This Privacy Policy was updated on the 18th of October, 2023

Icon.Partners is an independent law firm. In the course of our activities, we collect, store, disclose and / or otherwise process personal data.

Our users' and visitors' privacy and security are of primary importance to us. We undertake to protect the data you provide to us. This Privacy Policy explains how Icon.Partners (AndAnd Operations OÜ, a company registered under the laws of Estonia with a registered address at Narva mnt 7 - 634 Kesklinna linnaosa Tallinn, 10117 Harju maakond Estonia) (hereinafter — «ICON», «we», «our») processes information that can be used to directly or indirectly identify individuals («Personal Data») and has been collected through the use of our Website. Under the «Website», it is understood a website, access to which may be received at the address https://www.icon.partners/.

In accordance with the applicable personal data protection and privacy laws, ICON is considered the controller with regard to Personal Data processed by ICON.

For the purposes of this Privacy Policy, we define the «User» as any individual who uses the services available on our Website or otherwise uses our Website and the «Visitor» as any individual who visits our Website, including Users. «You» and «your» are also used to refer to the User and Visitor.

We adhere to the following principles to protect your privacy:

principle of purposeful limitation — we process Personal Data fairly and transparently, solely for the achievement of specific, clear, and legitimate purposes, and we do not process them in a manner inconsistent with such data processing purposes;
principle of data minimization — we collect Personal Data only to the extent necessary to achieve the defined purposes. We do not store Personal Data if it is no longer needed or if the purposes for which the Personal Data was collected have been achieved;
principle of limited use — we use Personal Data for any other purpose only with the consent of the data subject or without such consent if the competent authority expressly permits it;
principle of data quality — we always keep Personal Data up-to-date and complete to more effectively achieve the ultimate purpose of data processing;
principle of security and integrity — we process Personal Data in a way that ensures adequate security of Personal Data, in particular their protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical and organizational measures;
principle of individual participation — we inform Users and Visitors about data collection. Users and Visitors have the right to access their Personal Data and request the correction of inaccurate or misleading data.
Data we collect and purposes of data processing
Visitors and Users of the Website
We may collect, record and analyze information about the Visitors to our Website. If our Website is accessed solely for information, i.e., when you do not provide us with any information, we collect only Personal Data that your browser has transmitted to our server. If you want to visit our Website, we collect the following data (after this — «Usage Data»), which is necessary for technical purposes to enable us to display our Website to you and to ensure sufficient stability and security of access (therefore, the legal basis for this is the legitimate interest of ICON):
IP address;
Date and time of the request;
Time zone difference for Greenwich (GMT);
Content of the request (exact access to the web page);
Access status / HTTP status code;
Amount of data transmitted in each case;
Site generating the request;
Browser;
OS and OS interface;
Language and browser version.

We use this information in the aggregate to evaluate the popularity of web pages on our Website and the effectiveness of our content delivered to you. In combination with other information we know about you from previous visits, this data may be used to identify you personally. We use Google Analytics, Google Tag Manager, Google Ads, and Meta Pixel for data analysis. The information collected in this way is stored for no more than one (1) year.

The basis for Usage Data processing is our legitimate interest. It is necessary for the efficient and effective management, operation of our business, and the provision of quality services, including website maintenance, product development and improvement, and to identify who may be interested in them.

Our Website allows you to contact us using the contact form. To do this, you need to specify your name, phone number (messenger), and the text of your request. We use the Personal Data collected only to contact you as you await our response to your request, and we may also record your request and our response to improve the efficiency of the organization and operation of our support service. We store information that can be used to identify you personally associated with your request, such as your name and phone number (messenger) (if you have provided us with such data), so that we can contact you and provide you with quality services. If you do not wish us to collect your Personal Data, please do not use our contact form and do not give your consent. However, regardless of whether you use our contact form or not, certain Cookies are always active on our Website and may be placed without your consent. To learn more and get detailed information about the use of Cookies, Visitors and Users can refer to our Cookies Policy, which is available on our Website.

If you contact us via the live chat on our Website, we may also record your request and our response to improve the efficiency of the organization and operation of our support service. We store information that can be used to identify you personally associated with your message, such as your name and phone number (messenger) (if you have provided us with such data), so that we can contact you and provide you with quality services.

You can become a part of our team by using the contact form. To do this, you need to provide your name, surname, and email address, select a position from those offered in the contact form, and attach your CV and / or specify other data. We use this data to assess your suitability for the position and to ensure our internal control and security.

The basis for the processing of the Personal Data of our Visitors is their consent to the processing of their Personal Data for communication with them. We use such Personal Data in ways you would reasonably expect and that have minimal impact on your privacy.

The basis for the processing of Personal Data for marketing purposes is also the consent obtained from you. We use Personal Data in ways you would reasonably expect and that have minimal impact on your privacy.

Wherever possible, we seek to obtain your explicit consent to the processing of your Personal Data, for example, by asking you to consent to the use of Cookies.

Visitors and Users can control the use of Cookies at a specific browser level. If you reject Cookies, you may still use our Website, but your ability to use certain features or sections of our Website may be limited. To learn more and get detailed information about the use of Cookies, Visitors and Users can refer to our Cookies Policy, which is available on our Website.

Compliance with the General Data Protection Regulation (GDPR)

For Visitors and Users located in the European Economic Area («EEA»), privacy rights are granted, and all processing and transfer of Personal Data is carried out in accordance with the regulations and rules of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 “On the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, known as the General Data Protection Regulation” (GDPR).

We process Personal Data as a Controller as defined in the GDPR:

ICON will be the Controller of Visitors' and Users' data as set out above in the «Visitors and Users of the Website» section.

Our Privacy Policy complies with the laws of each country or jurisdiction in which we intend to do business. If you believe it does not comply with the laws of your jurisdiction, we would like to receive feedback from you. Ultimately, however, it is your choice whether or not you wish to use our Website.

Your rights as a data subject

Visitors and Users may review, correct, update, delete and transmit their Personal Data. To do this, please contact us at office@icon.partners. We will acknowledge your request within seventy-two (72) hours and process it as soon as possible and in accordance with the law.

Right to object to the processing of your Personal Data. Visitors and Users have the right to object to our processing of their Personal Data by contacting us at office@icon.partners or using the functionality of the Website. Once we receive an objection, we will no longer process your Personal Data unless it is necessary to provide our services or we demonstrate other legitimate grounds for our processing that override your interests, rights, and freedoms or for legal proceedings.

Right to access your Personal Data. Visitors and Users have the right to find out whether we process their Personal Data, what categories of Personal Data we process about them, the purposes of the processing, the categories of third parties to whom we may disclose the Personal Data of Visitors and Users, the storage period of their Personal Data or the criteria for determining it by contacting us at office@icon.partners.

Right to verification and correction. Visitors and Users have the right to verify their Personal Data's accuracy and request its update or correction. Upon receipt of such a request, we have the right to verify the grounds for updating or correcting Personal Data and request additional information and documents from you that confirm such grounds. If there are sufficient grounds to update or correct Personal Data, we will make the necessary changes as soon as possible.

Right to restrict the processing of your Personal Data. Visitors and Users have the right, under specific circumstances, to request that we restrict the processing of their Personal Data as required by applicable data protection laws, such as when our processing is unlawful. In this case, we will not process your Personal Data for any purpose other than to store it.

Right to receive your Personal Data and to transmit it to another Controller. Where our processing is based on your consent and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and, where technically feasible, to transmit it to another Controller without any hindrance.

Right to withdraw consent. Where our processing is based on your consent, you may withdraw your consent at any time by sending us an email to office@icon.partners with your request for Personal Data to be deleted, and we will delete your Personal Data within seventy-two (72) hours.

You also have the right to file a complaint with a supervisory authority if you believe we are violating your rights. But we ask you to contact us first so that we can help you.

When we receive any request to access, edit or delete personally identifiable information, we reserve the right to initially take reasonable steps to verify your identity before granting you access or otherwise taking action. This is essential to protect your information.

Advertising offers and informational and marketing messages

We may send marketing and informational messages to Users and Visitors through various platforms, such as email and instant messaging systems. Where required by law, we ask for your explicit consent to receive such messages. When we send you messages, we aim to include instructions on how to opt-out of receiving such messages in the future. Still, if we do not include such instructions, you may contact us at office@icon.partners to unsubscribe from receiving such messages.

We may use your data to form an idea of what we think you may need or be interested in. This is how we decide which products, services, and offers may be relevant to you (we call this marketing).

You will receive marketing and informational messages and other news about our services from us if you have requested information or purchased our services or if you have provided us with your data when you contacted us and explicitly indicated that you wish to receive this information.

We may send you the following messages to a targeted set of individuals from our marketing database: invitations to industry events that we host or attend; informational messages; current industry news; news about our company and the services we offer; other information that we believe may be of interest to our Users and Visitors.

We may also inform you about products or services provided by trusted partners. We may also survey you to determine your opinion about our services.

We do not provide lists of Users and Visitors to third parties in any way, except as outlined in this Privacy Policy.

Data storage

Personal Data shall be processed and stored only for as long as is necessary for the purpose for which it was collected.

We will store your Personal Data for as long as you are our User or Visitor. Suppose you are no longer a Visitor or User. In that case, we will store your Personal Data for the minimum period necessary to fulfill the purposes outlined in this Privacy Policy and applicable legal obligations, but no longer than twelve (12) months. Personal Data that is collected and processed with your consent will be stored for as long as we have your consent.

Information received through contact forms is deleted annually. We will delete your information if you have not contacted customer support at office@icon.partners for more than twelve (12) months.

We will delete any Usage Data collected for technical purposes no later than twelve (12) months after it has been collected.

After the expiry of the storage period, we shall delete Personal Data. Therefore, the right to object to the processing, the right to access, the right to delete, the right to correction, the right to restrict the processing, and the right to receive and transmit Personal Data cannot be exercised after the expiry of the storage period.

Contractors

We cooperate with third-party service providers who provide us with services such as website development, hosting of our Website, maintenance, emailing, marketing, technical support and collateral, information technology and cybersecurity services, customer support, and other services. These contractors may access the Personal Data or process it on our behalf as part of their services to us. We limit the information provided to our service providers to only that which is reasonably necessary to perform their functions.

We use Google Analytics to monitor and analyze web traffic. Google Analytics is a web analytics service by Google LLC (hereinafter — «Google»). Google uses the data collected to track and analyze the use of our Website, prepare reports on its operation, and share them with other Google services. Google may use the Personal Data collected to contextualize and personalize the advertising of its advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA — Privacy Policy — Opt Out.

We use Google Tag Manager to monitor and analyze web traffic. Google Tag Manager is a tag management system provided by Google. Google uses the data collected to track and analyze the use of our Website, prepare reports on its operation, and share them with other Google services. Google may use the Personal Data collected to contextualize and personalize the advertising of its advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA — Privacy Policy — Opt Out.

We use Google Ads to optimize our advertising. Google Ads is an online advertising platform provided by Google. Google uses the data collected to send our advertisements to persons who have already interacted with our Website (e.g., Visitors), prepare reports on the effectiveness of advertisements, and share them with other Google services. Google may use the Personal Data collected to contextualize and personalize the advertising of its advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA — Privacy Policy — Opt Out.

We use Meta Pixel to monitor and analyze web traffic. Meta Pixel is a web analysis service by Meta Platforms, Inc. («Meta»). Meta uses the data collected to track and analyze the use of our Website, prepare reports on its operation, and share them with other Meta services. Meta Pixel may use the Personal Data collected to contextualize and personalize the advertising of its advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA — Privacy Policy — Opt Out.

We use SendPulse, provided by SendPulse Inc., to communicate with our Users and Visitors (that is, to send them marketing emails). This service processes data about our Visitors and Users on our behalf. Place of processing: USA — Privacy Policy.

We use AWS, provided by Amazon Web Services EMEA SARL, to securely host our Website on a server. Place of processing: Luxembourg — Privacy Policy. The infrastructure is protected by a multi-level approach to protection.

We may need to transfer your Personal Data to third parties who provide these services. If your Personal Data is transferred outside the European Economic Area («EEA»), we require such third parties to maintain appropriate security measures.

We ensure that we hold data processing agreements with our service providers that ensure compliance with the GDPR and our contracts with them which require the privacy of Personal Data. All data transfers within and outside the EEA are carried out under these data processing agreements. All data transfers are carried out under the strictest security rules.

For more information on cross-border information transfers to our partners, service providers, and developers outside the EU/EEA, please contact us using the details provided in the «Contact us!» section below.

Information security

We care about the security of your Personal Data. We adhere to generally accepted industry standards to protect the data transmitted to us, both during transmission and after it is received. We take technical, physical, and administrative security measures to ensure that your Personal Data is adequately protected. When we process your data, we also ensure that your data is protected against unauthorized access, loss, manipulation, falsification, destruction, or unauthorized disclosure. This is achieved through appropriate administrative, technical, and physical measures.

No 100% secure way to transmit data over the Internet or electronic storage exists. Therefore, we cannot guarantee their absolute security.

We never process any special categories of personal data and/or data on criminal offenses. In addition, we never conduct personal data profiling.

Use of the site by children

We do not provide services to children. Visitors declare that they are of legal age in accordance with applicable law.

Our Website is not directed to anyone under the age of sixteen (16). Minors may use our Website only under the supervision of a parent or guardian. Under no circumstances may anyone under the age of thirteen (13) use our Website.

We collect data about all Users and Visitors regardless of age. We assume that some of these Users or Visitors may be children. If we become aware that we have collected Personal Data from a child, we will delete that information as soon as possible. If you believe that we may have any data from or about a child, please contact us at office@icon.partners.

Applicability of this Privacy Policy

This Privacy Policy applies only to our Website.

Please be attentive when visiting our Website. Our Website may contain links to other websites. Once you link to another website, this Policy no longer applies. We are not responsible for the content or privacy policies of other websites.

Acceptance of these terms and conditions

We assume that all Visitors and Users have read this document carefully, understand its content, and agree to the terms and conditions outlined in this Privacy Policy. If you do not agree to this Privacy Policy, you must refrain from using our Website.

Changes and updates to our Privacy Policy

We may occasionally change and update our Privacy Policy, so please review it frequently. All changes and updates to this Privacy Policy are effective when posted on the Website. We reserve the right to change and update this Privacy Policy at any time without prior notice.

If there are any changes to this Privacy Policy that we believe are material, we will make every effort to notify you in advance through your contact information provided to us or by posting a notice on our Website.

If you have any questions about the operation of our Website or your interaction with it, please contact us at office@icon.partners.

Icon.Partners

Back to site