---
title: "Privacy policy | Pitch, European law firm for IP, IT & data"
description: "Privacy Policy of pitch.law. Pitch, European law firm for IP, IT and data protection."
url: https://pitch.law/privacy-policy
---

[pitch](https://pitch.law/) Legal

# Privacy Policy of pitch.law

Last updated: 31 October 2026

This Privacy Policy describes how and when

1. **PITCH BV**, a limited company with registered office at Grétrystraat 54, 2018 Antwerpen, Belgium registered with the Crossroads Bank for Enterprises with number 1013.954.658; and  

2) **PITCH PATENTS BV**, a limited company with registered office at Vinkenstraat 10, 2440 Geel (Belgium) registered with the Crossroads Bank for Enterprises with number [0781.754.276](https://kbopub.economie.fgov.be/kbopub/toonondernemingps.html?ondernemingsnummer=781754276);  

hereinafter referred to as “PITCH”, “we” or “us”;

process your personal data when you use our website [pitch.law](https://pitch.law/) (hereinafter: the "**Website**") or our services, or take part in our meetings.  

PITCH BV and PITCH PATENTS BV act in their capacity of co-controllers with regard to the processing of your personal data.  

### 1. General

The following terms used throughout this Privacy Policy have the following meanings:

"**personal data**" means any information relating to you as an individual or information which enables to identify you.

"**General Data Protection Regulation**" (hereinafter: the "**GDPR**") means the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

We have measures in place to ensure that your personal data is protected against unauthorized access, deletion or alteration. We will use reasonable efforts to ensure that your privacy interests are protected in accordance with applicable law and best practices.

### 2. Nature and manner of personal data processed by us

Use of the Website

**Hosting and security.** The Website is hosted by Cloudflare. To deliver pages and protect the Website against abuse, Cloudflare processes technical data such as your IP address, browser type and the page requested. We do not use these data to identify you. Legal basis: our legitimate interest in a secure, working website (Article 6(1)(f) GDPR).

**Visitor statistics.** We use Cloudflare Web Analytics to count visits and see which pages are read. It uses no cookies, stores nothing on your device, builds no profile of you and does not follow you across websites. It records, in aggregate: the page visited, the referring website, the type of browser and operating system, the country, and page load times. Your IP address is not used for these statistics. Legal basis: our legitimate interest in improving the Website (Article 6(1)(f) GDPR).

**Questions and meeting requests.** When you send us a question through the Website, we receive your question, your name, your e-mail address, the page you sent it from and the topics the Website suggested. When you book a meeting, we receive your name, your e-mail address, the time you chose and what you would like to discuss. We use these data only to answer you and to prepare and hold the meeting. Questions reach us by e-mail through Microsoft 365; meetings are booked in Microsoft Bookings. Legal basis: steps you ask us to take before a possible engagement, and our legitimate interest in answering you (Article 6(1)(b) and (f) GDPR). Questions that do not lead to an engagement are deleted 12 months after receipt.

**Bot check.** To keep automated spam out, the question form uses Cloudflare Turnstile. It checks signals from your browser, such as your IP address and browser characteristics, to tell people from bots. Cloudflare uses these data only for this check and not for advertising. Legal basis: our legitimate interest in protecting the Website (Article 6(1)(f) GDPR).

**WhatsApp.** The Website links to our WhatsApp number. Clicking the link only opens WhatsApp; nothing is sent until you write to us. When you message us on WhatsApp, we receive your phone number, your profile name and your messages, and use them only to answer you and, where relevant, to prepare an engagement. WhatsApp is provided by WhatsApp Ireland Limited (Meta), which processes these data under its own terms and privacy policy. If you prefer, you can reach us by e-mail or through the form on the Website instead. Legal basis: steps you ask us to take before a possible engagement, and our legitimate interest in answering you (Article 6(1)(b) and (f) GDPR). Conversations that do not lead to an engagement are deleted 12 months after the last message.

**Advertisements.** We advertise in Google search results. When you click one of our ads, the address of the page you land on contains the name of the ad campaign (for example “utm_campaign=trademarks”). The Website does not store it and does not report your visit back to Google. Only if you then send us a question, book a meeting or request a download yourself do we note that campaign name with your request, so that we know which campaigns are useful. Legal basis: our legitimate interest in evaluating our advertising (Article 6(1)(f) GDPR). Google handles the click on its own ad under its own privacy policy; we do not use Google’s conversion tracking, remarketing or lead forms.

**Academy downloads.** When you request a guide or report from the Academy, we receive your e-mail address, your name if you give it, the download you asked for, your language, whether you would like our updates, and when you downloaded the file. We use these data to e-mail you the download link (valid for 7 days) and, only if you ticked the box, to send you news about related guides, courses and events, at most once a month. Legal basis: providing the download you asked for (Article 6(1)(b) GDPR) and, for the updates, your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by writing to info\@pitch.law. Requests are deleted 24 months after your last request; if you asked for updates, we keep your address until you withdraw your consent.

**Academy courses and accounts.** To follow a course, you create an account with your name, your e-mail address and a password. We store your password only in a protected (hashed) form that we cannot read. We also keep your language, your choice about our updates, the courses you enrolled in and the lessons you completed. While you are signed in, your browser keeps one cookie (\_\_Host-academy) that holds only a random sign-in code; it is strictly necessary to keep you signed in, is used for nothing else, and expires after 30 days or when you sign out. To protect accounts, failed sign-in attempts are recorded for at most one day. Legal basis: providing the account and courses you asked for (Article 6(1)(b) GDPR), your consent for the updates (Article 6(1)(a) GDPR) and our legitimate interest in secure accounts (Article 6(1)(f) GDPR). You can delete your account yourself at any time under “My account”; this removes your account, your progress and your download requests. Accounts that are never confirmed are deleted after 7 days. The Academy’s data are stored by Cloudflare within the European Union; its e-mails are sent through Microsoft 365. The bot check described above also protects the Academy forms.

**Service providers.** Cloudflare, Inc., Microsoft Corporation and DigitalOcean, LLC process these data on our behalf, as processors (see the overview in section 3). We have chosen data centres in the European Union for each of them. Because these providers have a parent company in the United States, data may exceptionally be accessed from outside the European Economic Area, for example for support or security; this then happens under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Meetings in Microsoft Teams

**Recordings and transcripts.** We record and transcribe our meetings in Microsoft Teams (meetings with clients, internal meetings and webinars) to keep an accurate file. The organiser can switch recording off for a meeting. When recording or transcription is on, Teams shows every participant a notice, and the meeting invitation says so too. Recordings and transcripts are stored in Microsoft 365, in the organiser’s OneDrive, and are deleted automatically after 120 days. We keep a summary of the meeting in the file of the matter it concerns, for as long as the rest of that file (section 3, “Data storage”). Legal basis: for a meeting about an engagement, the performance of that engagement (Article 6(1)(b) GDPR), and for every meeting, our legitimate interest in an accurate file (Article 6(1)(f) GDPR). Microsoft processes the recordings and transcripts on our behalf, as processor (see section 3). Your rights in section 5 apply here too, including the right to object.

Social media links

The Website has incorporated a link to the Instagram, LinkedIn and Youtube social media accounts which are accessible by clicking the corresponding buttons. You accept and understand that by clicking those links certain account information might be processed by that particular platform and is provided to us.  

### 3. Our measures to protect your privacy

Transfer of your personal data to third parties

Unless we are legally obliged to do so, we will not transfer any of your personal data to third parties without your explicit consent.  

Technical measures to protect your privacy

We take reasonable steps to protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.  

However, you expressly acknowledge and accept that - in general - the transmission of information through the internet is never completely secure, private or confidential. Therefore, any information sent or received from the Website may be intercepted, decrypted, accessed and/or used by public authorities and/or third parties via email or by using any of the services provided by us, even if technology is used which encrypts such information exchanges.

Data storage

Unless longer statutory retention periods apply, your personal data which is processed by us will be automatically removed within the following time limits:

- Personal data processed following your visit of the Website: 2 months;
- Personal data processed following the completion of a contact form: 12 months;  
- Academy download requests: 24 months after your last request, or until you withdraw your consent to updates; Academy accounts: until you delete your account (section 2);
- Recordings and transcripts of Teams meetings: 120 days; the summary of a meeting: as long as the file of the matter it concerns (section 2).

Security

We maintain strict policies and security measures to ensure that visitor information in our computer systems and files is protected. Our employees only have access to visitor information they would need to perform their jobs and provide a service to you. All employees are obliged to respect the privacy of visitors.

We make every effort to keep our servers, applications and databases secure and free from unauthorized access and use, using physical, administrative and technological measures to maintain the protection of this information.

Service providers

To run our Website and provide our services, we use a small number of technical service providers. Each of them acts as our processor and is bound to protect your personal data with appropriate technical and organisational measures. These are all the processors we use:

- **Cloudflare** (data stored in the European Union): hosting and security of the Website, visitor statistics, the bot check, and storage of the questions you send through the Website, the Academy’s data and our backups.
- **Microsoft 365** (European Union): our e-mail, calendar and meeting bookings, and the recordings and transcripts of our Teams meetings.
- **DigitalOcean** (data centres in Amsterdam, the Netherlands, and Frankfurt, Germany): the servers on which our own systems run.

If you contact us on WhatsApp, WhatsApp Ireland Limited (Meta) also processes your messages, under its own responsibility (see section 2).

### 4. Cookies

When you browse the Website, no personal data about you is collected: it uses no tracking cookies, pixels or similar technologies, builds no profile of you and stores nothing on your device. That is why it shows no cookie banner: there is nothing to consent to. Personal data only reaches us when you choose to send us a question, book a meeting, request an Academy download or create an Academy account (section 2). The only cookie the Website can set is the Academy sign-in cookie, and only once you sign in (section 2). Visitor statistics are counted without cookies, as described in section 2.

If this ever changes, we will update this policy first and ask for your consent where the law requires it.

### 5. Your rights

In this paragraph we will explain to you what rights you have in accordance with the GDPR and how you can exercise them.

You have the right to object to any processing of your personal data:

- Requesting access and inspection of the personal data processed;

* To request the correction, deletion or restriction of personal data;
* To oppose the (automated) processing;
* To withdraw your prior consent to certain processing activities;

You can exercise your rights as follows:

1\. **in writing**: by sending a letter to the addresses mentioned in the first paragraph, stating the rights you wish to exercise, and with a copy of your identity card (front and back); and

2\. **electronically**: by sending an email to <info@pitch.law>, stating the rights you wish to exercise, and with a copy of your identity card (front and back).

If you request an overview of your personal data gathered by us, we will provide you with a PDF document within a reasonable timeframe.

In certain cases we may refuse your request in whole or in part due to, amongst other things, but not limited to, the applicable statutory retention periods. We will always justify this refusal with an explanation of the reason.

Your data will be kept for at least the period required by law. Unless you request us to delete your personal data or if we are legally obliged to do so, your personal data will be automatically deleted after the data storage periods as mentioned above.  

### 6. Contacting us and complaints

You will be able to contact us by sending emails <info@pitch.law>. By doing so, naturally, you consent that all data incorporated in such email is processed by us. We will only process your personal data in order to provide you with an answer to your enquiry.  

If you have a complaint about the way in which we process or store your data, please do not hesitate to contact us by sending an e-mail info\@pitch.law. If possible, we will be happy to solve such issues.  

Please be advised that you can always lodge a complaint with the Belgian Data Protection Authority Drukpersstraat 35, 1000 Brussels.

### 7. Changes

This privacy policy might be revised from time to time.

Any such changes will be posted on our Website and, where appropriate we will inform you by email on such changes. We encourage you to review the Privacy Policy when you visit the Website to keep up to date with our processing activities and ways in which we can protect your privacy.

## Legal

- [Terms & Conditions Pitch BV](https://pitch.law/terms-and-conditions-pitch-bv)
- [Terms & Conditions Pitch Patents BV](https://pitch.law/terms-and-conditions-pitch-patents)
- [Website terms](https://pitch.law/terms-and-conditions-pitch-law)