may transfer your personal data to recipients located inside and/or outside the European Economic Area, in particular:

• lawyers, advisers, experts, notaries, bailiffs, auditors, mediators, arbitrators, translators or other professional intermediaries, where necessary for the proper handling of your matter or the provision of our services;
• opposing parties, counterparties, administrative, tax, judicial or regulatory authorities, where necessary or required;
• external service providers, in particular IT infrastructure providers, hosting providers, software vendors, email providers, accountants, banks, insurance companies, statutory auditors, auditors, payroll services, recruitment providers, payment providers, archiving providers and other sub-processors;
• bar authorities, bars, public authorities, tax authorities or any other competent authority;
• any other recipient necessary for the proper performance of the purposes described in this Policy.

LexBoard will not transfer your personal data to countries outside the European Economic Area, unless the third country concerned is the subject of an adequacy decision by the European Commission under Article 45 GDPR, or appropriate safeguards have been implemented under Article 46 GDPR — such as the standard contractual clauses adopted by the European Commission — or a derogation provided for by the GDPR applies, in particular where the transfer is necessary for the performance of a contract with you, the implementation of pre-contractual measures taken at your request, or the establishment, exercise or defence of legal claims.

Where the processing of your personal data is delegated to a third party acting as a processor, LexBoard ensures that this third party takes appropriate technical and organisational measures to secure your personal data and processes it in accordance with applicable data protection laws and regulations, only on our documented instructions.

LexBoard may also disclose your personal data where necessary to comply with applicable laws and regulations, professional and ethical rules, or to protect its legitimate interests.

Your personal data may also be transferred outside LexBoard, in compliance with the GDPR and applicable confidentiality rules, in the event of reorganisation, merger, demerger, acquisition, sale, transfer of activity, professional succession, change of lawyer, or at your request as a LexBoard client.

Apart from these situations and those mentioned for each type of processing, we do not share your personal data with third parties. In particular, we will never transfer your personal data to commercial partners for marketing purposes.

IV. How long do we process your personal data?

LexBoard retains your personal data only for as long as necessary for the purposes for which it was collected, as specified above for each type of processing, unless a legal, regulatory, tax, accounting or ethical obligation, or the establishment, exercise or defence of legal claims, requires longer retention.

The various retention periods applicable to each category of personal data or to each processing purpose are detailed in this Policy.

Where several retention periods apply to the same data, LexBoard retains that data for the longest period necessary in light of the relevant purposes, in compliance with the principle of storage limitation.

V. How do we secure your personal data?

LexBoard implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure, unauthorised access or any other unlawful form of processing.

These measures may include, depending on the circumstances:

• access control measures;
• the use of passwords, strong authentication or access management tools;
• firewalls, antivirus software and other IT security measures;
• secure IT infrastructure;
• backups and continuity measures;
• limiting internal access to certain files, documents, tools or spaces;
• contractual and organisational confidentiality measures;
• awareness training of lawyers, associates, employees and providers with access to personal data;
• using providers offering sufficient guarantees in terms of security and data protection.

LexBoard makes every effort to ensure that any person with access to your personal data complies with the security measures, confidentiality rules, professional secrecy and principles imposed by LexBoard or by applicable data protection laws and regulations.

VI. What are your rights as a data subject?

Within the limits set by Articles 15 to 22 GDPR and other applicable laws and regulations, data subjects have the following rights regarding personal data processed by LexBoard:

• right of access: you may ask us to access the personal data we hold about you;
• right to rectification: you may ask us to rectify inaccurate data or complete incomplete data;
• right to erasure: you may ask us to erase personal data for which there is no longer a legal basis for processing, subject to applicable exceptions;
• right to restriction of processing: you may ask us to restrict the processing of your personal data in certain cases;
• right to object: you may object to the processing of your personal data on grounds relating to your particular situation, where the processing is based on legitimate interest;
• right to object to direct marketing: you may object at any time to the processing of your data for direct marketing purposes;
• right not to be subject to an automated individual decision: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you;
• right to data portability: where the legal conditions are met, you may request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transmission to another data controller.

The exercise of these rights may be limited in certain cases, in particular where the law, ethical rules, professional secrecy, the confidentiality of communications between lawyer and client, the protection of the rights and freedoms of others, or the establishment, exercise or defence of legal claims so requires.

You may exercise these rights by contacting us at the following details:

Questions, comments and complaints regarding this Policy may be sent to the same address.

If you are not satisfied with the way we have handled your request, you also have the right to lodge a complaint with the Belgian Data Protection Authority:

You may also use the complaint form provided by the Belgian Data Protection Authority: online complaint form.

VII. Changes to this Policy

LexBoard reserves the right to amend, supplement or update this Policy at any time, in particular to reflect legal, regulatory, ethical, technical or organisational changes.

Such changes will be communicated through the Website and/or any other appropriate means, having regard to their nature. Unless otherwise indicated, the changes will take effect on the date of their publication on the Website or on any other date specified.

The most recent version of this Policy will be available on our Website.

Last updated: July 2026