Your privacy and security are important to us at Wåhlin Advokater AB (“Wåhlin”). We respect your privacy and ensure that your personal data is processed in accordance with applicable legislation.
This text describes how we at Wåhlin handle your personal data.
What personal data is processed and for what purposes?
Personal Data, etc.
Personal data is information that, directly or indirectly, can be related to a living individual. Examples of such information include name, contact details, photos, personal identification numbers, billing information, IP addresses, and the content of emails and other communications. In specific assignments, personal data may also include other information, such as events or other circumstances or data relevant to the assignment.
We process personal data about you if you:
- are employed by a client or counterparty;
- are a representative of the counterparty;
- are a client as a private individual;
- are otherwise affected by our assignments;
- participate in our seminars and other events or receive our newsletters; or
- apply for employment with or assignments with us.
In broad terms, we process personal data for the purposes of administering and carrying out our assignments, fulfilling our legal obligations, recruiting personnel, and marketing our services, as described in more detail below.
We, Wåhlin Advokater AB, company registration number 556834-1027, are the data controllers for our processing and are responsible for complying with applicable data protection legislation.
Execution of Assignments
We process personal data that we receive within the framework of an assignment or in connection with the preparation or administration of an assignment, for the purposes of administering and executing the assignment and fulfilling our legal obligations.
We also process personal data that we obtain from private and public registers, as well as from courts and authorities. This occurs, for example, when we fulfil our legal obligation to verify the identity and ownership structure of our clients and inform ourselves about the matter, and in some cases, also about the origin of client funds and other assets.
Newsletters, Events, Customer Surveys, Etc.
We may access personal data through contacts via email and other communication or through your use of any of the services we provide.
An example of such a service is Wåhlin’s newsletter, where we store your email address in order to send you the newsletters. Another such service is Wåhlin’s various events, such as seminars or lectures. When registering for such an event, you are required to provide your name, email address, company, any food allergies, telephone number, and your title. This personal data is stored to send invitations and follow-up messages regarding the various events you have registered for. If you no longer wish to receive communications from us, please contact us using the contact information at the bottom of this information text. You can also unsubscribe by following the link at the bottom of each communication.
We may also use your personal data for customer surveys or other marketing activities.
Recruitment of Personnel or Hiring of Consultants
We process personal data in the context of recruiting personnel and hiring consultants. The personal data we process includes the information you provide in your application, such as CV, cover letter, transcripts, certificates, details from references, as well as test results from personality and problem-solving tests.
Website Navigation and Cookies
When you visit our website, indirect personal data is also generated through our use of cookies, as described in our cookie policy. We will use such personal data for statistical purposes. However, we will, to the extent possible, use de-identified data for statistical purposes.
Legal Basis
We process your personal data when it is necessary to perform our assignment according to contract and/or law. We also process the personal data when we have a legitimate interest in processing them, for example, an interest in communicating with you, conducting recruitments, marketing ourselves, developing our services, sending newsletters you subscribe to, and organising seminars and other events you have registered for. If we were to process your personal data for any purpose that, according to data protection legislation, requires your consent, we will obtain your consent in advance.
Disclosure of Your Personal Data to Others/Third Countries
Personal data may be disclosed to external companies with whom we collaborate, such as marketing agencies and IT service providers. We may also disclose personal data when we have a legal obligation, for example, due to anti-money laundering legislation, when necessary for a dispute, or to comply with a request from an authority, an administrative decision, or a court order, and when required to fulfil a legitimate interest for us.
Your personal data is always treated confidentially and is protected with appropriate security measures. Companies handling personal data on our behalf always enter into a so-called data processing agreement with us to ensure a high level of protection for your personal data with our partners and suppliers.
Wåhlin only transfers your personal data to countries outside the EU/EEA when necessary. This may include situations where a case requires assistance from a foreign representative, involves an international transaction, or pertains to an international dispute. Transfer to a third country may also occur, for example, when we engage IT service providers located outside the EU/EEA. Wåhlin will take necessary measures during such transfers to ensure that the transfer is conducted legally, and that the personal data remains protected by the receiving parties outside the EU/EEA.
Retention Period
Personal data is stored only for as long as necessary to fulfil the purposes of processing or as required by law or other rules applicable to lawyers, i.e., for a period of ten years from the day of completion of the case or for a longer period as dictated by the nature of the case.
Personal data processed for the purpose of recruiting, developing, analysing, and marketing Wåhlin’s operations is retained for a maximum of three years. If you unsubscribe from newsletters, your data will be deleted as soon as possible.
For How Long is the Personal Data Retained?
Personal data is retained, in accordance with the obligations imposed on Wåhlin Advokater under the Swedish Bar Association’s Guiding principles for professional conduct and legal obligations, for a period of ten years from the day of the completion of the case, or for a longer period as required by the nature of the case.
Data processed for the purpose of developing, analysing, and marketing Wåhlin Advokater’s operations is retained for a period of six months after the last contact. If you unsubscribe from newsletters or similar, your data will be immediately deleted.
Your Rights
Wåhlin is the data controller for the processing of your personal data. You have the following rights with respect to us:
Right of access (record extract) – the right to confirm and obtain information about the processing of your personal data.
- Right to rectification – the right to have incorrect personal data corrected.
- Right to erasure – the right to have personal data deleted. This right is limited to personal data that, according to law, can only be processed with your consent, if you withdraw your consent and object to the processing.
- Right to object – the right to object to our processing if it is based on a legitimate interest or for direct marketing.
- Right to restriction of processing – the right to demand that the processing of personal data be restricted, for example, if you dispute the accuracy of the personal data. During the time the accuracy is being investigated, Wåhlin’s access to the data is limited.
- Right to data portability – the right to demand that personal data be moved from one data controller to another if technically feasible. This right is limited to personal data that you have provided to us yourself.
Complaints
If you are dissatisfied with our processing, we ask you to contact us using the contact information below. You also have the right to lodge a complaint with a supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection, IMY (www.imy.se). You can also contact the supervisory authority in the country where you reside or work.
Changes to This Information
Wåhlin reserves the right to change and update this information. In the case of material changes to this information, for example, if existing personal data is to be processed differently than stated, Wåhlin will inform about this in an appropriate manner.
Contact Information
Contact us at info@wahlinlaw.se or at the address below if you have questions regarding our processing of personal data.
The data controller is:
Wåhlin Advokater AB, company registration number 556834-1027
Östra Hamngatan 5
411 10 Gothenburg
Telephone +46 (0)10-12 90 000