Astor Law ApS, CVR 46693809, Copenhagen, Denmark ("we") is the data controller for the processing described here. Questions about personal data: [email protected].

Who this policy covers

Clients and their contact persons, management and beneficial owners; counterparties and their representatives; other people who appear in our matters; and visitors to this website. Our own management and employees receive a separate notice.

What we process, and why

Client matters. Name, title, contact details and the information a matter requires, to provide legal assistance, including the conflict check before we take a matter on. Basis: the contract with the client, and our legitimate interest in handling the matter properly. A matter can by its nature involve sensitive data or data on criminal offences; we then process it because a legal claim requires it. We may transcribe calls and meetings to keep the matter file; tell us at the start of a call if you would rather we did not.

Customer due diligence. Where the Anti-Money Laundering Act applies to a matter, we must verify the identity of the client and its beneficial owners, and we may receive your details from the company or from public registers rather than from you. Basis: our legal obligation under the Act. This information is used for that purpose only.

Invoicing and bookkeeping. Name, work contact details and invoice details. Basis: our legal obligation under the Danish Bookkeeping Act.

Who we share with

Our IT suppliers and other data processors (mail, documents and storage, the software we work in, signatures, screening, bookkeeping and the hosting of this website) process personal data on our instructions under data processing agreements. Where a matter or the law requires it, we share data with public authorities, courts, counterparties and their advisers, our bank and our auditor.

Transfers outside the EU and the EEA

Some suppliers process data in the United States. Transfers rest on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework for certified recipients, or on the Commission's standard contractual clauses.

How long we keep it

• Matter files: as a rule up to ten years after the matter ends, for the limitation period of adviser liability.
• Customer due diligence material: five years after the client relationship ends, then deleted.
• Bookkeeping records: five years from the end of the financial year.

Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability within the limits of the law. The Anti-Money Laundering Act does not allow us to tell you whether we have made inquiries or reports under it, and our duties of confidentiality to clients can limit access otherwise. Write to [email protected]. You can also complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.

This website

The website uses no cookies and no analytics tools. The hosting provider's server logs (IP address, time) are processed only for operations and security.

Dated 25 October 2026. We update this policy when our processing changes.