Legal

Privacy policy

Last updated: 23 September 2026

I care about protecting your personal data. In this privacy policy I explain which data I process when you visit my website onetakelegal.be, use one of the online tools, request a quote, book a call or become a client, why I do so and what rights you have. I process your data in accordance with the General Data Protection Regulation (GDPR).

1. Who is responsible for the processing?

The controller is:

Christian Minette BV, trading as OneTake. Legal
Pierstraat 68, 2630 Aartselaar, Belgium
Company and VAT number: BE 0762.975.274
E-mail: christian@onetakelegal.be
Phone: +32 497 17 51 78

In this privacy policy, “I” refers to Christian Minette, lawyer at the Antwerp Bar, who acts on behalf of the company.

2. Which data do I process?

Depending on how you contact me, I may process the following data:

Data you provide yourself when you e-mail me, call me or send me a message (for example via WhatsApp): your name, e-mail address, phone number and the content of your message or question.
Data in a quote request: what you fill in on the quote form (see section 4).
Data when you book a call: your name, e-mail address, the time slot you choose and anything you add to the booking (see section 4).
Data through the online tools: what you enter or upload in the work rules check or the dismissal risk scan (see section 3).
Data in the context of a file or engagement, if you become a client: the data needed to assist you legally, including data about your employees that appears in the file.
Technical data: when you visit the website, limited technical data (such as your IP address) is processed to make the website work and to keep it secure. I only use measurement cookies with your prior consent (see the “Cookies” section below).

3. Online tools on this website

This website offers two free online tools for employers: the work rules check and the dismissal risk scan. Both give a first impression and are not legal advice; no attorney-client relationship is created.

Work rules check.

If you upload a document and tick the consent box, the text of that document is analysed once to show you a result straight away. At this step I keep neither your document nor its text; I only keep anonymous technical data (such as the number of characters, the result per checklist item and the number of analyses per day) to make the tool work and prevent abuse. To count how many analyses one visitor runs per day, I do not store an IP address, only an irreversible code that changes every day. The legal basis is your consent, which you give before uploading.
If you then request the full report, I process the details you provide (name, company name, e-mail address and, optionally, phone number), the text of your document, the original file and the report prepared for you. Your document and the report are only stored once you make that request.

Dismissal risk scan.

You answer questions about a (planned) dismissal; you are asked not to enter the name of the employee concerned. Your answers stay in your browser and are processed to show the result on screen, with a short summary prepared with the help of an AI application. As long as you do not request anything, I store nothing; I only keep anonymous technical data to make the tool work and prevent abuse.
If you request the report by e-mail, I process your name, company name, e-mail address and, optionally, phone number, your answers and the report (PDF) prepared for you.

For both tools:

I use the data to send you the result or the report, to follow up on your request and to prepare any introductory call. The legal basis is your consent, which you give expressly when you make the request and can withdraw at any time.
I keep this data for twelve months after your request, after which it is deleted. On simple request via christian@onetakelegal.be I delete it sooner. If you become a client, the retention rules for files apply from then on.
For the analysis and the summary I use Anthropic as a processor, through that provider's business service: your data is processed solely to prepare the result and is not used to train AI models. This processing may take place outside the European Economic Area, under the standard contractual clauses of the European Commission. Requests, documents and reports are stored on servers within the European Union (Frankfurt). To send reports I use a specialised e-mail service. All these service providers act as processors under appropriate arrangements.

4. Requesting a quote or booking a call

Quote form.

If you request a quote through the form on the website, I process the topic you choose, your question, the name of your company, the number of employees, your e-mail address, your phone number if you fill it in, and the language in which you want a reply. If you reach the website through a campaign link, I also keep the campaign codes from that link (such as utm_source), without cookies.
I use this data to answer your question, send you a quote and follow it up. The legal basis is taking the steps you ask for before entering into an agreement, and my legitimate interest in replying to a business request. Requesting a quote does not create a client relationship.
The request is stored in the same database as that of the online tools (servers in Frankfurt). Through the e-mail service you receive a confirmation and I receive a notification; the confirmation to you only repeats the topic you chose, not your question. To prevent abuse, your IP address is held in memory for one minute and not stored.
If you do not become a client, I keep the request for twelve months and then delete it; sooner on simple request. If you become a client, the retention rules for files apply from then on.

Booking a call.

You book an introductory call through the booking service Cal.com, which processes your name, e-mail address, the chosen time slot and any comment you add to the booking, and sends you a confirmation and a video link. The booking page is in Dutch; the call itself can be in English. Cal.com acts as a processor; the data may be processed outside the European Economic Area under appropriate safeguards. I use this data to hold the call and follow it up (legitimate interest and, once you become a client, performance of the agreement).

5. Files and the use of AI

If you become a client, I process the data needed to handle your file, including data about the employees or third parties who appear in it. I work AI-native: in every file I use AI applications for text analysis, legal research, summarising and drafting first versions. The following rules apply, which are also set out in my general terms and conditions:

I only use business applications under business terms, which do not use your data to train AI models; never free or consumer versions.
Where needed, I anonymise names in documents.
I read everything and finalise every piece of advice myself; I remain responsible for the advice.
I choose the most suitable application for each task and may change provider. You can always ask what AI did in your file: which step, which model and what I changed.
We exchange documents through a secure, shared folder per file, with a cloud service that acts as a processor.

6. Why and on what legal basis do I process your data?

To answer your question and communicate with you (legitimate interest).
To send you a quote at your request (steps before an agreement and legitimate interest).
To make the online tools work and send you a result or report (your consent).
To provide my legal services and perform an agreement with you (performance of the agreement).
To comply with my legal and ethical obligations as a lawyer, including identification and the fight against money laundering (legal obligation).

7. With whom do I share your data?

I do not sell your data and do not share it with third parties for commercial purposes. For my services I rely on carefully selected service providers that act as processors and only process your data on my instructions and under appropriate arrangements. These fall into the following categories: website hosting (Vercel), the database and file storage for the online tools and quote requests (Supabase, servers in Frankfurt), the AI applications I work with (including Anthropic), the e-mail service for reports and quote requests, the booking service (Cal.com), the cloud service for the shared file folders, and my e-mail and office software. If you contact me via WhatsApp, that message goes through that service. Some of these service providers process data outside the European Economic Area; this is done under the standard contractual clauses of the European Commission or an adequacy decision (such as the EU-US Data Privacy Framework).

As a lawyer, I am also bound by professional secrecy. I treat data you entrust to me in that context with the utmost confidentiality and only share it when handling your file requires it (for example with an opposing party, a court or an expert) or when the law obliges me to.

8. How long do I keep your data?

I do not keep your data longer than necessary for the purposes above, or for as long as a legal or ethical obligation requires. I keep file data for up to five years after the file is closed, after which it is destroyed, in accordance with my general terms and conditions. Data you provide through the online tools or a quote request is kept for twelve months (see sections 3 and 4). I keep booking data for as long as needed to follow up on the call and then according to the rules for files or, if you do not become a client, for no more than twelve months.

9. How do I protect your data?

I take appropriate technical and organisational measures to protect your data against loss and unauthorised access: encrypted connections, two-step verification on my accounts, access to file folders only for expressly designated people, and business terms with every service provider.

10. What are your rights?

Under the GDPR, you have the right to:

request access to your data;
have incorrect data corrected;
have your data erased, within the limits of the law;
restrict or object to the processing;
receive your data in a portable format;
withdraw any consent you have given at any time.

You can exercise these rights via christian@onetakelegal.be. If you disagree with how I handle your data, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, GBA), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

11. Cookies

By default, this website does not place any non-essential cookies. For anonymous visitor statistics I use a cookieless web analytics service that collects no personal data or individually identifiable information; no consent is required for this. Your preferences for the online tools and for the cookie banner are stored locally in your browser (localStorage), without a cookie and without being transferred.

When I use measurement cookies to see which campaigns and pages work, I first ask for your consent through a cookie banner on your first visit. Only if you click “Accept” are Google Analytics 4 and the related Google Ads measurement loaded (processor: Google Ireland Ltd.). These services place cookies such as _ga and _ga_* (lifetime up to 13 months) to attribute visits and conversions to a campaign; Google may process the data outside the EEA under the EU-US Data Privacy Framework. Legal basis: your consent (Article 6(1)(a) GDPR). If you decline, nothing from Google is loaded and you continue browsing entirely without cookies; the website works exactly the same. You can change or withdraw your choice at any time through the “Cookie preferences” link at the bottom of every page. If you do not see a cookie banner, no measurement cookies are active at that time.

12. Changes

I may update this privacy policy from time to time. The most recent version is always available on this page. This privacy policy exists in Dutch and in English; in the event of any discrepancy between the two versions, the Dutch text prevails.