Last updated: 05.01.2026
This privacy policy applies when you:
- visit the voltlegal.com website;
- visit or use our social media accounts (for example LinkedIn, Instagram, Facebook, Tiktok);
- read the materials, articles or other information we publish;
- contact us, book a consultation, enter into a legal services agreement with us, or use our services;
- communicate with us by telephone, email, the website, messaging applications or social media;
- supply goods to us, provide services to us, or work with us as a consultant, lawyer, partner or other representative;
- register for our events, subscribe to our newsletter, or submit an application relating to collaboration or a job;
- take part in other similar situations connected with legal services and the activities of a law firm.
1. Who we are
The controller of your personal data is Dzhani Consult OÜ, registry code 14080907, address Liikuri 41/3, Tallinn, Estonia (hereinafter “VoltLegal”, “we” or “us”).
We operate the website and social media accounts, provide legal services, carry out day-to-day operations and comply with our legal obligations. In these situations we generally act as the controller of your personal data.
2. What personal data we process
We may receive and process your personal data in the following ways:
- when you provide the data to us yourself — for example when entering into an agreement, using our services, attending an event, sending an enquiry through the website, or contacting us by email, telephone or a messaging application, or subscribing to the newsletter;
- when data is collected automatically through the use of the website or social media accounts — for example IP address, website visit data, chosen settings, opened links, and technical information about your browser or device;
- when data reaches us from third parties — for example public registers, state or local authorities, partners, payment institutions or other persons, where this is connected with providing a service or fulfilling our obligations;
- when your data is passed to us by your representatives, relatives, acquaintances, employer, a company that is our client, or other persons — for example as the details of an authorised contact person.
If you provide us with the personal data of other people, you are responsible for the accuracy of that data, for keeping it up to date, and for having a legal basis to disclose it. Where necessary, we may ask for confirmation that you are entitled to share that data. If the relevant person submits a request to us regarding their data, we may disclose to them from whom we received it.
Where processing is based on your consent, you have the right to refuse to give consent or to withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
In certain cases we may send you notices relating to the provision of a service, or call you — for example to clarify an enquiry, arrange a consultation, or provide information about a matter. Such notices are necessary for providing the service and are not advertising messages.
We publish information about our activities on our social media accounts. When using social media, the privacy terms of the relevant platforms apply in addition to this policy. Depending on your privacy settings, we may see your account data, and information you publish may be visible to others.
When providing personal data, you are responsible for its accuracy and for keeping it up to date. You may ask us to correct or update your data. In some cases we may ask you to confirm that the data we hold is still correct.
3. How and on what principles we use data
We collect and process only such personal data as is necessary to achieve specific and legitimate purposes.
When processing personal data, we:
- comply with applicable law, including the General Data Protection Regulation (GDPR);
- process data lawfully, fairly and transparently;
- collect data for specified, clear and lawful purposes and do not use it in a manner incompatible with those purposes, except where permitted by law;
- take reasonable measures to correct, complete, erase or stop processing inaccurate or incomplete data;
- store data in a form that permits identification only for as long as is necessary for the purposes of processing;
- do not transfer or disclose data to third parties other than as described in this policy or as permitted by law;
- use reasonable organisational and technical measures to protect personal data.
4. To whom and when we disclose personal data
We may disclose personal data only in the cases described in this policy, in particular to:
- our partners and consultants, including auditors, lawyers, advocates, tax advisers, accountants, IT service providers, and archiving, insurance, payment, advertising and marketing service providers, where this is necessary for our activities or for providing services;
- service providers and platforms that help us operate the website, contact forms, consultation booking, communication, analytics or social media — including, for example, WordPress, our website contact form, Calendly and the relevant social media platforms, where these are actually used;
- the operators of social media platforms, where you interact with our content or publish information on our accounts;
- state and local authorities, law-enforcement and investigative bodies, courts, dispute-resolution bodies and other persons performing duties under the law;
- legal-services or related partners operating in other countries, where this is necessary to carry out a client engagement;
- payment institutions and other third parties, where this is connected with a payment, a contract, the protection of rights or statutory obligations;
- companies that cooperate with us or are affiliated with us, where there is a legitimate purpose for the transfer.
As a rule, we process personal data within the European Economic Area. Where, in individual cases, data is transferred outside the European Economic Area, such transfer takes place only on the grounds provided for in the GDPR and where appropriate safeguards are in place.
5. What rights you have
As a data subject, you have the following rights in relation to your personal data, subject to the conditions and limitations arising from the GDPR and applicable law:
- the right to be informed — to receive clear and understandable information about how your data is processed;
- the right of access — to request confirmation of processing, a copy of the data, the purposes of processing, the legal bases, the categories of data, the sources, retention periods, recipients, and information about any transfer of data outside the EEA;
- the right to rectification — to request the correction of inaccurate or incomplete data;
- the right to erasure — to request the deletion of data where it is no longer needed, consent has been withdrawn, the data has been processed unlawfully, or another applicable ground exists;
- the right to restriction of processing — to request the temporary restriction of processing, for example where you contest the accuracy of the data, object to processing, or need the data for legal claims;
- the right to data portability — to receive the data you have provided in a structured format, where the data is processed by automated means on the basis of consent or a contract;
- the right to object — to object to processing carried out on the basis of legitimate interest, as well as to direct marketing where it is used;
- the right to withdraw consent — where processing is based on consent.
These rights may be exercised to the extent that doing so does not harm the rights and freedoms of others, our legitimate interests, professional secrecy requirements, data retention obligations or other statutory limitations. For example, we may be obliged to retain certain data to protect rights, to perform a contract, or to comply with accounting or other legal obligations.
A request relating to personal data can be sent to georgi@voltlegal.com. To verify your identity and understand the request accurately, we may ask for additional information, a signed request, an electronic signature, or an identity document. In some cases we may ask you to submit the request in writing.
We respond to requests without undue delay and, as a rule, within one month of receiving the request. Where a request is complex or there are many requests, the deadline may be extended by a further two months. In that case we will inform you of the extension and its reasons within one month of receiving the request. As a rule, we respond to requests free of charge, but we may charge a reasonable fee for manifestly unfounded, repetitive or excessive requests.
6. Cookies and other tracking technologies
Cookies are small text files stored in your device’s browser in accordance with your browser settings. In this policy, we also understand “cookies” to include similar technologies such as pixels, web beacons and other comparable tools.
Cookies help ensure the website functions, improve its functionality, remember user preferences, analyse traffic, connect the website with social media and, where necessary, provide personalised or general advertising.
You can enable or disable non-essential cookies through the cookie notice bar, the website settings, or your browser settings. On a mobile device, cookies are managed according to the instructions of the relevant device or browser. If cookies are disabled, some website functions may work more slowly, incorrectly, or be unavailable.
We may use necessary cookies, analytical cookies, functional cookies, performance cookies, third-party cookies and advertising cookies, where the relevant tools are actually used on the website and this is permitted under applicable law.
7. Final provisions
If you have any questions about this policy, please contact us:
- by email: georgi@voltlegal.com;
If you wish to make a complaint about the processing of personal data, please do so in writing and include as much relevant information as possible. We will cooperate with you and aim to resolve the matter without undue delay.
If you consider that your rights under the GDPR have been infringed, you may contact the Estonian supervisory authority, the Data Protection Inspectorate (Andmekaitse Inspektsioon). Further information is available at aki.ee. We would ask, however, that you contact us first so that we can resolve the matter quickly and amicably.
All questions relating to this privacy policy are governed by the law of the Republic of Estonia. Disputes are resolved in Harju County Court, unless applicable law provides for another mandatory jurisdiction.
We have the right to amend this privacy policy. The updated version will be published on the website or communicated by other usual means of communication. Changes take effect from the update date indicated in the policy, unless another effective date is specified.
If you continue to use the website, enter into a contract with us, order services, use our social media accounts or contact us after the privacy policy has been amended, you are deemed to have reviewed the updated policy.