Privacy policy
1. Controller
The controller of your personal data is SIA "Jāņa Zaļā zvērinātu advokātu birojs", reg. No. 40203358962, registered address Staiceles iela 15–180, Riga, LV-1035, Latvia, email info@zalais.legal, phone +371 28459397 (the "Firm"). This policy applies to personal data the Firm processes when operating the website zalais.legal and answering questions asked through it. Processing of personal data in the course of providing legal services to clients is additionally governed by the Latvian Advocacy Law and the engagement agreement with the client.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering a question asked through the website form, by email or by phone | content of the question, name (if provided), email (if provided), time of sending, topic/page, language | your consent (Art. 6(1)(a) GDPR); if an engagement follows — steps prior to entering into a contract (Art. 6(1)(b)) | until the reply is given and no longer than 6 months after the last communication; if an engagement agreement is concluded — according to the retention periods for client files |
| Operating and securing the website | IP address, browser and device data, request logs (server logs) | the Firm's legitimate interests (Art. 6(1)(f)) — security and operation of the website | up to 30 days (default under our hosting provider's logs) |
| Visitor statistics | Plausible Analytics — a cookieless, EU-hosted analytics service; no personal identifiers or cross-site tracking are used | the Firm's legitimate interests (Art. 6(1)(f)) — no cookie consent is required for cookieless analytics | aggregated statistics; see the Cookie policy |
| Spam protection in the form | technical data about how the form was filled in (timing, hidden fields) | legitimate interests — protection against abuse | deleted immediately after the check |
Neither a name nor an email is required to ask a question. Without an email, we cannot reply.
3. Who receives the data
We do not disclose your data to third parties, except: (a) service providers that technically operate the website, email and form delivery — our hosting, DNS and email-forwarding infrastructure is provided by Cloudflare, which processes data under a contract and only on our instructions; (b) where the law requires it. Cloudflare operates a global network; transfers outside the EU/EEA are based on the European Commission's standard contractual clauses.
4. Clients outside the EU
If you contact us from outside the EU/EEA, your data is processed in Latvia (EU) under the GDPR. Replying to you by email to an address outside the EU is a transfer necessary for the performance of your request (Art. 49(1)(b) GDPR).
5. Confidentiality and professional privilege
Information you give to a sworn advocate is protected by professional privilege under the Advocacy Law. However, sending a question through the website does not create an advocate–client relationship — therefore, before an engagement is agreed, please do not send confidential information that is not needed to describe your question.
6. Your rights
You have the right to access your data and receive a copy; to have inaccurate data corrected; to have your data erased ("right to be forgotten") where there is no longer a basis for processing; to restrict processing; to object to processing based on legitimate interests; to receive your data in a portable format; and to withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal. To exercise your rights, write to info@zalais.legal. We reply within one month. If you believe your data is processed unlawfully, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv) or with the supervisory authority in your EU country of residence.
7. Security
The website is served over an encrypted connection (HTTPS). Access to email and to questions is restricted to the Firm; devices and accounts are protected by passwords and two-factor authentication.
8. Cookies
Cookies are covered in a separate Cookie policy.
9. Changes
We may update this policy; the current version is always on this page. Last updated: 6 September 2026.