Last updated: October 2026
1. Who we are (Data Controller)
DN Law Partners is a Cyprus-licensed law firm and the Data Controller for your personal data.
📧 info@dnlawpartners.com · 📍 Paphos, Cyprus
2. What data we collect
Through our contact form and chatbot we collect: name, email address, country of residence, citizenship status, and details about your legal needs. We do not collect sensitive personal data (special categories under Article 9 GDPR) through this website.
3. Why we collect it (Purpose & Legal Basis)
— To respond to your enquiry → Legal basis: Steps prior to entering into a contract at your request (Article 6(1)(b) GDPR)
— To provide legal services once engaged → Legal basis: Performance of a contract (Article 6(1)(b) GDPR)
— To schedule and manage consultations → Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
— To comply with AML/KYC obligations (where applicable) → Legal basis: Legal obligation (Article 6(1)(c) GDPR)
4. Data Processors (Third Parties)
We share your data only with trusted processors under Data Processing Agreements:
— Formspree (form submission processing) — servers in the EU/US, under Formspree’s Data Processing Agreement and EU Standard Contractual Clauses
— Cloudflare Workers (chatbot AI infrastructure) — GDPR compliant
— Anthropic (AI chatbot processing — processes chat messages to generate responses) — servers in the US; transfers take place under Anthropic's Data Processing Agreement, which incorporates the EU Standard Contractual Clauses (Art. 46 GDPR)
— Calendly (appointment scheduling) — GDPR compliant
— Google Drive (Google Workspace) (secure storage of client documents, KYC files and correspondence) — GDPR compliant, EU servers, processed under Google's Data Processing Agreement
— Google Analytics (website analytics, only with your cookie consent)
We do not sell your data to any third party.
5. Data Retention
— Enquiry data (no engagement): 12 months
— Client data (engaged services): 5 years minimum, as required by Cyprus AML Law 188(I)/2007 and the Bar Association Directive
— Client documents (KYC files, contracts, correspondence): stored securely on Google Drive for minimum 5 years as required by Cyprus AML Law 188(I)/2007
— Cookie consent records: 12 months
6. Your Rights under GDPR
You have the right to: access your data · correct inaccurate data · request deletion ("right to be forgotten") · restrict processing · data portability · withdraw consent at any time.
To exercise your rights: info@dnlawpartners.com
7. Right to Lodge a Complaint
You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection:
🌐 dataprotection.gov.cy · 📞 +357 22 818 456
8. Cookies
We use essential cookies (required for the site to function) and, with your consent, Google Analytics cookies to understand visitor behaviour. You can change or withdraw your cookie consent at any time via the "Cookie settings" link at the bottom of every page.
9. Changes to this Policy
We may update this policy periodically. The latest version will always be available on this website with the date of last update.
