Privacy Policy

Privacy Policy for Lawyers

We hereby inform you about how we process the personal data of Lawyers collected and processed in connection with the use of HUGO.legal, an online platform available via an internet browser at the address https://admin.hugo.legal/. This platform offers electronically supplied services to the Lawyer (as defined in the Terms of Use), consisting of access to a business management module and legal marketplace services (the “HUGO Platform”).

1. Who is the personal data controller?

The personal data controller is OÜ HUGO (registry code: 12821618) (“HUGO”), located at Keemia 4, 10616 Tallinn, Estonia.
You can contact us regarding data protection issues via e-mail at hugo@hugo.legal.

2. What personal data do we process?

We process the following categories of personal data:

  • Identification data: Name and surname, business name or company name, personal identification number/registry code.
  • Contact details: E-mail address, telephone number, business address, correspondence address.
  • Financial data: Bank account number and information concerning settlements/payments.
  • Professional data: Area of ​​activity, language skills, competences, education, and professional experience.
  • Activity data: Information on work performed by the Lawyer, working hours, and availability.
  • Performance data: Assessments of the Lawyer’s work and feedback regarding customer satisfaction.

3. The purpose of data processing

We process the personal data of the Lawyer for the following purposes:

  • To take steps to conclude an agreement with the Lawyer and perform the agreement to which the Lawyer is a party, including providing access to the business management system and legal marketplace services via the HUGO Platform.
  • To provide details of the Lawyer to a natural person, legal person, or organizational unit placing an order for legal services via the HUGO platform (the “Client”), enabling the Lawyer to provide services to the Client.
  • To verify that the Lawyer has the necessary qualifications and to ensure the best Client-Lawyer cooperation by matching the Lawyer’s field of ​​operation, working language, and competences to the Client’s needs.
  • To provide the Client with reliable legal service; for this purpose, HUGO shall transmit the Client’s feedback on services provided by the Lawyer to the Lawyer.
  • To fulfill legal obligations to which HUGO is subject, particularly those arising from tax, accounting, and anti-money laundering (AML) regulations.
  • To achieve objectives arising from legitimate interests pursued by HUGO, specifically:
    • Maintaining the business relationship with the Lawyer;
    • Ensuring data and information security;
    • Developing and improving the HUGO Platform;
    • Preventing fraud;
    • Establishing, exercising, or defending legal claims.

4. Legal basis for processing

  • Performance of Agreement (Art 6(1)(b) GDPR): HUGO processes personal data to conclude and perform the agreement between the Lawyer and HUGO.
  • Consent (Art 6(1)(a) GDPR): HUGO processes personal data based on consent for specific actions, such as sending marketing advertisements or offers. Consent is voluntary and can be withdrawn at any time by notifying HUGO. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Legitimate Interest (Art 6(1)(f) GDPR): HUGO processes data for the legitimate interests described in Section 3 above (e.g., security, fraud prevention, platform development).
  • Legal Obligations (Art 6(1)(c) GDPR): HUGO processes data to fulfill obligations arising from legislation regulating money laundering and terrorism prevention, as well as tax and accounting regulations.

5. Recipients of personal data

  • Clients: Personal data of the Lawyer (Name, e-mail, phone number, and ID code if necessary) may be transferred to Clients whose orders are assigned to the Lawyer via the legal marketplace.
  • Public Profile: When answering a “Quick Question,” the query is forwarded to a Lawyer selected by HUGO. While this does not immediately create a legal relationship with the Client, the Lawyer’s name and image may be displayed on the HUGO Platform alongside the response.
  • Service Providers: Personal data may be transferred to entities providing services to HUGO, such as accounting, legal, tax services, and IT service providers (hosting, e-mail services, etc.).
  • Authorities: Within the limits permitted by law, data may be transferred to relevant authorities (e.g., tax boards, law enforcement).

Transfer of personal data is carried out in accordance with legal requirements. Where applicable, HUGO entrusts the processing of personal data to processors on the basis of relevant Data Processing Agreements (DPAs).

6. Processing of Client data (Legal Marketplace Services)

HUGO collects personal data from the Client to provide marketplace services.

  • Matching: HUGO matches the Client with the Lawyer best suited to the Client’s needs and provides that Lawyer with the Client’s personal data.
  • Separate Controllers: HUGO and the Lawyer act as separate independent personal data controllers regarding the Client’s data.
    • HUGO processes Client data to render information society services (connecting the parties) as described in the Terms of Use. HUGO does not provide legal services.
    • The Lawyer processes Client data for the purpose of providing legal services and remains the data controller for that specific processing.
  • Breach Consequences: In the event of a personal data breach regarding Client data that is attributable to the Lawyer, HUGO reserves the right to immediately terminate the agreement with the Lawyer and delete the Lawyer’s account.

7. Rights in relation to personal data

The Lawyer has the following rights under the GDPR:

  • Access and Rectification: The right to request access to and correction of personal data.
  • Erasure and Restriction: The right to request the deletion of data or restriction of processing.
  • Data Portability: The right to receive data in a structured, commonly used format.
  • Right to Object: The Lawyer has the right to object to processing based on legitimate interest due to their specific situation. HUGO shall discontinue processing unless there are compelling legitimate grounds that override the Lawyer’s interests or for the defense of legal claims.
  • Direct Marketing: The Lawyer may object to processing for direct marketing purposes at any time.

8. Data Storage and Retention

  • Active Accounts: Data is stored as long as the Lawyer has an active account.
  • Account Deletion: After account deletion, data is stored for 3 years to protect against legal claims (corresponding to the general statute of limitations).
  • Accounting Records: Stored for 7 years as required by the Accounting Act.
  • Disputes/Fraud: In cases of suspected crime, fraud, or disputes, data may be stored for 10 years or until the claim is finally settled.
  • Location: Personal data is stored on servers located within the European Union.

9. Settlement of disputes & Supervisory Authority

Disputes related to the processing of personal data are resolved through customer support at hugo@hugo.legal.

If the Lawyer believes that their personal data is being processed unlawfully, they have the right to lodge a complaint with the supervisory authority:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39, 10134 Tallinn, Estonia
Website: www.aki.ee