How we process personal data in our business (GDPR)

Definitions

Personal data is information that in some way can identify a living natural person. Examples of personal data include name, address, telephone number and e-mail address. Information such as IP addresses or other data which, when combined with other data, can identify someone also constitutes personal data.

Processing of personal data means all processing of personal data, such as collection, storage, recording and analysis.

Purpose

It is important for us and for our business that those who entrust us with personal data have a feeling of security about this.

Our policy is based on the applicable data protection legislation and the guidelines on good legal practice of the Swedish Bar Association. The purpose of the policy is for those who contact us to know how we process personal data, what we use the data for and who has access to the data. The most important thing is that you are aware of your rights and how to assert these.

Why we process personal data

We process personal data primarily in order to fulfil our obligations to those persons who engage us or contact us in our business. We do not store or process data for any reason other than as necessary in order to fulfil this purpose. We need to store basic personal data in order to carry out conflict checks when people contact us so that we do not undertake assignments where there is a conflict of interests in relation to those who engage us.

We need to store personal data in order to follow up on previous assignments, to enable us to provide information to our clients and in some cases to allow us to comply with legal provisions.

What personal data we process

We process personal data only when there is a legal basis for doing so. We do not process personal data other than as necessary in order to fulfil assignments or other obligations under contract or law. Personal data is processed solely by the lead lawyer or administrator. All employees have signed a confidentiality agreement. This means that they undertake not to access personal data in cases other than their own without good reason. All lawyers are subject to professional secrecy in accordance with the guidelines on good legal practice of the Swedish Bar Association.

We process the following personal data:

• Name, address, e-mail address, telephone number and fax number.
• Personal identity number, age, date of birth and gender.
• Profession and title.
• Details of debit card numbers, credit card numbers, bank account numbers and other bank details provided to us by the client.
• Information about clients, counterparties and other persons that is provided to us in the assignment or is posted on the Internet.
• Personal data from public registers and courts.

We also process the following sensitive personal data in cases:

• Social services investigations in cases involving children.
• Information about membership of trade unions in employment law disputes.
• Information from the healthcare service, where this is provided by the client.

The client’s right to control over their personal data

The legal basis for the storage and processing of personal data is consent, legitimate interests, the necessity of the processing for the performance of a contract or legal obligation, the performance of a task in the public interest or in the exercise of official authority. You can withdraw your consent at any time. We will not then be able to process your personal data or obtain new information, except if we need the data in order to fulfil our obligations under contract or law. Consent may be withdrawn in part or in whole and this shall always be done in writing. Withdrawal of consent may result in us being unable to fulfil the obligations we have to the client. Vernia Advokatbyrå AB accepts no liability for losses resulting from this.

Responsibility for the personal data

Vernia Advokatbyrå AB is the controller. This means that we are responsible for how personal data is processed and for respecting the rights of the person who provided the personal data.

Rights of the data subject

The data subject has the right to information about what data is stored and how it is processed. The purpose is for the data subject to have control over their own data.

Vernia Advokatbyrå AB undertakes to be open about what data is stored and how it is processed. The data subject has the right to know what data we process. They have the right to request a register extract. To enable us to ensure that personal data is provided to the right person, the request for a register extract must be made in writing, contain the details of the person requesting the information and be personally signed by the data subject. The person must be able to confirm their identity with a valid ID card.

If the personal data stored is inaccurate, incomplete or more extensive than is necessary for the assignment, the person has the right to request that the data be corrected or deleted.

The data subject has the right to a copy of all the data stored. The request for a copy of the data shall be made in writing. The data shall be provided on payment of a fee for the copying and transportation of the data to the data subject.
The data subject may request that Vernia Advokatbyrå AB delete personal data and other stored material. We will be unable to delete basic information about names and personal identity numbers, as these are needed to enable us to check for conflicts of interest with regard to future clients. There may be other data that we are unable to delete as it is needed in order to fulfil our obligations under law or other requirements placed on our business. This data will remain in our system but will be blocked for other purposes.

The person providing personal data has the right to request the restriction of processing of personal data. We will not use personal data for marketing purposes.

Those whose personal data is registered have the right to object to the processing of personal data where there is a legitimate interest at Vernia Advokatbyrå AB.

Those wishing to request information about what personal data Vernia Juridik has stored, a copy of this or to have their data deleted, blocked or corrected can request this at the following e-mail address: info@vernia.se

The deletion, amendment or blocking of data must be carried out promptly and no later than within six months from the date of receipt of the request.