Privacy policy

The data controller is Espero-Soft Informatiques SRL, Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgique, BE 1033.022.383. For any question regarding your data, please contact our Data Protection Officer at info@espero-soft.com.

When you use Avocat20min.be, we collect the following categories of data:

• Identification: first name, last name, email, phone number.
• Consultation data: legal area, subject, description, identity of opposing parties (name, date of birth, national or VAT number if provided).
• Payment data: processed exclusively by Stripe; we never store your full banking data.
• Consultation notes: written by the lawyer, encrypted (AES-GCM) with a dedicated KMS key.
• Technical data: IP address, browser type, connection logs (for security purposes).

• Performance of the matchmaking and consultation service (Article 6.1.b GDPR — performance of the contract).
• Disclosure of the subject and the identity of opposing parties to the lawyer so that they can check for any conflict of interest in accordance with their bar's deontology (Article 6.1.c GDPR — legal obligation incumbent on the lawyer).
• Site security, fraud prevention, compliance audit (Article 6.1.f GDPR — legitimate interest).
• Transactional communications regarding your consultation (confirmation, match, summary).

Your data is never sold to third parties. It may be shared with:

• The lawyer assigned to your consultation, strictly limited to what is necessary for their mission.
• Other lawyers in the network who have signed the shared-secrecy agreement, in case of subsequent consultation (file continuity). Each access is logged in an immutable audit trail.
• Payment, telephony and hosting / encryption providers — processors bound by an agreement compliant with Article 28 GDPR.
• Public authorities upon legal request.

• Customer account: as long as the account is active, plus 5 years after the last consultation (civil prescription).
• Consultation notes: 5 years after the consultation, in line with the lawyer's professional obligations.
• Technical logs: 12 months maximum.
• Payment data: kept by Stripe according to its own rules.

Consultation notes are encrypted (AES-GCM) with a per-lawyer key managed via a dedicated KMS service. Communications are protected by TLS. Access to sensitive data is restricted to authorized persons and tracked in an immutable audit trail.

Under the GDPR, you have the following rights:

• Right of access and to obtain a copy of your data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction of and objection to processing.
• Right to data portability.
• Right to lodge a complaint with the Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.

To exercise these rights, write to info@espero-soft.com. You will receive an answer within one month.

The Site uses cookies essential to the operation of the service. For more details, see our cookies policy.

To deliver the service, we use sub-processors bound by agreements compliant with Article 28 GDPR:

• OVHcloud (France) — application data and database hosting within the European Union.
• Stripe Payments Europe Ltd. (Ireland) and Stripe Inc. (United States) — payment processing and fraud prevention.
• Twilio Ireland Ltd. (Ireland) and Twilio Inc. (United States) — anonymised phone bridge.
• Resend / SendGrid or equivalent — transactional email delivery.
• Sentry (Germany / United States) — technical error monitoring (no user content).

An up-to-date detailed list of our sub-processors is available on simple request to info@espero-soft.com.

Some of our sub-processors (notably Stripe Inc., Twilio Inc.) may process your data in the United States. These transfers are framed either by the Standard Contractual Clauses (SCC) adopted by the European Commission (decision 2021/914/EU), or by the recipient's adherence to the EU-US Data Privacy Framework, which guarantees a level of protection essentially equivalent to that of the GDPR.

You may contact info@espero-soft.com to obtain a copy of the appropriate safeguards in place.

Avocat20min.be does not engage in any solely automated individual decision-making producing legal effects on you, nor any profiling for commercial or advertising purposes. The selection of the lawyer is performed according to transparent business rules (competence, language, availability). Conflict-of-interest checks are performed by the lawyer themselves, in accordance with their bar's rules; Avocat20min.be does not perform automated screening.

The service is intended for adults (18 years or older) with the legal capacity to enter into a contract. We do not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, write to info@espero-soft.com : we will delete it as soon as possible.

This policy may evolve to reflect legal or technical changes. Material changes will be communicated to you by email.