Privacy Policy

Last updated: 13 April 2026

Preamble

This Personal Data Protection Policy enables any reader to understand how Legal Data Space collects and shares its Users' personal data, how long it is retained, and how it is protected.

Entered into between the User and Legal Data Space, this Personal Data Protection Policy is intended to inform Users of how Legal Data Space uses their personal data, as well as the rights they retain regarding the various processing activities carried out in their respect.

Legal Data Space therefore acts as data controller for all processing carried out in connection with browsing the Site and using the Legal Data Space Platform.

Article 1: Purpose

This Personal Data Protection Policy makes it possible to understand the content of the service offered by Legal Data Space and the conditions under which personal data are processed in the context of browsing the Site and using the Legal Data Space Platform.

Use of the Services is subject to a prior collection of personal data (detailed below) of Users by Legal Data Space.

Such use complies with French Law No. 78-17 of 6 January 1978 on information technology, files and freedoms, as amended by Law No. 2004-801 of 6 August 2004 and by Law No. 2018-493 of 20 June 2018 (the "French Data Protection Act"); the Directive of 12 July 2002 as amended by Directive 2009/136/EC (the "ePrivacy Directive"); Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR"); Regulation (EU) 2022/868 of 30 May 2022 on European data governance (the "Data Governance Act" or "DGA"); Regulation (EU) 2023/2854 of 13 December 2023 on access to and use of data (the "Data Act"), as well as any national transposition text or any subsequent text supplementing or replacing them (together, the "Applicable Regulations").

Legal Data Space reserves the right to modify this Personal Data Protection Policy at any time in order to comply with any legislative, regulatory, jurisprudential, editorial or technical changes.

Users are therefore strongly advised to refer to the latest version of the Personal Data Protection Policy in force before browsing the Site and using the Legal Data Space Platform.

Article 2: Definitions

  • Personal data: any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Purpose: the main objective of the use of personal data.
  • Data subject: Users and natural persons whose data are collected and/or processed by Legal Data Space.
  • LDS Platform: refers collectively to the Legal Data Space application and Messenger.
  • Applicable Regulations: refers to all provisions of European Union law and, where applicable, national law, governing the collection, processing, sharing and exploitation of data, as well as the development and use of artificial intelligence systems; including in particular Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") on the protection of personal data, Regulation (EU) 2022/868 of 30 May 2022 ("Data Governance Act" or "DGA") on European data governance, Regulation (EU) 2023/2854 of 13 December 2023 ("Data Act") on access to and use of data, and Regulation (EU) 2024/1689 of 13 June 2024 ("AI Act") establishing harmonised rules on artificial intelligence. This framework is understood as evolving and includes any regulation supplementing or replacing it.
  • Site: refers to the website accessible at www.legaldataspace.eu, as well as all web pages, content, features and services offered there. The Site is in particular a point of access to information about Legal Data Space and the services, resources and tools associated with it.
  • Data processing: any operation or set of operations performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • User: refers to any natural or legal person accessing the Site, regardless of the means of access or the purpose of their visit, whether for simple browsing, use of the features offered, or access to associated services. Users act under their own responsibility and undertake to comply with these terms of use as well as the Applicable Regulations.
  • Personal data breach: a security breach leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Article 3: Obligations

A first obligation incumbent on the User concerns the accuracy of the information they provide. The information they submit to Legal Data Space when browsing the Site and using the Legal Data Space Platform must be accurate and complete. Users acknowledge that providing false information may result in their permanent exclusion from the Legal Data Space Platform, in particular in the context of identity theft.

A second obligation falls on Legal Data Space and consists in not collecting data other than those listed in Article 5, not transmitting such personal data to persons and/or entities other than those mentioned in Article 6, and not retaining such data beyond the period defined in Article 7 of this Personal Data Protection Policy.

Legal Data Space therefore performs its obligations in compliance with the purposes of personal data collection (see Articles 4 et seq.) and the principle of data minimisation (Article 5(1)(c) GDPR).

It is also responsible for promptly notifying the User or the data subjects in the event of a breach, loss or unauthorised disclosure of personal data collected through use of the Legal Data Space application, to enable them to take all necessary measures to protect their data and notify the competent authorities.

In addition, Legal Data Space undertakes to modify or delete, at the request of the User or any data subject, any personal data collected on the occasion of or for the purpose of providing said services.

Article 4: Legal bases for personal data processing

Legal Data Space relies on different legal bases to process Users' personal data. Users have specific rights that vary depending on the legal basis on which Legal Data Space relies.

  • Performance of the contract: Legal Data Space processes its Users' personal data in order to fulfil its obligations under this contract. This includes providing the Services as described in the General Terms of Use, which may include features for sharing, providing access to, structuring or exploiting legal data.

Where they fall within the scope of the data intermediation services regime, these services are provided in compliance with the requirements of Regulation (EU) 2022/868, in particular regarding:

  • the absence of use of data for the Operator's own account;
  • neutrality in matching parties;
  • independence of economic conditions;
  • transparency of access and use conditions.
  • Consent: Legal Data Space may only process Users' personal data where they have previously consented.
  • Legitimate interest: Legal Data Space processes personal data to the extent necessary to pursue its legitimate interests, namely to provide an innovative, personalised and secure service.
  • Protection of vital interests: Legal Data Space may share personal data concerning you with law enforcement when a User's vital interests need to be protected. These vital interests include the protection of your life, your physical and mental health, your wellbeing or your integrity, as well as those of others, and the detection, reporting and removal of illegal content.
  • Legal obligation: how your personal data will be processed depends on the circumstances of the case. However, Legal Data Space may share personal data with judicial authorities in the context of judicial investigations.

Article 5: Nature and purposes of the data collected

As part of the service offered, Legal Data Space collects:

  • data submitted by the User upon registration that are necessary for creating their profile, such as email address, surname and first name, occupation, and professional registration number;
  • data relating to the User's activity on Legal Data Space's products and services, in particular publications and sharing of corpora and/or agents in dedicated marketplaces, as well as any metadata associated with such content;
  • the identity of "collaborators" and "clients" when they are invited by other Users;
  • data relating to connection devices;
  • the time and frequency of connections;
  • views of Legal Data Space pages and their content.

Some personal data (email address, surname, first name) are required for the use of the Legal Data Space Platform to remain optimal. Others are optional, but Users should be aware that without this optional information, the quality of their experience on Legal Data Space may be affected.

This data is collected in order to:

  • operate, improve and personalise the Services offered by Legal Data Space;
  • promote the safety and security of products and services;
  • conduct research;
  • personalise the User experience.

The data collected is used to carry out communication actions with Users, notably through extensive "mailing" campaigns (personalised emails) or "retargeting". The reason for this collection is therefore primarily informative and for internal marketing and/or targeted advertising purposes, personalising the User experience.

Article 6: Recipients of personal data

In this article, the User becomes aware of the recipients of their personal data in accordance with the commitments made by Legal Data Space under this Personal Data Protection Policy and applicable legislation.

In Article 6.1, Users will note that the data they have entered may be used against them to defend the rights and interests of Legal Data Space should the company be sued; and in Article 6.2, they will keep in mind that third parties may also access, use and exploit their personal data for the sole purpose of providing the Service set out in Articles 3 and 4 of this Personal Data Protection Policy.

Finally, this article will set out the conditions of extraterritoriality of the personal data collected.

6.1 — Data transferred to authorities and/or public bodies

This concerns only competent authorities and courts in the context of litigation brought before them to defend the rights and interests of Legal Data Space.

6.2 — Data accessible to third parties

Users' personal data are shared with:

  • advertisers on the Legal Data Space Platform;
  • companies or institutions engaged to market and distribute Legal Data Space products;
  • companies engaged to carry out surveys;
  • companies engaged to develop the innovation and technology of products and services designed and developed by Legal Data Space.

Under no circumstances and on no pretext will this data be sold, the sharing of information being part of a legitimate objective of improving our services.

The services offered by Legal Data Space may be provided by third-party providers. In this case, and to ensure the security, integrity and confidentiality of your personal data, Legal Data Space requires its subcontractors to use or disclose your personal data only in compliance with legal obligations.

Accordingly, Legal Data Space staff and the third parties authorised by them will have access to and may use the personal data collected for the sole purpose of providing the services set out in Articles 3 and 5 of this policy.

Under no circumstances will personal data be transferred to other third parties, whether free of charge or for consideration, without the User's authorisation, except for transmission to rightful recipients by court order of data enabling identification of the User.

6.3 — Transfers outside the EU

Legal Data Space is a social network intended to connect internet users worldwide. In this respect, Legal Data Space undertakes to ensure the security of your data and to comply with international regulations on personal data protection whenever a transfer outside the EU is carried out.

The data held and transferred by Legal Data Space is stored and processed in the locations where we have secure data centres and in the countries where Legal Data Space products are available.

Legal Data Space undertakes not to transfer any personal data outside the European Union or to third countries that do not offer a sufficient and adequate level of protection within the meaning of supervisory authorities, or to a subcontractor authorised by the User and signatory of the standard contractual clauses issued by the European authorities.

Article 7: Data retention period

Legal Data Space retains your data for as long as necessary to provide quality functionality and for as long as your account is active.

To this end, the User's personal data are retained for 3 years after their registration on the Legal Data Space Platform, in accordance with applicable global legislation.

Users may request at any time that their personal data be deleted from the Legal Data Space database during this 3-year retention period.

Such a request will generally be accepted, unless it would prejudice Legal Data Space's interests, including, without limitation, to assert its rights or to defend itself against legal proceedings.

If you wish to delete your personal data, you may:

  • use the "Delete" buttons to remove specific information;
  • permanently delete your account.

Article 8: User rights

In accordance with personal data regulations, and in addition to the above, Users have the following rights:

  • right to access their data and obtain a copy thereof;
  • right to withdraw consent at any time;
  • right to rectify their data (if inaccurate);
  • right to data portability (also referred to as the "right to reversibility");
  • right to restrict processing;
  • right to erasure;
  • right to determine the fate of their data post mortem.

To exercise these rights, any User may, regardless of the processing concerned, contact the Legal Data Space Data Protection Officer:

  • by post: SAS LEGAL DATA SPACE, 282 Rue des Pyrénées, 75020 PARIS, France;
  • by email at: dpo@legaldataspace.eu.

In the event of dissatisfaction, you also have the right to lodge a complaint with the French data protection authority (CNIL):

  • at the following address: CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris CEDEX 07 B / Tel: +33 1 53 73 22 22;
  • or on its website: cnil.fr/professionnel.

Article 9: Security

In accordance with the Applicable Regulations and the obligations incumbent on it (set out in Article 3), Legal Data Space processes its Users' personal data in the best possible way to ensure their security, integrity and confidentiality.

In particular, Legal Data Space implements all the technical and organisational measures necessary to ensure the security and confidentiality of the personal data collected and processed, in particular by preventing their distortion, damage or disclosure to unauthorised third parties (not listed in Article 6.2); and by ensuring a level of security appropriate to the risks associated with processing and to the nature of the personal data to be protected, having regard to the state of the art and the cost of implementation.

These measures may notably include limited access to data by staff of authorised services in connection with their duties, contractual guarantees in the event of recourse to an external provider, privacy impact assessments, regular reviews of our privacy practices and policies, and/or physical and/or logical security measures (secure access, authentication procedures, backups, antivirus software, firewalls, etc.).

Nevertheless, Legal Data Space cannot guarantee the confidentiality of personal data made public by the User. Its liability cannot therefore be engaged on this basis.

Furthermore, the Site or the Legal Data Space Platform may include links to external websites or sources. By way of this Personal Data Protection Policy and this specific notice, the User acknowledges that this Policy applies solely to the Services and use of the Site or the LDS Platform. It is not intended to cover data collected and/or processed on such external sites or sources.

Consequently, Legal Data Space's liability cannot be engaged for the practices of such sites or external sources, which are governed, in terms of personal data collection and processing, by their own personal data policies.

Article 10: Contact

Any User wishing to send any question, complaint or request to exercise rights relating to the collection and/or processing of their personal data may contact Legal Data Space:

  • by post: SAS LEGAL DATA SPACE, 282 Rue des Pyrénées, 75020 PARIS, France;
  • by email at: dpo@legaldataspace.eu.

Download the PDF version (French)