Privacy policy
Last updated: 28 October 2026
I care about protecting your personal data. In this privacy policy I explain which data I process when you visit my website onetakelegal.be, use one of the online tools, request a quote, book a call or become a client, why I do so and what rights you have. I process your data in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for the processing?
The controller is:
- Christian Minette BV, trading as OneTake. Legal
- Pierstraat 68, 2630 Aartselaar, Belgium
- Company and VAT number: BE 0762.975.274
- E-mail: christian@onetakelegal.be
- Phone: +32 497 17 51 78
In this privacy policy, “I” refers to Christian Minette, lawyer at the Antwerp Bar, who acts on behalf of the company.
2. Which data do I process?
Depending on how you contact me, I may process the following data:
- Data you provide yourself when you e-mail me, call me or send me a message (for example via WhatsApp): your name, e-mail address, phone number and the content of your message or question.
- Data in a quote request: what you fill in on the quote form (see section 4).
- Data when you book a call: your name, e-mail address, the time slot you choose and anything you add to the booking (see section 4).
- Data through the online tools: what you enter or upload in the work rules check or the dismissal risk scan (see section 3).
- Data in the context of a file or engagement, if you become a client: the data needed to assist you legally, including data about your employees that appears in the file.
- Technical data: when you visit the website, limited technical data (such as your IP address) is processed to make the website work and to keep it secure. I only use measurement cookies with your prior consent (see the “Cookies” section below).
3. Online tools on this website
This website offers two free online tools for employers: the work rules check and the dismissal risk scan. Both give a first impression and are not legal advice; no attorney-client relationship is created.
Work rules check.
- If you upload a document and tick the consent box, the text of that document is analysed once to show you a result straight away. At this step I keep neither your document nor its text; I only keep anonymous technical data (such as the number of characters, the result per checklist item and the number of analyses per day) to make the tool work and prevent abuse. To count how many analyses one visitor runs per day, I do not store an IP address, only an irreversible code that changes every day. The legal basis is your consent, which you give before uploading.
- If you then request the full report, I process the details you provide (name, company name, e-mail address and, optionally, phone number), the text of your document, the original file and the report prepared for you. Your document and the report are only stored once you make that request.
Dismissal risk scan.
- You answer questions about a (planned) dismissal; you are asked not to enter the name of the employee concerned. At every step, your answers are sent to the website's server (in Frankfurt), which works out the next questions and the amounts. I store nothing at that point; I only keep anonymous technical data to make the tool work and prevent abuse.
- If you request the risk scan with your e-mail address at the end, I process your e-mail address, your answers (including the name of your company) and the report (PDF) prepared for you. At that point I also have a short summary prepared with the help of an AI application; for this, the name of your company and the points of attention and deadlines identified are sent to that application.
For both tools:
- I use the data to send you the result or the report, to follow up on your request and to prepare any introductory call. The legal basis is your consent, which you give expressly when you make the request and can withdraw at any time.
- I keep this data for twelve months after your request, after which it is deleted. On simple request via christian@onetakelegal.be I delete it sooner. If you become a client, the retention rules for files apply from then on.
- If you reach the website through a campaign link or an ad, I also keep the campaign codes from that link and your choice in the cookie banner with your request (see section 11).
- For the analysis and the summary I use Anthropic as a processor, through that provider's business service: your data is processed solely to prepare the result and is not used to train AI models. This processing may take place outside the European Economic Area, under the standard contractual clauses of the European Commission. Requests, documents and reports are stored on servers within the European Union (Frankfurt). To send reports I use a specialised e-mail service. All these service providers act as processors under appropriate arrangements.
4. Requesting a quote or booking a call
Quote form.
- If you request a quote through the form on the website, I process the topic you choose, your question, the name of your company, the number of employees, your e-mail address, your phone number if you fill it in, and the language in which you want a reply. If you reach the website through a campaign link or an ad, I also keep the campaign codes from that link and your choice in the cookie banner (see section 11).
- I use this data to answer your question, send you a quote and follow it up. The legal basis is taking the steps you ask for before entering into an agreement, and my legitimate interest in replying to a business request. Requesting a quote does not create a client relationship.
- The request is stored in the same database as that of the online tools (servers in Frankfurt). Through the e-mail service you receive a confirmation and I receive a notification; the confirmation to you only repeats the topic you chose, not your question. To prevent abuse, your IP address is held in memory for one minute and not stored.
- If you do not become a client, I keep the request for twelve months and then delete it; sooner on simple request. If you become a client, the retention rules for files apply from then on.
Booking a call.
You book an introductory call through the booking service Cal.com, which processes your name, e-mail address, the chosen time slot and any comment you add to the booking, and sends you a confirmation and a video link. The booking page is in Dutch; the call itself can be in English. Cal.com acts as a processor; the data may be processed outside the European Economic Area under appropriate safeguards. I use this data to hold the call and follow it up (legitimate interest and, once you become a client, performance of the agreement).
5. Files and the use of AI
If you become a client, I process the data needed to handle your file, including data about the employees or third parties who appear in it. I work AI-native: in every file I use AI applications for text analysis, legal research, summarising and drafting first versions. The following rules apply, which are also set out in my general terms and conditions:
- I only use business applications under business terms, which do not use your data to train AI models; never free or consumer versions.
- Where needed, I anonymise names in documents.
- I read everything and finalise every piece of advice myself; I remain responsible for the advice.
- I choose the most suitable application for each task and may change provider. You can always ask what AI did in your file: which step, which model and what I changed.
- We exchange documents through a secure, shared folder per file, with a cloud service that acts as a processor.
6. Why and on what legal basis do I process your data?
- To answer your question and communicate with you (legitimate interest).
- To send you a quote at your request (steps before an agreement and legitimate interest).
- To make the online tools work and send you a result or report (your consent).
- To see which campaigns and ads lead to requests (legitimate interest) and, if you accepted the measurement cookies, to report this to Google Ads (your consent).
- To provide my legal services and perform an agreement with you (performance of the agreement).
- To comply with my legal and ethical obligations as a lawyer, including identification and the fight against money laundering (legal obligation).
7. With whom do I share your data?
I do not sell your data and do not share it with third parties for commercial purposes. For my services I rely on carefully selected service providers that act as processors and only process your data on my instructions and under appropriate arrangements. These fall into the following categories: website hosting (Vercel), the database and file storage for the online tools and quote requests (Supabase, servers in Frankfurt), the AI applications I work with (including Anthropic), the e-mail service for reports and quote requests, the booking service (Cal.com), the cloud service for the shared file folders, and my e-mail and office software. If you contact me via WhatsApp, that message goes through that service. Some of these service providers process data outside the European Economic Area; this is done under the standard contractual clauses of the European Commission or an adequacy decision (such as the EU-US Data Privacy Framework).
As a lawyer, I am also bound by professional secrecy. I treat data you entrust to me in that context with the utmost confidentiality and only share it when handling your file requires it (for example with an opposing party, a court or an expert) or when the law obliges me to.
8. How long do I keep your data?
I do not keep your data longer than necessary for the purposes above, or for as long as a legal or ethical obligation requires. I keep file data for up to five years after the file is closed, after which it is destroyed, in accordance with my general terms and conditions. Data you provide through the online tools or a quote request is kept for twelve months (see sections 3 and 4). I keep booking data for as long as needed to follow up on the call and then according to the rules for files or, if you do not become a client, for no more than twelve months.
9. How do I protect your data?
I take appropriate technical and organisational measures to protect your data against loss and unauthorised access: encrypted connections, two-step verification on my accounts, access to file folders only for expressly designated people, and business terms with every service provider.
10. What are your rights?
Under the GDPR, you have the right to:
- request access to your data;
- have incorrect data corrected;
- have your data erased, within the limits of the law;
- restrict or object to the processing;
- receive your data in a portable format;
- withdraw any consent you have given at any time.
You can exercise these rights via christian@onetakelegal.be. If you disagree with how I handle your data, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, GBA), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
11. Cookies
Which cookies this website uses, why and for how long is set out in the cookie policy. You can change or withdraw your choice at any time:
Campaign codes. If you reach the website through a campaign link or an ad, the web
address contains campaign codes, such as utm_source or the click code that Google Ads adds
(gclid). If you then request a report, a risk scan or a quote, I keep those codes with your
request, together with your choice in the cookie banner. No cookie is needed for this. I use them to see
which campaigns and ads lead to requests (legitimate interest). Only if you accepted advertising may I pass
the click code and the time of your request on to Google Ads, so that Google can measure which ads work
(your consent). I do not pass on your name, e-mail address, company name or question.
12. Changes
I may update this privacy policy from time to time. The most recent version is always available on this page. This privacy policy exists in Dutch and in English; in the event of any discrepancy between the two versions, the Dutch text prevails.