Information about personal data processing

Advokatfirman Cederquist appreciates your visit to our website and your interest in our firm. We care about your privacy and comply with data protection legislation*. We therefore wish to inform you about our processing of your personal data and your rights under data protection legislation.

WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?

Personal data refers to information which, directly or indirectly, may be associated with a living natural person. Examples of such information are name, contact details, photos, personal ID number, IP address and the contents of e-mails and other communications.

We process personal data about persons who:

  • are employed by a client or counter-party;
  • represent a counter-party;
  • are clients in the capacity of a private individual;
  • are otherwise affected by our assignments;
  • attend our seminars and other events or receive our newsletter; or
  • apply for a job with us or an assignment for us.

We process personal data for the purposes of administering and performing our assignments, complying with our legal obligations, recruiting staff and marketing our services, in the manner described in more detail below.

We are data controller for our processing and are responsible for ensuring compliance with applicable data protection legislation.

Performance of assignments

We process personal data which we gain access to within the scope of an assignment, or in connection with preparing for or administering an assignment, for the purposes of administering and performing the assignment and to comply with our legal obligations.

We also process personal data which we obtain from private and public records, as well as from courts and public authorities. This would, for example, be the case when we perform our legal obligation to verify our client’s identity and ownership situation, and to familiarise ourselves with the matter and, in some cases, the origin of our client funds and other assets.

Newsletters, customer surveys and events etc.

We may gain access to personal data through contacts via e-mail and other modes of communication or via your use of any of the services we provide through the website.

An example of such services is Cederquist’s newsletter, where you register your e-mail address, which we store in order to send you newsletters. Another such service is the registration feature for Cederquist’s various events, such as seminars or lectures. To register, you need to provide your name, e-mail address, company, possible food allergies, telephone number and title. This information is saved in order to send you invitations and follow-up e-mails regarding the different events you sign up for. If you no longer wish to receive mailings from us, please contact us via the contact details at the foot of this information. You can also unsubscribe by following the link at the bottom of each e-mail. 

We may also use your personal data for customer surveys or other marketing activities.

Staff recruitment or engagement of consultants

We process personal data within the scope of recruiting staff and engaging consultants. The data we process are the data you provide in your application, e.g. CV, personal statement, school grades and other certificates, data from references and test scores from personality tests/logic tests. When you sign an employment contract with us, we also ask you to request a disclosure and criminal records check. Once the evidence of such checks is available, we look at it together with you and then either return it to you or destroy it immediately. Such evidence will not be saved. We may also perform other background checks (which you give your consent to when signing the employment/assignment agreement) through an external company, which may include data about, inter alia, legal proceedings, whether you have a driving licence and your financial situation.

Using the website and cookies

When you visit our website, indirect personal data are also generated through our use of cookies, as described in our cookie policy. We may use such data for statistical purposes. However, wherever possible, we will use anonymised data for statistical purposes.

LEGAL BASIS

We process your personal data when necessary to carry out our assignments in accordance with law, to send newsletters which you have subscribed to and to present seminars and other events which you have applied for. We also process data when we have a legitimate interest in doing so, for example an interest in communicating with you, to carry out recruitment and marketing and to develop our services. If we were to process your personal data for any purpose which requires your consent under the data protection legislation, we will obtain your consent in advance.

DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to external companies with whom we collaborate, for example marketing agencies and IT services providers. We may also disclose data when we have a legal duty to do so, for example on the basis of money laundering legislation.

Your personal data will always be processed confidentially and protected by appropriate security measures. Companies that manage personal data on our behalf must always enter into a so-called data processor agreement with us so that we are able to ensure a high level of protection of your personal data with our partners and suppliers.

When we engage suppliers of IT services outside the EU/EEA, we ensure that your data are adequately protected, for example by entering into a data transfer agreement with the supplier outside the EU/EEA who has access to our IT systems.

STORAGE PERIOD

Personal data are only stored for as long as it is necessary in order to fulfil the purposes of the processing, or for as long as we are required to store them by law or other rules that may apply to lawyers. The data are thereafter erased in accordance with our erasure procedure.

YOUR RIGHTS

Advokatfirman Cederquist is the data controller for the processing of your personal data. You have the following rights in relation to us: 

  • Right of access (register transcript) – a right to obtain confirmation of and information about the processing of your personal data.
  • Right to rectification – a right to have erroneous data rectified.
  • Right to erasure – a right to have data removed. This right is limited to data which, by law, may only be processed with your consent, if you withdraw consent and oppose the processing.
  • Right to object – a right to object to our processing if it is based on a balancing of interests or direct marketing.
  • Right to restricted processing – a right to request that personal data processing is restricted, for example, if you oppose the accuracy of the data. Cederquist’s access to the data is restricted while the accuracy of the data is investigated.
  • Right to data portability – a right to request that personal data are transferred from one data controller to another. This right is restricted to data that have supplied to us yourself.

If you feel that our processing does not comply with data protection legislation, you are also entitled to lodge a complaint with the Swedish Data Protection Authority (the competent supervisory authority).

CONTACT DETAILS FOR THE DATA CONTROLLER

If you would like further information about how your personal data are processed, or wish to exercise any of the rights listed above, please contact us:

Advokatfirman Cederquist
FAO: Head of HR
Hovslagargatan 3
SE-111 96 Stockholm, Sweden
e-mail address: advokat@cederquist.se
The subject line to your e-mail should read “FAO: Head of HR”

* Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation), and national legislation introduced under the regulation.

bg