Privacy policy

The data controller is Espero-Soft Informatiques SRL, Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgique, BE 1033.022.383. For any question regarding your data, please contact our Data Protection Officer at info@espero-soft.com.

When you use Avocat20min.be, we collect the following categories of data:

• Identification: first name, last name, email, phone number.
• Consultation data: legal area, subject, description, identity of opposing parties (name, date of birth, national or VAT number if provided).
• Contact request to a lawyer in the directory: area of law, language, municipality or postcode, urgency, subject and description of the request and, if you state it, your legal expenses insurance.
• Payment data: processed exclusively by Stripe; we never store your full banking data.
• Consultation notes: written by the lawyer, encrypted (AES-GCM) with a dedicated KMS key.
• Technical data: IP address, browser type, connection logs (for security purposes).

• Performance of the matchmaking and consultation service (Article 6.1.b GDPR, performance of the contract).
• Forwarding a directory contact request to the chosen lawyer or, if that lawyer cannot be reached, to another lawyer on the platform (Article 6.1.a GDPR, consent given by ticking the box when sending).
• Disclosure of the subject and the identity of opposing parties to the lawyer so that they can check for any conflict of interest in accordance with their bar's deontology (Article 6.1.c GDPR: legal obligation incumbent on the lawyer).
• Site security, fraud prevention, compliance audit (Article 6.1.f GDPR, legitimate interest).
• Transactional communications regarding your consultation (confirmation, match, summary).

Your data is never sold to third parties. It may be shared with:

• The lawyer assigned to your consultation, strictly limited to what is necessary for their mission.
• For a directory contact request: the chosen lawyer or, if that lawyer cannot be reached, another lawyer on the platform. You are informed by email.
• Other lawyers in the network who have signed the shared-secrecy agreement, in case of subsequent consultation (file continuity). Each access is logged in an immutable audit trail.
• Payment, telephony and hosting / encryption providers, processors bound by an agreement compliant with Article 28 GDPR.
• Public authorities upon legal request.

• Customer account: as long as the account is active, plus 5 years after the last consultation (civil prescription).
• Consultation notes: 5 years after the consultation, in line with the lawyer's professional obligations.
• Technical logs: 12 months maximum.
• Payment data: kept by Stripe according to its own rules.

Consultation notes are encrypted (AES-GCM) with a per-lawyer key managed via a dedicated KMS service. Communications are protected by TLS. Access to sensitive data is restricted to authorized persons and tracked in an immutable audit trail.

Under the GDPR, you have the following rights:

• Right of access and to obtain a copy of your data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction of and objection to processing.
• Right to data portability.
• Right to lodge a complaint with the Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.

To exercise these rights, write to info@espero-soft.com. You will receive an answer within one month.

The Site uses cookies essential to the operation of the service. For more details, see our cookies policy.

To deliver the service, we use sub-processors bound by agreements compliant with Article 28 GDPR:

• OVHcloud (France): application data and database hosting within the European Union.
• Stripe Payments Europe Ltd. (Ireland) and Stripe Inc. (United States): payment processing and fraud prevention.
• Twilio Ireland Ltd. (Ireland) and Twilio Inc. (United States): anonymised phone bridge.
• Resend / SendGrid or equivalent : transactional email delivery.
• Sentry (Germany / United States) : technical error monitoring (no user content).

An up-to-date detailed list of our sub-processors is available on simple request to info@espero-soft.com.

Some of our sub-processors (notably Stripe Inc., Twilio Inc.) may process your data in the United States. These transfers are framed either by the Standard Contractual Clauses (SCC) adopted by the European Commission (decision 2021/914/EU), or by the recipient's adherence to the EU-US Data Privacy Framework, which guarantees a level of protection essentially equivalent to that of the GDPR.

You may contact info@espero-soft.com to obtain a copy of the appropriate safeguards in place.

Avocat20min.be does not engage in any solely automated individual decision-making producing legal effects on you, nor any profiling for commercial or advertising purposes. The selection of the lawyer is performed according to transparent business rules (competence, language, availability). Conflict-of-interest checks are performed by the lawyer themselves, in accordance with their bar's rules; Avocat20min.be does not perform automated screening.

The service is intended for adults (18 years or older) with the legal capacity to enter into a contract. We do not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, write to info@espero-soft.com : we will delete it as soon as possible.

Espero-Soft Informatiques SRL sends electronic messages to businesses and professionals to present the services of Avocat20min.

• Source of the addresses: public sources only, namely the contact details the business has itself published in the Crossroads Bank for Enterprises (Belgian businesses) or on its own website. No address is bought, rented or exchanged.
• Data used: the business name, its email address and, where published, its address, telephone number and company number.
• Legal basis: the legitimate interest of Avocat20min in making its services known to professionals (Article 6(1)(f) GDPR), in compliance with the rules on electronic communications between professionals.
• Retention period: three years after the last unanswered contact. If you object, only the address is kept, to ensure that no further message is sent to it.
• Objection: every message contains an unsubscribe link, which takes effect immediately. You may also write to info@espero-soft.com.

This policy may evolve to reflect legal or technical changes. Material changes will be communicated to you by email.