Last Updated: July 12, 2025
Heydasch Law PLLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy applies to:
We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable laws. By using our services, you agree to this policy.
The privacy laws of some jurisdictions (e.g., California, Virginia, and the European Union) define personally identifying information broadly to include de-identified feedback provided to us, even when it is impractical to reveal your identity with such information. Some jurisdictions (e.g., the EU, UK, CA, VA, CO, CT, UT) also recognize "sensitive personal information" or "special categories of personal data," such as ethnicity, religious beliefs, or sexual preferences. You may exercise your privacy rights as outlined below.
We may obtain personal data from clients, third-party vendors, or partners who have the right to provide it to us. Such data may include personal identifiers to facilitate communication or case-related activities. We may also receive de-identified third-party data (e.g., demographic, interest, or behavioral information) to enhance our services through segmentation. We use good faith efforts to ensure such data remains de-identified using methods like Research IDs, encryption, hashing, pixel tagging, or cookies.
| Purpose | Legal Basis (GDPR) | U.S. Basis |
|---|---|---|
| Providing legal services | Contract (Art. 6(1)(b)) | Performance of contract |
| Client communications | Legitimate interest (Art. 6(1)(f)) | Business operations |
| Marketing and newsletters | Consent (Art. 6(1)(a)) | Consent or legitimate business interest |
| Security and fraud prevention | Legitimate interest (Art. 6(1)(f)) | Business operations |
We do not process personal data in a way incompatible with the purposes for which it was collected or subsequently authorized without your consent or a compelling legal basis.
We may share data with:
We do not sell personal data in the traditional sense, nor do we rent, sell, or share it for direct marketing purposes. However, certain laws (e.g., CCPA) define "sale" broadly, and some activities may fall under this definition. California residents may submit a "do not sell" request, which we treat as a request to delete personal information.
To exercise these rights, contact our Privacy Officer at Axel@heydaschlaw.com or call (305) 897-6763. We may verify your identity by requesting basic contact information and details about your last interaction with us. Authorized agents may submit requests on your behalf with written authorization, subject to identity verification. If we cannot match your information due to de-identification, we will use good faith efforts to process your request in accordance with applicable laws.
Data collected from the EU, UK, or Switzerland and transferred to the U.S. is protected via:
We comply with DPF Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability. For more information, visit www.dataprivacyframework.gov.
We retain personal data only for as long as necessary for the purposes for which it was collected or to comply with contractual, legal, or regulatory obligations. The retention period depends on the purpose of collection, industry standards, and our legal rights.
We maintain physical, electronic, and procedural safeguards to protect personal data, including:
Third parties receiving personal data are required to maintain similar safeguards. While we use commercially reasonable efforts to protect data, no system is completely secure, and we cannot guarantee absolute security.
We comply with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect, use, or disclose information from children under 13 without parental consent. We do not "sell" personal information of persons under 16 without affirmative authorization (opt-in from consumers aged 13-16 or parental consent for those under 13). To opt out of such sales, contact us as outlined in Section 5. For more information on COPPA, visit www.ftc.gov/ogc/coppa1.htm.
If you sign up for newsletters, white papers, or mailing lists, we collect the information you provide for marketing purposes. To unsubscribe, email info@heydaschlaw.com or use the "unsubscribe" link in our emails.
Our Site may contain links to third-party websites. We are not responsible for their privacy practices or content. Review their privacy policies before providing personal information.
We are subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission (FTC) and the California Privacy Protection Agency. We adhere to guidelines from the Insights Association and ESOMAR. For unresolved DPF-related complaints, contact us or visit www.insightsassociation.org for binding arbitration. EU, UK, or Swiss individuals may also contact their local data protection authority.
We may update this Privacy Policy by posting an amended version on our Site. Please review it regularly.
For general inquiries: info@heydaschlaw.com
For privacy-related requests or complaints: Axel@heydaschlaw.com
Privacy Officer (EU/UK): Axel Heydasch, axel@heydaschlaw.com
Phone: (305) 897-6763
Address: Heydasch Law PLLC, 28 West Flagler Street, Suite 330, Miami, FL 33130
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Site functionality | Session |
| Analytics | Usage statistics | 1 year |
Manage preferences via browser settings or our Cookie Settings. Our systems do not respond to browser do-not-track signals, and we do not treat such signals as "do not sell" requests under CCPA. Cookies, pixels, or web beacons from service providers or partners do not collect data revealing your identity.
Please review our complete Cookie Policy Here
Heydasch Law PLLC acts as both Controller and Processor under GDPR, depending on the context of data processing.
We use GDPR-compliant subprocessors, including:
This section applies to California residents engaged with us as clients, vendors, employees, contingent workers, independent contractors, or job applicants ("California BSPs").
We collect:
Sources include the California BSP, third parties related to business operations, or automated collection. Purposes include business services, security, human resources, and marketing analytics.
We share data with business support vendors, technology infrastructure vendors, and human resource vendors for the purposes outlined above.
California BSPs have the rights listed in Section 5.B, subject to exceptions (e.g., contractual or legal obligations).
To exercise these rights or appeal a decision, email Axel@heydaschlaw.com or call (305) 897-6763.