LEXFORGE

Privacy Policy

We collect the minimum needed to run LexForge (SyncLex OÜ). This page explains what we process and why.

Valid from: 7 April 2026

1. Data Controller

Company: SyncLex OÜ

Registry Code: 17476899

Email: contact@lexforge.ee

SyncLex OÜ is the data controller responsible for processing your personal data as described in this Privacy Policy.

2. Sources and Categories of Data

We process the following categories of personal data:

Account Data: When you create an account, we collect your email address. This is necessary for the performance of our contract with you (providing account-based features such as hearing tracking and notifications).

Usage Data: We may collect technical information such as your IP address, browser type, device identifiers, pages visited, and interaction patterns. This data is collected through standard server logs and analytics tools.

Court hearing schedule data: See Section 3 for how we process publicly available court hearing information displayed on the Service.

Communication Data: If you contact us by email or through the Service, we process the content of your communications to respond to your inquiry.

3. Court Hearing Schedule Data

The Service displays court hearing schedule information sourced from publicly available registries maintained by the Republic of Estonia, including court information published on riigiteataja.ee. This information is made available to the public by law under the Estonian Public Information Act and the Courts Act.

We collect, process, and store this data to provide the Service — including hearing tracking, status change notifications, judge analytics, and statistical overviews. Our legal basis for this processing is legitimate interest (GDPR Art. 6(1)(f)). We have a legitimate interest in making publicly available legal information accessible in a structured, usable format. We have conducted a Legitimate Interest Assessment and concluded that this interest is not overridden by the interests of data subjects, given that the underlying data is already published by the state in the public interest and relates to the exercise of public judicial functions.

The categories of personal data involved include the names of judges, case reference numbers, hearing dates, times, courtrooms, and procedural status. Party names, where they appear in public hearing schedules, may also be processed.

Because this data is obtained from public sources rather than directly from data subjects, we rely on the exemption under GDPR Art. 14(5)(b) — providing individual notice to every data subject whose name appears in public court records would involve disproportionate effort. In place of individual notice, this Privacy Policy serves as the transparency mechanism required under Art. 14.

Data subjects whose personal data appears in court hearing information displayed on the Service may request redaction at any time by contacting contact@lexforge.ee. We will process such requests within 30 days and replace the relevant data with anonymised placeholders.

4. Legal Basis for Processing

We process personal data based on the following legal grounds under Article 6(1) GDPR:

(a) Performance of a contract (Art. 6(1)(b)): Processing your email address and account data is necessary to provide you with the Service, including hearing tracking, notifications, and AI-assisted features.

(b) Legitimate interest (Art. 6(1)(f)): For court hearing schedule data, see Section 3. We also rely on legitimate interest for processing usage data to maintain, secure, and improve the Service.

(c) Consent (Art. 6(1)(a)): Where required, such as for optional marketing communications, we obtain your explicit consent prior to processing.

5. Purpose of Processing

We process personal data for the following purposes: providing and maintaining the Service, including account management, hearing tracking, email notifications when hearing statuses change, and AI-assisted inquiry features; displaying publicly available court hearing schedules in an accessible format; generating anonymised and aggregated statistical information about court hearings; communicating with you regarding your account or inquiries; ensuring the security, integrity, and proper functioning of the Service; and complying with applicable legal obligations.

6. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers who process data on our behalf (e.g., email delivery services, hosting providers), subject to appropriate data processing agreements.

We may also disclose data if required by law, regulation, or court order.

Any transfers of personal data outside the European Economic Area (EEA) are made in compliance with GDPR Chapter V, using appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention

Account Data is retained for as long as your account remains active. Upon account deletion, your personal data will be erased within 30 days, unless retention is required by law.

Court hearing schedule information displayed on the Service mirrors the data available in the public registry. When data is removed or updated in the source registry, the corresponding data on our Service is updated or removed accordingly.

Usage data and server logs are retained for a maximum of 12 months and are subsequently deleted or anonymised.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to your personal data:

Right of Access (Art. 15): You may request confirmation as to whether your personal data is being processed and, if so, access to such data.

Right to Rectification (Art. 16): You may request correction of inaccurate personal data.

Right to Erasure (Art. 17): You may request deletion of your personal data where there is no compelling reason for its continued processing. For redaction of data in court hearing schedules, see Sections 3 and 9.

Right to Restriction (Art. 18): You may request restriction of processing in certain circumstances.

Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Art. 21): You may object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@lexforge.ee. We will respond to your request within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.

9. Redaction of Court Hearing Data

If you are a party to court proceedings and your personal data appears in the hearing schedule information displayed on our Service, you have the right to request redaction of your data, as described in Section 3.

Upon receiving a valid request, we will replace your personal data with anonymised placeholders within 30 days.

Redaction requests can be submitted by emailing contact@lexforge.ee with sufficient information to identify the relevant records.

10. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, regular security reviews, and secure data storage practices.

11. Cookies and Tracking Technologies

The Service may use essential cookies that are strictly necessary for the operation of the website (e.g., session management, authentication).

We may also use analytics cookies to understand how users interact with the Service. You can manage cookie preferences through your browser settings. For more information, you may refer to our cookie banner presented upon first visit.

12. Automated Decision-Making

The Service includes AI-assisted features that allow users to ask questions about court hearings. These features provide informational responses only and do not constitute legal advice.

No decisions producing legal effects concerning you are made solely on the basis of automated processing.

13. Children’s Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

If we become aware that we have collected data from a child without appropriate parental consent, we will delete it promptly.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

15. Contact

SyncLex OÜ

Registry Code: 17476899

Email: contact@lexforge.ee

16. Online dispute resolution (EU)

The European Commission provides an online dispute resolution platform available at https://ec.europa.eu/consumers/odr/.