Privacy policy
Version of 14 October 2026. This is a translation; the Ukrainian version prevails in case of discrepancy.
In short
- We only collect what you send us yourself through the form or by writing to us: your name, contact details and what your matter is about.
- We use it to reply and, if we agree to work together, to provide legal services. We do not send newsletters or ads, and we do not sell data.
- The site uses no cookies, analytics or advertising trackers.
- Everything you tell us about your matter is kept confidential. Where legal assistance from an attorney-at-law is involved, it is also protected by attorney-client privilege (even if no engagement follows), and in patent attorney matters by the patent attorney’s professional duty of confidentiality.
- You can ask at any time what data we hold about you, and have it corrected or deleted. Write to info@asteelex.com.
The details follow.
1. Who is responsible for your data
Enquiries sent through asteelex.com are received by Asteelex’s managing partner, Viacheslav Shtanko. Depending on the help you need, the controller of your personal data is:
- Asteelex Law Association (Адвокатське об’єднання «Астеелекс»), for legal assistance by attorneys-at-law: legal advice from an attorney, disputes and court representation; registered address: 54a Narodna St., Kyiv, Ukraine;
- Viacheslav Shtanko, patent attorney, sole proprietor, for services as a representative in intellectual property matters (filing applications, handling proceedings before the Ukrainian IP Office, UKRNOIVI) and other legal services that are not legal assistance by an attorney-at-law, such as drafting contracts.
While we work out what your enquiry is about, both process it, each within the scope of its own activity (together, “we”). Once an agreement is signed, the party you signed it with is the controller for that engagement.
Contact for privacy matters (both):
- e-mail: info@asteelex.com;
- postal address: 9 Ivana Fedorova St., office 65, Kyiv 03150, Ukraine.
We process personal data under the Law of Ukraine “On Personal Data Protection” and, for information obtained in connection with legal assistance by an attorney-at-law, the Law of Ukraine “On the Bar and Practice of Law”. Patent attorney activity is also subject to the Regulation on Representatives in Intellectual Property Matters (Patent Attorneys), approved by Order of the Ministry of Economy of Ukraine No. 20599 of 29 December 2023.
2. What data we receive
What you send yourself. Through the site form: your name, phone or e-mail and your message. If you e-mail, call or message us, we also receive your contact details and whatever you choose to share.
Technical data. As with any website, your browser transmits your IP address, browser and device type, the page requested and the time of the request. Our hosting provider processes this data to deliver pages and protect the site from attacks. We do not use it to identify you.
What we do not collect. The site sets no cookies, uses no analytics or advertising services, does not track your behaviour and does not build profiles. Fonts and other resources are served from our own server, not from third-party services.
Please do not send sensitive details through the form, such as health information, details of criminal proceedings, documents or passwords. A few sentences about your matter are enough for a first contact; we will discuss the details through a secure channel.
3. Why we process data and on what basis
The legal bases are those set out in Article 11 of the Law “On Personal Data Protection”.
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry and discussing a possible engagement | name, contact details, message | steps taken at your request before entering into a contract (item 3) |
| Providing legal assistance or legal services under an agreement | data needed for the specific matter | conclusion and performance of a contract (item 3) |
| Checking for conflicts of interest before taking on a matter | name and a brief description of the enquiry | an attorney’s statutory duty to avoid conflicts of interest (item 5) and our legitimate interest (item 6) |
| Bookkeeping, reporting and compliance | data in agreements, invoices and payment documents | compliance with a legal obligation (item 5) |
| Protecting the site from attacks and abuse | technical data | our legitimate interest (item 6) |
We do not ask for consent where processing rests on another basis. If we ever need your consent (for example, to send you materials), we will ask separately, and you can withdraw it at any time.
We do not make decisions about you based solely on automated processing.
4. Who we share data with
We do not sell your data or share it for advertising. Only providers of technical services, without which the site and our communication with you would not work, have access to it:
| Provider | Purpose | Where data is processed |
|---|---|---|
| Cloudflare, Inc. | site hosting, page delivery, attack protection, receiving the form | USA and other countries in the Cloudflare network |
| Telegram | instant notification of a new form submission | outside Ukraine |
| Freehost (freehost.com.ua) | the info@asteelex.com mailbox | Ukraine |
| Google (Gmail) | the e-mail client we use to read and send mail | USA and other countries |
We may also disclose data to public authorities where the law expressly requires it, subject to confidentiality requirements and, in attorney matters, the safeguards of attorney-client privilege.
If you follow a link from our site to Facebook or Telegram, or open our address on a map, those services’ own rules apply.
5. International transfers
Some of the providers listed above process data outside Ukraine, including in countries not recognised as ensuring an adequate level of data protection. We transfer data to them only to the extent needed to reply to your enquiry or provide the service, on the grounds set out in Article 29 of the Law “On Personal Data Protection”, and we choose providers that give contractual data protection guarantees.
If you would rather your enquiry did not pass through these services, please call us; the number is on the site.
6. How long we keep data
- Enquiries that did not lead to an engagement: up to 12 months from the last contact. After that we delete the correspondence but keep your name and a brief description of the matter so that we never later act against you (conflict check). We keep this for no longer than 5 years.
- Client data: for the term of the agreement and 3 years after it ends (the general limitation period under Article 257 of the Civil Code of Ukraine), or longer where the law requires certain documents (for example, accounting records) to be kept.
- Technical data is kept by the hosting provider for its standard logging period.
When the period expires, the data is deleted or anonymised.
7. How we protect data
The site works only over a secure connection (HTTPS). Only we have access to enquiries. We keep the information you share with us confidential and do not let third parties access it. Information obtained in connection with legal assistance by an attorney-at-law is, in addition, covered by attorney-client privilege (Article 22 of the Law “On the Bar and Practice of Law”). A patent attorney must keep confidential any information obtained in the course of professional duties and must not use it in their own interests or those of third parties (subparagraph 2, paragraph 1, Section III of the Patent Attorneys Regulation mentioned above). For other legal services, confidentiality is set out in the agreement.
8. Your rights
Under Article 8 of the Law “On Personal Data Protection” you have the right to:
- know whether we process your data, for what purpose, where we obtained it and who we share it with;
- access your data and receive a copy;
- have inaccurate data corrected and unlawfully processed data deleted;
- object to the processing of your data;
- withdraw consent where processing was based on it;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court.
How to exercise your rights. Write to info@asteelex.com or send a letter to the address in section 1. To avoid disclosing your data to someone else, we may ask you to confirm your identity. We will tell you within 10 working days whether your request will be met and fulfil it no later than 30 calendar days after receipt, as required by Article 16 of the Law.
We cannot delete some data immediately if the law requires us to keep it or it is needed to establish or defend a legal claim. In that case we will explain why.
9. Visitors from the EU
Where the EU General Data Protection Regulation (GDPR) applies to the processing of your data, we rely on points (b), (c) and (f) of Article 6(1) GDPR, as described in section 3. In addition to the rights above, you have the right to restriction of processing and to data portability, and the right to lodge a complaint with the data protection supervisory authority in the country where you live or work.
10. Children
The site is not intended for persons under 18. If a child needs help from a lawyer, their parents or other legal representatives should contact us.
11. Changes to this policy
We update this policy when our processes, providers or the law change. The current version is always available on this page, with the date of the latest change at the top. We will notify the people we are in contact with of material changes affecting data we already hold.