Last updated: 01/07/2026

AML MONACO ADVISORY, a limited liability company with a share capital of EUR 30.200, whose registered office is located at Gildo Pastor Center, A, 7 rue du Gabian, 98000 Monaco, registered with the Monaco Trade and Industry Registry under number 16S07174, trading under the name “Harpers Legal”, hereinafter the “Firm”, undertakes to implement all necessary measures to ensure that personal data is processed in compliance with the applicable regulations, in particular Law No. 1.565 of 3 December 2024 on the protection of personal data in the Principality of Monaco.

By using the website www.harpers-legal.mc (the “Site”), you accept this privacy policy (the “Policy”). The purpose of this Policy is to set out the terms and conditions governing the processing of your data in connection with your use of the Site.

The Firm reserves the right to amend this Policy at any time. If a change is made, we undertake to publish the new version on the Site, indicating the latest update date. You are therefore responsible for checking the Site regularly in order to remain informed of any changes.

Data Controller

The data controller is :

AML MONACO ADVISORY SARL
Harpers Legal
Represented by Mr Patricio Gimenez, Managing Partner
Gildo Pastor Center, A, 7 Rue du Gabian
98000 MONACO

+377 93 30 00 07
contact@harpers-legal.mc

Data collected

Within the meaning of Law No. 1.565 of 3 December 2024 on the protection of personal data, personal data means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

The Firm undertakes to collect and process only the data that is strictly necessary for the purposes for which it is collected, in accordance with the principle of data minimisation provided for by Law No. 1.565 of 3 December 2024.

Data collected directly from you

When you use the contact form available on the Site, the Firm collects:

  • your first name and surname;
  • your email address;
  • the subject of your message;
  • the content of your message.

This data is processed on the basis of the Firm’s legitimate interest in responding to requests addressed to it and, where applicable, in taking the necessary pre-contractual steps following your request.

This data is retained for a period of three years from your last interaction with the Firm. At the end of this period, it is deleted or anonymised, unless a legal obligation requires it to be retained for a longer period or unless a contractual relationship has been entered into between you and the Firm, in which case the retention rules specific to that relationship shall apply.

Data collected automatically

When you browse the Site, the Firm may automatically collect certain technical data, including your IP address, the type and version of your browser, your preferred language, the pages visited and your browsing path.

This data is collected solely for the purpose of facilitating browsing on the Site and optimising its features.

Use of cookies

Among the technologies used to operate the Site efficiently and in an appropriate manner and to carry out the automatic collection referred to above, the Firm uses cookies, which are data files downloaded to your device when you access the Site. They are a means of recognising you and remembering your preferences. In order to offer services adapted to your device (computer, mobile or tablet), the cookies used by the Firm are intended for:

  • collecting information relating to your browsing;
  • analysing Site traffic and use.

The use of this technology enables the Firm to process statistics and traffic information, always with the aim of improving the service and your user experience.

Types of cookies used

The Site uses:

  • session cookies, which record technical information when browsing from one page to another and disappear as soon as you leave the Site;
  • functionality cookies, which make it possible in particular to recognise you when you visit the Site again and to adapt it accordingly. These are persistent cookies that remain on your device until their lifespan expires or until they are deleted using your browser settings.

Consent and deletion of cookies

In accordance with the legislation in force, users may accept, refuse or configure the use of cookies placed while browsing the Site.

When you first visit the Site, an information banner allows you to accept, refuse or customise the use of cookies according to their purposes. You may withdraw your consent or change your cookie preferences at any time.

Most internet browsers also allow you to manage cookies directly from their settings. You may therefore choose to disable all or some cookies, systematically refuse their placement, or delete cookies already stored on your device.

The configuration of each browser is described in its help menu. Generally, you should refer to the “Settings” tab, then the “Options” or “Preferences” menu:

  • Firefox: at the top of the browser window, click the Firefox button, then go to the “Options” tab. Click the “Privacy” tab. Set the retention rules to “use custom settings for history”. Finally, uncheck the relevant box to disable cookies.
  • Safari: click the menu icon at the top right of the browser (represented by a cogwheel). Select “Settings”. Click “Show advanced settings”. In the “Privacy” section, click “Content settings”. In the “Cookies” section, you can choose to block cookies.
  • Chrome: click the menu icon at the top right of the browser (represented by three horizontal lines). Select “Settings”. Click “Show advanced settings”. In the “Privacy” section, click “Preferences”. In the “Privacy” tab, you can choose to block cookies.
  • Microsoft Edge: “Settings” menu > “Cookies and site permissions”.

Refusing or deleting certain cookies may, however, affect the operation of the Site or limit access to certain features, without the Firm being held liable in this respect.

In addition, when a user refuses the placement of cookies, a refusal cookie may be installed on their device in order to keep a record of this choice. If this cookie is deleted, or if the user changes browser or device, their preferences will need to be expressed again.

Unless you configure your settings otherwise or withdraw your consent, continuing to browse the Site after the cookie information banner has been displayed constitutes consent to the use of cookies in accordance with this Policy.

Data retention

The Firm retains personal data only for as long as is strictly necessary to fulfil the purposes for which it was collected and processed, in accordance with the applicable Monegasque regulations on the protection of personal data.

At the end of this period, the data may be archived for an additional period where its retention is necessary for the establishment, exercise or defense of legal claims, or in order to comply with a legal, regulatory or professional obligation to which the Firm is subject, in particular with regard to the obligations applicable to legal advisory firms and regulated professions.

Data collected through cookies and other trackers is retained for a maximum period of thirteen (13) months from the date on which it is placed on the user’s device, unless it is deleted earlier by the user or consent is withdrawn under the conditions set out in this Policy.

With regard to applications submitted through the Site, the Firm retains application files (CV and cover letter) for a maximum period of two (2) years for future recruitment purposes, unless the candidate expressly requests the destruction of their file.

Upon expiry of the applicable retention periods, personal data is securely deleted or anonymised.

Data security

Personal data is hosted and processed within the European Economic Area and/or in Monaco.

In the event of a transfer of data to a State that does not ensure an adequate level of protection within the meaning of the applicable regulations, the Firm undertakes to implement the appropriate safeguards required to ensure the confidentiality and security of the transferred data.

The Firm implements all appropriate technical and organisational measures to ensure a level of security appropriate to the risks affecting personal data, in particular to prevent any unauthorised destruction, loss, alteration, disclosure or access.

Disclosure of personal data

Personal data collected and processed by the Firm through the Site is intended exclusively for authorised persons within the Firm, strictly within the limits of their respective duties and subject to an enhanced confidentiality obligation.

The Firm may also be required to disclose certain data to technical or service providers acting on its behalf (including in relation to hosting, IT maintenance, information systems security or Site management), solely to the extent necessary for the performance of the purposes described in this Privacy Policy. These providers act as processors and are contractually required to respect the confidentiality, security and integrity of the personal data processed, in accordance with the applicable regulations.

Personal data may also be disclosed to the competent administrative, judicial or regulatory authorities where such disclosure is required pursuant to a legal or regulatory obligation or an enforceable court decision. In such a case, and unless prohibited by law or regulation, the Firm shall endeavour to inform the data subject in advance.

Your rights as a data subject

Data subjects whose data is processed have the following rights:

  • Right to be informed;
  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to data portability;
  • Rights relating to automated decision-making and profiling;
  • Right to object.

They also have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data where the legal basis for such processing is Harpers Legal’s legitimate interest.

They have the right to lodge a complaint with the Personal Data Protection Authority (APDP, Le Concorde, 4th floor, 11 rue du Gabian, 98000 MONACO).

You may exercise all of these rights by contacting us:

By post: AML MONACO ADVISORY SARL, Harpers Legal, Gildo Pastor Center, 7 rue du Gabian, 98000 Monaco,

By email: see the form at the bottom of this page.

Applicable law and competent jurisdiction

This Privacy Policy is governed by Monegasque law. Any dispute relating to its interpretation, validity, performance or, more generally, to the use of the Site and the processing of personal data carried out on it, shall fall within the exclusive jurisdiction of the courts of the Principality of Monaco.