Skip to content
XR LEGALADVOKAT AB
Privacy

Privacy Notice

Our processing of personal data

Personal data are provided to us or collected by us. This primarily concerns contact with and relations to clients and clients’ representatives, counterparties and counterparties’ representatives and counsel, but also clients’ and counterparties’ business partners and consultants. Witness personal data may also be involved. Personal data may also relate to suppliers and similar parties and those seeking employment with us. Much of our communication takes place by telephone and e-mail, which almost always involves processing of personal data. The same applies to contact via Teams, Zoom, Google Meet and similar services. Anyone who calls us, sends e-mails or contacts us via Teams, Zoom, Google Meet or similar generally leaves personal data. In all cases we process personal data in accordance with applicable data protection legislation.

Processing of personal data in engagements

We collect personal data provided to us in and around engagements, primarily from the persons concerned but sometimes also from others. We may need to supplement personal data by obtaining information from other sources. Relevant personal data include, for example, contact details (name, title, employer, postal address, telephone number and e-mail address etc.), identification data (passport and ID card details and personal identity numbers) and invoicing information. Personal data may also include other information relevant to an engagement and audio and video recordings in connection with court proceedings and webinars.

Processing in connection with marketing, courses and events

We collect personal data provided to us when registering for newsletters, courses and similar activities. Data collected may include contact details, title and workplace. We may also supplement personal data by obtaining information from other sources. When we organise events we may process personal data in the form of photographs and audio and video recordings.

Processing in connection with recruitment

We collect personal data provided to us in connection with job applications. In addition to the data mentioned above, this includes CVs, cover letters and information on education and work experience, including degree and employment certificates. If an application is made via LinkedIn, photographs and information on education and professional experience may also be obtained from the applicant’s profile. We may also supplement personal data by obtaining information from other sources such as the applicant’s employer’s website.

Purposes of our processing

Processing in connection with engagements. To perform our engagements for clients and meet requirements under law and the Swedish Bar Association’s rules, we must process personal data. We must also carry out mandatory conflict-of-interest and anti-money laundering checks before accepting an engagement.

Processing in connection with marketing, courses and events. Processing in connection with registration for newsletters, courses and similar activities takes place for marketing and communication purposes for addressing newsletters, invitations and administration of courses etc. and to maintain our contact register.

Processing in connection with recruitment. Processing in connection with recruitment is for administration of recruitments and assessment of applicants, both as to competence and in relation to the Bar Association’s rules on recruitment processes.

Legal basis for our processing

When processing client information relating to natural persons, the legal basis is performance of our engagement agreement with the client. In relation to representatives of clients and their business partners and consultants, foreign counsel, witnesses, counterparties, representatives of counterparties and counsel and similar parties, our processing is based on our legitimate interest in conducting our business and performing our engagements. When personal data are processed in connection with conflict-of-interest and anti-money laundering checks, archiving of documents after an engagement ends and in our internal risk management, such processing is based on our obligation to fulfil requirements under, for example, accounting and anti-money laundering legislation and the Bar Association’s rules.

When processing personal data of suppliers or their representatives and other similar parties, our legitimate interest in appropriate administration, for example regarding our contractual obligations, forms the basis. Where an interest balancing exercise has been carried out, processing takes place if we consider it necessary for our client’s interests. Processing may also take place where we consider our legitimate interests outweigh opposing interests and/or fundamental rights and freedoms.

When personal data are processed for marketing and communication purposes, this is based on our legitimate interest in maintaining business contacts and communicating with business contacts about our business and courses etc. We consider that our interest in processing personal data for this purpose outweighs individuals’ interest in protection of personal integrity.

Applicants’ personal data are processed based on our legitimate interest in managing the recruitment process as described above. We consider that our interest in processing personal data for this purpose outweighs individuals’ interest in protection of personal integrity.

Protection of personal data we process

To protect personal data we process, we have taken the security measures needed to protect them, both technical and otherwise. We do not disclose personal data except where consent exists or it is necessary in the context of engagements for the client or there is a statutory obligation to do so (or to comply with an authority or court decision or the Bar Association’s rules). Personal data may also be handled by, for example, IT suppliers performing work on our behalf – in such cases data may only be processed according to our instructions.

How long are personal data retained?

We do not retain personal data longer than necessary having regard to the purpose of processing, unless data may or must be retained longer under applicable law. The data subject may at any time unsubscribe by contacting us at miwe@xrlegal.se.

Data controller

XR Legal Advokat AB, 559405-9635, Västra Trädgårdsgatan 6A, Stockholm, is the controller for the processing of personal data described above.

The data subject has the right to:

The above rights may however be limited with reference to lawyers’ duty of confidentiality and archiving obligations.

Anyone with objections or comments on how we process personal data has the right to contact or lodge a complaint with the Swedish Authority for Privacy Protection (IMY), which is the supervisory authority for our processing of personal data.

For questions or complaints about how we process personal data or requests to exercise rights as above, please contact us by e-mail at michel.weimer@xrlegal.se or by letter to XR Legal Advokat AB, 559405-9635, Västra Trädgårdsgatan 6A, Stockholm.