1. Who I am
This website is operated by Dmytro Konovalenko, Attorney-at-law (Bar Certificate No. 001156) (“I”, “me”). I am the controller of personal data collected through this website, within the meaning of the EU General Data Protection Regulation (GDPR).
Address: 171 Arch. Makariou III Avenue, 4th floor, Vanezis Business Center, Limassol 3027, Cyprus
Email: [email protected]
Phone: +357 96 447475
2. Data I collect
Information you give me
- Contact form: your name, the way you want to be contacted (email address, phone number or messenger username) and, if you choose to provide them, your country of residence and a short description of your situation.
- Calls, emails, messengers and consultations: any information you share when you contact me directly.
Information collected automatically
- Advertising source: when you arrive from an advertisement, campaign parameters in the page address (such as UTM tags and the Google Ads click identifier) are attached to your enquiry, so I can understand which campaigns lead to enquiries.
- Technical data: the hosting provider processes standard server logs (such as IP address, browser type and time of request) to deliver and secure the website.
- Cookies and similar technologies: only essential storage is used unless you consent to analytics or advertising cookies. See the Cookie Policy.
You do not need to share sensitive details of your case in the contact form. Basic contact details are enough for me to get in touch.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry and arranging an assessment | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Providing legal services and managing the client relationship | Performance of a contract (Art. 6(1)(b)) |
| Conflict checks, identity verification, record keeping and other professional and regulatory duties | Legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and preventing misuse | Legitimate interests (Art. 6(1)(f)) |
| Measuring which advertising campaigns lead to enquiries | Legitimate interests (Art. 6(1)(f)) for campaign parameters attached to your enquiry; consent (Art. 6(1)(a)) for advertising cookies |
| Website analytics | Consent (Art. 6(1)(a)) |
Where I rely on consent, you can withdraw it at any time through Cookie settings or by contacting me. Withdrawal does not affect processing that took place before it.
4. Sensitive information
Because of the nature of these matters, information you share may relate to alleged criminal offences, proceedings, political opinions, ethnic origin or other special categories of data. I process such information only where necessary for the establishment, exercise or defence of legal claims (Art. 9(2)(f) GDPR) and as otherwise permitted by law, and handle it under professional secrecy.
5. Who data is shared with
Personal data is never sold. It is shared only where necessary:
- Service providers acting on my behalf, such as website hosting, email, form processing and messaging services, bound by data processing agreements.
- Google (Google Ads and Google Analytics), only if you consent to the relevant cookies.
- Bodies involved in your matter, such as the Commission for the Control of INTERPOL's Files, courts or authorities, only on your instructions as part of the representation.
- Translators, local counsel and professional advisers, only with your agreement and where needed for your matter, or authorities where required by law.
6. International transfers
Some service providers, including Google and messaging services, may process data outside the European Economic Area. Where this happens, I rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses, together with appropriate additional safeguards.
Where I represent you before the Commission for the Control of INTERPOL's Files, information is transmitted to the Commission in Lyon, France, as part of the proceedings.
7. How long data is kept
- Enquiries that do not lead to an engagement: 12 months from the last contact, then deleted.
- Client files: for the period required by applicable professional and legal rules, currently six years after the matter closes, unless a longer period is required by law.
- Cookies: as set out in the Cookie Policy.
8. Security
The website uses an encrypted (HTTPS) connection. Access to enquiries and client information is limited to me and to the service providers who need it to perform their services. No method of transmission over the internet is completely secure; if your matter is particularly sensitive, you may prefer to call.
9. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have your data erased, where there is no overriding reason to keep it;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time.
Some rights are limited where data is protected by professional secrecy or must be retained by law. To exercise your rights, email [email protected]. I will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). You may also contact the authority in the EU country where you live or work.
10. Changes and contact
This policy may be updated from time to time. The date at the top shows when it was last revised. Questions about it can be sent to [email protected].
Have a question about your case?
Request an assessment