Privacy notices for forms

A short text, shown directly next to the consent box, immediately above or beside the submit button of every form (quote request, general contact, question about a portfolio project, careers application, newsletter). It does not replace the full Privacy Policy; it links to it. Native translation is mandatory for EN/KO, not automatic.

This source document was last updated: 5 September 2026.

---

1. The standard text (contact form / quote request)

Shown next to the mandatory consent box, which must be ticked manually (never pre-ticked) for the form to be submitted:

☐ I have read and agree that the data entered above may be processed by [TO BE COMPLETED the name of the operating entity] in order to respond to my enquiry. Find out more about what data we collect, how long we keep it and what your rights are in the Privacy Policy.

Below that box, on forms that also include the newsletter option, a second box appears, completely separate, not pre-ticked, optional; it cannot be combined with the first:

☐ I would also like to receive news and offers from Alucard Group by email (optional, you can unsubscribe at any time).

---

2. The text for the application form (careers page), if there is one

☐ I have read and agree that the data in my CV and application may be processed by [TO BE COMPLETED the name of the operating entity] in the recruitment process for the position applied for. Find out more in the Privacy Policy. [TO BE COMPLETED a specific retention period for applications, to be set separately if it differs from the general retention period for leads].

---

3. Additional text for the Korean (KO) version only, if the data transfer applies

If the data collected through the form on the Korean version is transferred outside South Korea (for example, to the infrastructure hosted in the EU), a third separate box is shown, distinct from the general consent above, in line with the requirement of Korean law (PIPA) for explicit and dedicated consent to international data transfers:

☐ [text in Korean, translated natively] I agree that my data may be transferred outside South Korea, to [TO BE COMPLETED the recipient location/entity], for the purpose of [TO BE COMPLETED the purpose of the transfer], for a period of [TO BE COMPLETED period].

[LAWYER VALIDATION by local Korean counsel]: confirmation of the exact wording and of whether this box is mandatory on the KO form, including whether it is needed separately from the general GDPR consent box; Korean law was amended substantially in 2025-2026.

---

4. Implementation rules (for the technical and design team, not a legal decision)

• Consent boxes are never pre-ticked.
• The general consent box (Section 1) is mandatory; the form is not submitted without it, and that requirement is validated server-side too, not only through required in the HTML.
• The newsletter box (where it appears on the same form) is always optional and separate; it cannot be combined visually or technically with the mandatory box above.
• The link to the Privacy Policy opens in a new tab, so the visitor does not lose the data already entered in the form.
• The text is identical in substance on every page with a form (contact, quote, portfolio, careers), with minimal variation where the specific purpose of the form differs (for example, “the recruitment process” versus “your enquiry”).

---

What has to be completed before publication

Company details ([TO BE COMPLETED]), 4 markers:

1. The name of the operating entity shown in the consent text (Sections 1, 2)
2. The specific retention period for recruitment applications, if it differs from the general one for leads (Section 2)
3. The recipient location/entity, the purpose and the exact period of the data transfer, for the box dedicated to the Korean version (Section 3)
4. The native (not automatic) translation of the entire text into English and Korean, including the dedicated box in Section 3

Points for legal validation ([LAWYER VALIDATION]), 1 marker:

1. The exact wording and the mandatory character of the separate consent box for international data transfer on the KO version of the form, validated with local Korean PIPA counsel (Section 3)

Direct dependency on the Privacy Policy: this document works only as an extension of it; any change to the legal bases or to the operating entity in the Privacy Policy has to be reflected here the same day, otherwise a contradiction arises between what the user sees at the form and what the full policy says.