Data Protection and Privacy

Our Services

Personal data must be processed in accordance with both Azerbaijani law and the EU General Data Protection Regulation (GDPR). Compliance is particularly important for businesses operating in the EU market, offering goods or services to individuals in the EU, or working with EU-based partners.

Our Services

• Legal audits of personal data processing activities
• Drafting privacy policies, consent forms and internal data protection policies
• Developing and implementing GDPR compliance programmes
• Drafting data processing agreements (DPAs) and data protection arrangements with business partners
• Advising on the legal requirements for cross-border transfers of personal data
• Advising on the legal steps to take in the event of a personal data breach

Our Approach

Our team includes a CIPP/E-certified professional. We translate data protection requirements into practical business processes, helping you mitigate legal risks while avoiding unnecessary administrative burdens.

Preparing for your consultation

If you attach the documents you have to your request, your lawyer will review them before the meeting:

• Your current privacy policy, consent forms and internal rules
• A short description of what data you collect and where you store it
• Contracts with partners and service providers you share data with
• If data is transferred abroad: to which countries and on what basis
• In case of a data breach or complaint: a description of the incident, its date and the correspondence
• If you are contacting us as an individual: correspondence and screenshots showing how your rights were breached

You can still contact us if you do not have all of them. We will identify what is missing together.