Elmzell law firm is the data controller of personal data processed in connection with client engagements, marketing of our business and in contact with suppliers.
In general, we are instructed and engaged by different companies. The data protection rules do not apply for legal persons. However, as a part of such instructions we may get personal data about clients or other persons (for example contact person, prospective clients’ workers, opponent, their legal advisors or similar). The information below describes how we process your personal data.
Processing of personal data
We process personal data regarding clients and contact persons when we receive inquiries concerning client engagements and when we perform and administer such engagements. You are not obliged to disclose personal data to us although if such does not occur we may be prevented from accepting an engagement since we cannot perform the required conflict of interest and money laundering checks.
We may also process personal data in conjunction with registration for our newsletters or seminars.
We process personal data regarding employees or contractors at legal entities and counterparties which are individuals. The personal data we process includes name, title and tasks related to the employment. So called special categories of personal data may occur.
Other individuals in relation to our engagements
We process personal data about other individuals who are of relevance within the framework of our assignments. These individuals may be legal representatives of the counterparty, arbitrators, judges, witnesses, experts, contract parties or similar.
We process personal data in connection with the suppliers’ agreement we have. The personal data includes for example, name, phone number and e-mail to contact persons in connection with the business relationship between us and the supplier.
Purposes and legal basis for processing of personal data
The personal data is processed by us in order to be able to:
- perform conflict of interest and (when applicable) money laundering checks,
- to perform and administer engagements,
- to safeguard the client’s interests; and
- for accounting and invoicing purposes.
The personal data is processed in order to fulfil the legal obligations we have to perform conflict of interest and money laundry checks. The personal data is also processed to fulfil the agreement with the client, or on the basis of a balance of interest and our interest to maintain our business and administer the engagement.
The personal data is also processed in order to maintain business and method development, statistics, marketing and risk management. We process the personal data by virtue of our legitimate interest in being able to maintain business contacts and develop and market our business.
Counterparties and other persons
The personal data is processed by us in order to be able to:
- perform conflict of interest check,
- to perform and administer engagements, and
- to safeguard our client’s interests.
The personal data is processed in order to fulfil the legal obligations we have to perform conflict of interest checks. The personal data is also processed to fulfil the agreement with the client, or on the basis of a balance of interest and our interest to maintain our business and administer the engagement.
Personal data as an employee or contractor of a supplier is processed in the purposes of invoice- and payment and administration. This personal data is processed on the basis of a balance of interests. Our legitimate interest is to be able to administrate the contract and to fulfil our obligations towards the supplier.
If applicable, we process personal data according to the Accounting Act. The processing is based on a legal obligation.
If personal data is provided to us by a sole trader we process this personal data as necessary to fulfil our agreement or to take measures before entering into an agreement. We also process the personal data to administrate the agreement and to make orders. You are not obliged to disclose personal data to us although if such does not occur we may be prevented from entering into an agreement.
Recipients of personal data
Personal data may be transferred to Lars Hartzell Advokatbyrå AB in order to perform conflict of interest and money laundry checks, in order to exchange information and knowledge and to allocate resources.
We will not disclose personal data to any third parties, with the exception of:
- following a separate agreement with you;
- in the event it is necessary to protect our client’s rights within the scope of a certain engagement;
- where it is necessary in order for us to perform a statutory obligation or to comply with decisions of any public authority or decision of a court; or
- in the event we engage third party suppliers which provide IT or administrative services on our behalf.
The personal data may be disclosed to courts, public authorities, counterparties and counterparty’s counsel where such is necessary in order to perform an engagement.
Storage of personal data
Personal data will be saved as long as it is necessary for the purposes for which it is being processed.
According to the Swedish Bar Association’s framework, we are required to process information relating to an assignment for a period of ten years after the assignment is closed or for a longer period if necessary.
Personal data that is being processed with the aim to develop, analyse and marketing our business will be retained fifteen months from the last contact with you. You always have the option to, at any time, unsubscribe from receiving mailings from us. If you choose to unsubscribe, we will immediately terminate our processing of your personal data for marketing purposes.
Any personal data relating to payment where processing is required according to the Swedish Accounting Act is processed for seven years.
Inactive agreements containing your personal data is stored for ten years due to the period of limitation according to the Swedish statute of limitation.
Subject to certain statutory exceptions, you are entitled to request information concerning your personal data that we process and how this is used. You can also request that personal data concerning you is rectified or request that your personal data is erased or that the processing of your personal data is limited.
You are also entitled to object to the processing of your personal data that is being process on the basis of a balance of interests.
Under certain preconditions, you can also request to have your personal data transferred in electronic form to a third party.
If you are dissatisfied with our processing, you can contact a Data Protection Authority, which in Sweden is the Swedish Data Inspection Board, (www.datainspektionen.se). You may also contact the Data Protection Authority where you live or work.
Transfer of personal data
As a principle rule, we, our suppliers and our partners only process your personal data within the EU/EEA. In cases where personal data is transferred outside the EU/EEA, such processing is either based on a decision from the Commission establishing that the country in question ensures an adequate level of protection or appropriate safeguarding measures that ensure that your rights are protected.
Updates of this policy
We may, from time to time, update this policy for example when required to comply with changes in applicable law or regulatory requirements.
Contact us through firstname.lastname@example.org or through or address below if you have any question regarding the processing of your personal data.
Elmzell law firm, 556771-5528, Gamla Brogatan 32, 111 20 Stockholm, 08-21 16 04, www.elmzell.se.