**Dispute Resolution and Data Protection Notice**

CERTA Advokatbyrå KB, together with the affiliated law firms CERTA Lars Perhard Advokatbyrå Aktiebolag, Christer Håkansson Advokatbyrå Aktiebolag, J Dal Advokatbyrå AB, Sigunger Advokatbyrå AB, and CERTA R Poppelman Advokatbyrå AB (collectively referred to as “the Firm”), are controllers of the personal data we obtain from clients and contact persons in connection with instructions or which are otherwise processed when an instruction is prepared or administered.

You are not obliged to provide personal data to us, but without such data being provided, we will not be able to accept an instruction since we will not be able to carry out the mandatory conflict-of-interest and (where applicable) anti-money laundering checks.

We process the data in order to:

- conduct mandatory conflict-of-interest checks and (where applicable) anti-money laundering checks;
- perform and administer the instruction;
- safeguard your interests; and
- for accounting and invoicing purposes.

Such processing is carried out on the following legal bases:  
(i) for the performance of our contractual obligations towards you;  
(ii) in order to take steps at your request prior to entering into a contract; and  
(iii) for the purposes of our legitimate interests in fulfilling points (i) and (ii) above.

The data may also be used for business and methodology development, market analysis, statistics, and risk management. Personal data processed for the purpose of developing and analysing the Firm’s operations are processed on the basis of our legitimate interest in developing our business and communicating with our contacts.

Personal data may be transferred between CERTA Advokatbyrå KB and the affiliated law firms, and between the affiliated law firms inter se, for the purposes of conducting conflict-of-interest and anti-money laundering checks, for information and knowledge sharing, and for resource allocation.

We will not disclose personal data to third parties except where:  
(i) it has been specifically agreed between the Firm and you;  
(ii) it is necessary, within the scope of a particular instruction, in order to protect your rights;  
(iii) it is necessary in order for us to comply with a statutory obligation or to comply with a decision of a public authority or court; or  
(iv) we engage external service providers who perform services on our behalf.  

Personal data may be disclosed to courts, public authorities, counterparties, and counterparties’ representatives where this is necessary in order to safeguard your rights.

Personal data will be retained, in accordance with the obligations imposed on the Firm under the Swedish Bar Association’s Code of Professional Conduct, for a period of ten (10) years from the date of completion of the matter, or for such longer period as is required by the nature of the matter. Personal data processed for the purpose of developing, analysing, and marketing the Firm’s activities will be retained for a period of two (2) years following the most recent contact. If you unsubscribe from newsletters or similar communications, the personal data processed solely for that purpose will be deleted without undue delay.

You have the right to request, free of charge, information from the Firm regarding the use of your personal data. Upon your request or on our own initiative, we will rectify or erase inaccurate data or restrict the processing of such data. You further have the right to request that your data not be processed for direct marketing purposes. You also have the right to receive your personal data in a structured, commonly used, and machine-readable format or, where technically feasible, to have the data transmitted to a third party designated by you.

If you are dissatisfied with our processing of your personal data, you may lodge a complaint with the competent supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, www.imy.se). You may also contact the supervisory authority in the country where you live or work.

Please contact us at info@certalaw.se or at the address below if you have any questions regarding our processing of personal data.

CERTA Advokatbyrå  
Grev Turegatan 13 B  
114 46 Stockholm  
Sweden  
Telephone: +46 8 14 57 70