Processing of Personal Data – Information pursuant to the General Data Protection Regulation (EU) 2016/679 (GDPR)

​

CERTA Advokatbyrå KB, together with the affiliated law firms CERTA Claes Johansson Advokatbyrå AB, CERTA Lars Perhard Advokatbyrå Aktiebolag, Christer Håkansson Advokatbyrå Aktiebolag, CERTA Gedeborg Advokatbyrå AB, Sigunger Advokatbyrå AB and CERTA R Poppelman Advokatbyrå AB, are controllers of the personal data relating to clients and contact persons that we obtain in connection with instructions or that are otherwise processed when an instruction is prepared or administered.

You are not obliged to provide personal data to us, but without such data being provided we will not be able to accept an instruction, as we would be unable to carry out the mandatory conflict-of-interest and (where applicable) anti-money laundering checks.

We process the data in order to perform mandatory conflict-of-interest checks and (where applicable) anti-money laundering checks, to carry out and administer the instruction, to safeguard your interests, and for accounting and invoicing purposes. These data are processed:  
i) for the performance of our contractual obligations,  
ii) in order to take steps at your request prior to entering into a contract, and  
iii) on the basis of our legitimate interest in performing items (i) and (ii) above.

The data may also be used for business and methodology development, market analysis, statistics and risk management. Data processed for the purpose of developing and analysing the firm’s operations are processed on the basis of our legitimate interest in developing the business and communicating with our contacts.

Personal data may be transferred between CERTA Advokatbyrå KB and the affiliated law firms, and between the affiliated law firms, for the purposes of performing conflict-of-interest and anti-money laundering checks, for information and knowledge sharing, and for resource allocation.

We will not disclose personal data to third parties except where:  
(i) it has been specifically agreed between the law firm and you,  
(ii) it is necessary within the scope of a particular instruction in order to safeguard your rights,  
(iii) it is necessary in order for us to comply with a statutory obligation or to comply with a decision of a public authority or court, or  
(iv) we engage external service providers who perform services on our behalf.  

The data may be disclosed to courts, public authorities, counterparties and counterparties’ representatives where this is necessary in order to safeguard your rights.

Personal data are retained, in accordance with the obligations imposed on the law firm under the Swedish Bar Association’s Code of Professional Conduct, for a period of ten years from the date of completion of the matter, or for such longer period as is required by the nature of the matter. Data processed for the purpose of developing, analysing and marketing the law firm’s activities are retained for a period of two years following the most recent contact. If you unsubscribe from newsletters or similar communications, the data we process specifically for that purpose will be deleted immediately.

You have the right to obtain, free of charge, information from the law firm regarding the use of your personal data. Upon your request or on our own initiative, we will rectify or erase inaccurate data or restrict the processing of such data. You also have the right to request that your data not be processed for direct marketing purposes. You further have the right to receive your personal data in a structured, commonly used and machine-readable format or, if technically feasible, to have the data transmitted to a third party designated by you.

If you are dissatisfied with our processing of your personal data, you may lodge a complaint with a supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, www.imy.se). You may also contact the supervisory authority in the country where you live or work.

Please contact us at info@certalaw.se or at the address below if you have any questions regarding our processing of personal data.

CERTA Advokatbyrå  
Nybrogatan 6, SE-114 34 Stockholm, Sweden  
+46 (0)8 14 57 70