GDPR & data
GDPR and data protection lawyer in Luxembourg
The firm guides your GDPR compliance: records of processing activities, privacy policies, data processing agreements (DPAs) and dealings with the CNPD.
Legal content reviewed by Maître Cora Maglo, Avocate à la Cour, Liste I du Barreau de Luxembourg depuis 2009.
The GDPR applies to any organisation processing personal data. In Luxembourg, the supervisory authority is the CNPD.
The firm turns a complex regulatory obligation into a clear approach, proportionate to your activity.
The need
Websites, customer files, HR and marketing tools: most businesses process personal data without any formal framework.
Information notices, the record of processing and contracts with service providers are often missing.
The risk
The GDPR provides for fines that can reach very high amounts, together with a reputational risk in the event of a data breach.
The absence of a legal basis or of valid information makes a processing activity unlawful.
How the firm helps
Mapping of your processing activities, drafting of the record of processing, privacy policies and data processing clauses, and support in the event of an inspection.
The firm prioritises actions according to your real level of risk. Our digital tools only help gather and qualify information; the legal analysis is provided by a lawyer admitted to the Luxembourg Bar.
Practice areas
When to call on the firm
- Bringing your website and files into GDPR compliance.
- Drafting a privacy policy and information notices.
- Framing the relationship with a processor (DPA).
- Handling a data subject request or a CNPD inspection.
Method
Our engagement process
- 1
Information intake
You describe your need via a structured form or an initial call. Our digital tools serve only to organise this information and save time.
- 2
Lawyer qualification
Maître Maglo reviews your situation, identifies the legal issues and confirms the feasibility and exact scope of the engagement.
- 3
Transparent quote
You receive a clear fee proposal, a fixed fee or a range, before any engagement. Nothing is billed without your approval.
- 4
Legal work
The firm drafts, negotiates or litigates as required. Every deliverable is designed and approved by a lawyer admitted to the Luxembourg Bar.
- 5
Tracking and delivery
You follow your matter transparently and receive your finalised documents with the explanations you need.
Documents required
- • A description of your processing activities and tools
- • Existing policies and notices
- • Contracts with your service providers
Deliverables
- • A record of processing activities
- • A privacy policy and information notices
- • Data processing clauses (DPA)
Indicative timing
Basic compliance can be achieved within a few weeks, depending on the scope.
Fixed fee or ongoing support
Depending on the scope (audit, documentation, ongoing support), costed in advance, from EUR 1,500.
FAQ
Frequently asked questions
Does the GDPR apply to my small business?
Yes, the GDPR applies to your small business as soon as you process personal data (customers, employees, prospects), whatever your size.
Do I need to appoint a DPO?
Appointing a data protection officer is only mandatory in certain cases. The firm tells you whether a DPO is required for your organisation.
Who enforces the GDPR in Luxembourg?
The GDPR is enforced in Luxembourg by the Commission nationale pour la protection des donnees (CNPD), the competent supervisory authority.
Member of
Affiliations & réseaux professionnels
Free guide · PDF
The practical guide to secure your next step
Checklists, key steps and points to watch, prepared by the firm. Get it instantly, no strings attached.
- The key steps, explained simply
- The documents to prepare
- The common mistakes to avoid
Free diagnostic
A compliance review? Take stock in 2 minutes.
A few questions are enough to identify your need and the right legal answer, with no sign-up and no commitment.
Choosing Cerno means choosing over 17 years of experience
- 2013
- independent firm
- 2009
- at the Bar since 2009
- 7
- working languages
- 100+
- companies & SOPARFI structured
- 200+
- visas & residence permits obtained
- 170
- client nationalities served
- 300+
- due diligence reviews conducted
Around twenty M&A transactions supported · one of the best visa approval rates in Luxembourg.
Since 2009, we devote our expertise to your satisfaction: more than 85% of our clients renew their trust in us.
Our work
Representative matters, anonymised
Typical examples of engagements handled by the firm, presented in an anonymised and illustrative manner. Each matter is handled and validated by a lawyer registered with the Luxembourg Bar.
A holding company and a residence permit, in a single process
Incorporation of a SOPARFI for a non-resident investor, combined with obtaining their residence permit. A single point of contact across both fronts.
Permit obtained in 6 weeksA similar matter? Companies & governanceFounders protected before the funding round
Structuring a shareholders’ agreement and governance for a young company with several founders, ahead of a funding round.
Shareholders’ agreement signed before the roundA similar matter? Debt recoveryA debt recovered across borders
Cross-border recovery of unpaid debts for an SME, through an order for payment and coordination with a foreign colleague.
Receivable recovered in full (100%)A similar matter? Employment lawAn executive defended before the Labour Tribunal
Supporting an executive in a contested dismissal, from strategy to representation at the hearing.
Case argued at the hearingA similar matter? ContractsA secured international distribution
Negotiating and securing an international framework distribution agreement, from liabilities through to the competent jurisdiction.
Competent jurisdiction securedA similar matter?Typical, anonymised examples, for illustration only. They do not prejudge the outcome of a matter, which depends on each situation.
Entrust my matter to the firmExpertise & authority
Ongoing review and analysis of Luxembourg and European case law
Avocate à la Cour, List I of the Luxembourg Bar since 2009
Trained at the London School of Economics, formerly at Clifford Chance and Bonn Steichen & Partners
Member of international networks: EILN, AEA, Cross Border Advisory Solutions
Every matter handled and approved by a lawyer admitted to the Bar
Support in 7 languages, clients of 170 nationalities
Testimonials
What our clients say
Had a consultation with Me Cora Maglo about my Luxembourg Blue Card application. She explained everything clearly: the process, timeline and documents I need, and helped me with my wife’s family reunification too. Honest and practical advice. I felt confident after talking to her.Farshid Pourlatifi
J’ai beaucoup apprécié le service de Maître Maglo : son sérieux, sa sympathie, son professionnalisme et sa disponibilité. Toujours répondu rapidement et clairement, avec des conseils pragmatiques, sans pousser à des procédures longues et coûteuses lorsqu’elles ne sont pas justifiées.Nathan Wirtzfeld
Super assistance and great support! Highly recommend. All my questions were answered, Cora and her team kept me updated all the time. I will definitely reach out to them next time for my residency.Tatiana
They talk about us
The firm referenced and cited
Professional directories, business press and legal publications where Cerno Law Firm and Maître Cora Maglo are referenced.
Let’s talk about your matter
Describe your situation: you receive an initial analysis and a transparent quote, with no obligation. One dedicated lawyer, from start to finish.