PROCESSING OF PERSONAL DATA: CLIENTS AND OTHER CONTACTS
In accordance with Lindahl law firm’s responsibilities, we respect your integrity and ensure that your personal data is processed with the confidentiality and respect that is required. This policy is addressed to you who we have a relationship with by our business, or to you, who represent an organization (existing, previous or potential client, supplier, or partner); has attended an event; has visited our web page; or in other ways has been in contact with us, e.g. as an employee at an authority.
Further information on how we process personal data is found below.
1. WHO IS THE PERSONAL DATA CONTROLLER?
Advokatfirman Lindahl KB, 916629-0834, Box 1065, 101 39 Stockholm, is the controller for the personal data that is processed in accordance with this policy.
2. TO WHOM DO YOU DIRECT YOUR QUESTIONS?
If you have any questions regarding how we process your personal data, please contact us at dataskydd@lindahl.se.
3. DOES LINDAHL LAW FIRM HAVE A DATA PROTECTION OFFICER?
We have designated a data protection officer. The data protection officer’s role is to monitor that we are compliant with current data protection legislation by for example collecting information about how Lindahl law firm processes personal data, performing controls, providing information and advice, and issuing recommendations. You can contact our data protection officer at dataskydd@lindahl.se or by mail: Data protection officer, Advokatfirman Lindahl KB, Box 1065, 101 39 Stockholm.
4. WHICH PERSONAL DATA DO WE COLLECT?
We collect and process all personal data that you share with us, for example when you send us an e-mail or sign up for an event. The sources from which we collect personal data are stated below, under “From where do we collect your personal data”.
Personal data that we process:
- Basic information such as your name, workplace and
- Contact information such as address, email address and phone
- Payment
- Technical information such as information about your visit at our web page or behavioral data relating to digital
- Information that you share relating to meetings or events, such as availability demands to our facilities or
- Identity documentation or background information that we have received from you or collected as a part of our client intake
- Personal data that has been provided to us from our clients, on behalf of our clients, or that has been prepared as a part of a matter, which can include sensitive personal
- Pictures taken at our seminars, events or similar
5. FROM WHERE DO WE COLLECT YOUR PERSONAL DATA?
We collect personal data about you and others:
- When we initiate a business relation or when we handle matters on behalf of our
- By our web
- Via e-mail sent to and from Lindahl law
- When you share information with us by contact with us at meetings, conversations, social media, events or by filling in online-forms.
We might also collect or receive information about you from other sources, such as:
- Public registers (i.e. SPAR)
- Bisnode Infotorg
- UC
- Bolagsverket (Swedish Companies Registration Office)
6. WHY DO WE PROCESS YOUR PERSONAL DATA?
We collect your personal data through different sources and for several purposes. Mainly, we collect your personal data by contacts with you, by our web page or regarding the matters we engage in. We process your personal data for the following purposes:
|
Purpose |
Lawfulness |
|
To analyze the use of our web page.
|
Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interest to provide and develop the web page https://www.lindahl.se. |
|
To defend our client´s legal interests.
|
Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interest to engage in matters relating to the legal services that we provide, and your, or the client’s, legitimate interests in the matter in which Lindahl law firm is engaged. |
|
To provide personal data at your request.
|
Processing is necessary for the purposes of the legitimate interests Your and Lindahl law firms legitimate interest of accommodating your request.
|
|
Marketing of our services e.g. by newsletters, social media, publications and events.
|
Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interests in the marketing of our services. |
|
To avoid conflicts of interest.
|
Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interest of avoiding conflicts of interest in accordance with the Swedish Bar Association Code of Conduct. |
|
To manage our relationship with you and our clients, and maintaining our contact lists.
|
The processing is necessary for the performance of a contract with you If there is a contract between you and Lindahl law firm. Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interest of manage the relationship with you or the organization that you represent. |
|
To comply with legal obligations.
|
Compliance with legal obligations E.g. to perform our responsibilities in accordance with the Anti-Money Laundering Act, the Accounting Act, etc.
|
|
To determine, claim or defend legal demands.
|
Processing is necessary for the purposes of the legitimate interests Lindahl law firm’s legitimate interest of the establishment, exercise or defense of legal claims.
|
Client matters
We process personal data regarding and in connection to assignments that we perform on behalf of our clients. We process identity documentation and background information as a part of our client intake process, administration and marketing. Such processing includes taking measures to prevent moneylaundering, avoid conflicts of interest, carry out honour and conduct trials and process credit data. We also process personal data that is shared with us by our clients throughout our performance of the client matter. Furthermore, personal data is shared with third parties to the extent such sharing is necessary for the performance of our assignments.
Marketing
If you want our mailings to you to cease, you can contact us at avregistrera@lindahl.se, or, when applicable, directly contact the office that sent the mailing. Please find contact information here: https://www.lindahl.se/se/kontor
The web page
We use different tools to review and keep statistics of visits and uses of the web page. This is carried out through cookies. You may at any time deny the use of cookies by changing your browser settings. However, this may affect your user experience. You can read more about our use of cookies here: https://www.lindahl.se/se/kampanjer/legal/cookies/.
When you use some parts of the web page, you might be asked to submit personal data, for example when signing up for an event. The purpose of the processing of personal data will in these situations be clear from the context and we use personal data that you submit only for that purpose.
7. FOR HOW LONG DO WE STORE YOUR PERSONAL DATA?
Client matters
Data processed as part of our performance of a client matter is stored for ten years or for such longer period required by the Swedish Bar Association Code of Conduct with regards to the nature of the client matter.
Marketing
We store your personal data to contact you for marketing purposes during a year from the date we collected your data or the date when we last used your data to contact you. You may at any time unsubscribe from our mailings. If you unsubscribe, you will no longer receive mailings.
Other
When we process personal data in other situations than the ones mentioned above, we store your personal data for as long as is necessary with regards to the context. For example, it can be situations when we are in contact with you via e-mail, when you participate in an event, when we provide information at your demand, when we process information from cookies, or due to a legal obligation.
8. TO WHOM MAY YOUR PERSONAL DATA BE DISCLOSED?
We might share your personal data with trusted recipients with whom we have an agreement ensuring that your personal data is processed in accordance with this policy. Personal data is shared with the following parties:
- Lindahl law firm’s offices at their respective locations for exchange of information and knowledge, resource allocation and the purposes that are stated under “How we use your personal data”.
- Other professional
- Suppliers of services such as support, word processing, translation or document
- IT-suppliers.
- Third parties as part of our performance of client matters, such as; courts, authorities, counterparties, counterparty counselors or suppliers of data rooms
- Third parties involved in the organization of events, such as hotels, organizers or lecturers.
- Third parties, when necessary due to a legal obligation. If we are obliged to disclose your personal data because of an injunction or such, we will inform you to the extent that we are not legally prevented from doing
- Social media, such as Instagram, Facebook, LinkedIn and Youtube. We kindly refer you to the policy of each provider for information on how they process personal
We do not transfer your personal data by selling your personal data or else make your personal data available for commercial purposes without your consent.
9. HOW DO WE PROTECT YOUR PERSONAL DATA?
We take several technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, change or erasure in accordance with the applicable data protection legislation. Such measures include, but are not limited to, shell protection, encryption, eligibility restrictions, policies, etc.
As a law firm we comply with – in addition to the legal requirements set out in the data protection legislation – the Swedish Bar Association Code of Conduct.
10. TO WHICH COUNTRIES DO WE TRANSFER YOUR PERSONAL DATA?
With the exception of what is explicitly stated below, we only process your personal data within the EU/EEA.
Some of Lindahl law firm’s IT-suppliers have their place of business in the USA. When personal data is shared with these suppliers, Lindahl law firm has ensured that the level of protection is equivalent to that applicable within the EU/EEA by the suppliers’ adherence to the framework EU-U.S. Privacy Shield, in accordance with article 45 in the GDPR. You can read more about the framework here.
As part of our performance of client matters, we may in individual cases need to transfer personal data to third countries. If we engage in such transfer, we ensure that the level of protection is equivalent to that applicable within the EU/EEA, either by ensuring that the country has an adequate level of protection, that we have taken adequate protective measures, that you have given your consent or that the transfer was necessary with regards to the purposes set out in article 49 in the GDPR.
11. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
Lindahl law firm is a law firm and our business is subject to confidentiality, which means that we cannot disclose personal data to anyone but the client. The possibility to exercise your rights might therefore be restricted. However, this does not apply to personal data that is processed outside the scope of a client matter, such as processing for marketing purposes or for monitoring visits on the web page.
11.1 The right to withdraw your consent
You have the right to withdraw your consent at any time. Upon such withdrawal, we will cease such processing of your personal data. Please contact us at dataskydd@lindahl.se if you want to withdraw your consent.
11.2 The right of access
You have the right to receive a confirmation as to if your personal data are being processed, and, where that is the case, the right to access such personal data. You will then receive inter alia the following information: the purposes for our processing, the categories of personal data, the categories of receivers, the storage times and the sources of the information.
11.3 The right to rectification
You have the right to request that inaccurate personal data are corrected without undue delay. You also have the right to, when appropriate, complete incomplete personal data.
11.4 The right to erasure (“the right to be forgotten”)
Under certain circumstances you have the right to obtain the erasure of your personal data (if: the processing is no longer necessary, you withdraw your consent and there is no other legal ground for the processing, there is a lack of legitimate grounds after your objection, the processing is executed illegally or erasure is demanded by a legal obligation).
As a law firm, we are required to keep client matters archived for ten years, or longer if the matter so requires. During that time, we cannot grant a demand for erasure of personal data that is processed as part of such matters.
11.5 The right to object to some types of processing (e.g. direct marketing)
If your personal data is processed based on general or legitimate interests, you have the right to object to the processing. For example, you have the right to object to processing for marketing purposes.
If you object to the processing, we will cease the processing if we cannot either demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
11.6 The right to restriction
You have the right to obtain the restriction of the processing of your personal data (if: you object to the accuracy of the personal data, the processing is illegal and you request a restriction instead of erasure, you need the data for legal claims or you have objected to the processing and await verification).
11.7 The right to data portability
You have the right to receive personal data that you have submitted to us in a machine-readable format. The right regards such data that is processed automatically and based on an agreement (with you) or your consent. You also have the right to demand that this data is transmitted directly to another personal data controller, where technically feasible.
11.8 The right to complain to the regulatory authority
If you are not satisfied with our processing of your personal data, you have the right to file a complaint with the Swedish Data Protection Authority, which is the Swedish supervisory authority. You also have the right to turn to the supervisory authority in the country where you reside or work.
12. DOES THIS POLICY APPLY TO LINKS TO OTHER PAGES?
No, Lindahl law firm’s policy only applies to such processing that is executed in accordance with this policy. We are not responsible for personal data that is processed when you visit a web page via any of our links. Please visit the respective web pages to find information on how they process your personal data.