Processing of personal data when visiting our website
The structure and functionality of our website necessitate the installation of cookies on the visitor’s computer or other device.
A cookie is a file that is installed on your IT device. It makes it possible to gather information about which pages and functions you visit with your browser. Cookies can also ensure that the website is displayed optimally in relation to your IT equipment, and that the site can recognise you.
We register the following information: Browser type, operating system, IP address, URL, time of the visit and which page you came from (e.g. Google).
You can find out more about the rules for cookies on the website of the Danish Business Authority.
To help us develop and improve our website, we maintain statistics on how the users use it. These statistics are used in a summarised form, e.g. to see which pages are visited most frequently.
The processing of personal data as part of case processing
We receive and process personal data as part of our case processing within the context of our activities as a law firm.
We would like to provide further information about the background and purpose of our processing of personal data.
Such processing can be due to several factors. Such factors would typically include that you are one of our clients, that you are a witness/counter party in a case that we are conducting, or that your personal data is involved in one of our cases for some other reason.
When we register and electronically process personal data about you, we are required, as data controller, to provide you with certain information about how we process your personal data.
This information is presented below.
We would like to stress that, in this context, we only ever process personal data to the extent that it is professionally appropriate, proportionate and necessary. We have also implemented technical and organisational measures to protect your information.
The nature of the information
Which types of personal data we process about you are primarily dependent on our relationship.
As a general rule, the personal data will be general (i.e. non-sensitive) information, including contact information and identification information. In certain scenarios, depending on the situation, it may also be sensitive personal data, including information about trade union affiliations and information about your criminal record.
This information is registered in consideration of our case processing and may come either from yourself or from other sources. The legal basis for our processing is the Danish Administration of Justice Act and associated regulations, the General Data Protection Regulation and section 6 (1) and section 7 of the Danish Data Protection Act.
The basis for the processing of general personal data may, for example, be the contract or an agreement that you in your capacity as one of our clients have concluded with us for the provision of legal services.
The basis for processing may also be a legal requirement. The Danish Administration of Justice Act and the ethical regulations for the Danish legal profession provide that, when conducting a case, we may be subject to a statutory obligation to contribute to the disclosure etc. of such data.
Other legislation may also provide that processing of personal data may or must take place. One such example would be sections 10-11 of the Danish Money Laundering Act.
The basis for the processing of sensitive personal data will typically be that such processing is necessary for a legal claim to be established, exercised or defended, cf. article 9 (2) (f) of the General Data Protection Regulation.
The disclosure of your personal data to other parties may be necessitated as part of the case processing/proceedings. Such disclosure would typically be to the courts, other attorneys or public authorities. This would proceed within the framework of the law and other regulations to which we are subject in our capacity as a law firm, including the duty of confidentiality of attorneys.
Our processing of your personal data generally takes place in pursuance of article 6 (1b and/or 1c), but may also take place on the basis of a balancing of interests (article 6 (1) (f) of the General Data Protection Regulation). This is because the processing of your information is important to our ability to perform our work duties, which are subject to the regulations for legal practice as set out in the Danish Administration of Justice Act.
Storage of your personal data
The information is stored for the period of time permitted by law and we delete it when it is no longer required. The length of this period will depend on the nature of the information and the legal basis for its storage. Your personal data is typically deleted five years after the case in which the information is included is closed, unless we are obliged to store it for a longer period of time for other reasons, or if the nature of the case requires a longer storage period.
The right to withdraw consent
We do not, as a general rule, apply consent as a basis for processing.
If the basis for the processing, as an exception, is based on your consent, you have the right to withdraw your consent at any time. You can do this by contacting us.
If you choose to withdraw your consent, this does not affect the legality of our processing of your personal data on the basis of your previously communicated consent and up to the time that your consent is withdrawn. Any withdrawal of your consent is thus only applicable going forward.
You have the following rights in relation to our processing of your information. You will need to contact us if you wish to take advantage of these rights.
• Right of access
(You have the right to gain insight into the information that we process about you as well as various other types of information). We note, however, that such right of access must not infringe the rights and freedoms of others, which is why there may be a limitation on the information to which you can gain insight.• Right to rectification
You have the right to have incorrect information about yourself rectified. You also have the right to have your personal data supplemented with additional information if this will make it more complete and/or up to date.
• Right to erasure
You are, in certain cases, entitled to have information about you erased before our regular standard deletion would otherwise take place.
• Right to restriction of processing
In certain situations, you have the right to have the processing of your information restricted. If you have the right to restricted processing, we may in future only process the information (with the exception of actual storage) with your consent, or with a view to establishing, exercising or defending a legal claim, or to protect a person or important public interests.
• Right to object
You have the right to object to our otherwise lawful processing of your personal data. However, this only applies if our processing relies on article 6 (1) (e) and (f) of the General Data Protection Regulation. You can also object to the processing of your information for direct marketing purposes.
• Right to data portability
You are, in certain situations, entitled to receive your personal data in a structured, commonly used and machine-readable format and to have this information transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Authority’s guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.