Personal Data Protection Policy
PERSONAL DATA PROTECTION POLICY FOR ADVOCATFIRMAET KRARUP
1.1 Data protection In connection with the provision of legal assistance, ADVOCATFIRMAET KRARUP processes personal data (personal data) about its clients and has therefore adopted this data protection policy which describes how your data is processed and what rights you have as registered. To best protect your personal data, we assess the risk of our data processing adversely affecting your fundamental rights, and we process your personal data based on the following basic principles: • The processing is done in a legal, reasonable and transparent manner in relation to you. • Treatment is subject to a purpose restriction. • Processing is based on a principle of data minimization. • Processing is based on a principle of correctness that ensures that the data we process about you is accurate and up-to-date. • The treatment is based on a principle of storage restriction. • The treatment is based on a principle of integrity and confidentiality.
1.2 Data controller The data controller for the processing of your personal data is ADVOCATFIRMAET KRARUP, CVR no. 32802222, which means that it is this company that is responsible for ensuring that your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the Data Protection Regulation) and applicable national law thereon . If you have any questions regarding the processing of personal data in the company, please contact Kim Krarup.
2.1 Processing of personal data as part of our legal advice At ADVOCATFIRMAET KRARUP, we treat personal data about you as an inevitable part of the advice we provide you, and in our ongoing contact with you.
2.2 Types of personal data In connection with the exercise of legal advice, we process personal data about you, including: • Name • E-mail address Page 2 • Address • Telephone number • Job function • Finance • Wealth • Family relationship • Employer • Insurance • Former residence • Third Party Relationships • Social Issues In some cases, we deal with special personal data (person-sensitive data) about you that include: • Racial or ethnic background • Political, religious and philosophical beliefs • Trade union affiliation • Processing generic or biometric data for the purpose of unique identification • Health and sexual relationships
2.3 Purpose of the processing of personal data and the legal basis for it We collect and store your data for specific and legitimate purposes, for example: • When we register as a client or contact person in our case system for the purpose of ongoing correspondence and invoicing • When we must use the information to gain an overview of the facts of the case, thereby creating the best possible basis to assist and advise you legally • When we are obliged to obtain information under the Money Laundering Act When we collect the information from you, or from a third party, you will be informed that we are collecting the information and for what specific purposes. If we later need to use the information for any purpose other than that stated, we will contact you and obtain your consent. Our legal basis (the legal basis) for processing your personal data will typically be: For ordinary personal data: • The nature of the Data Protection Regulation. 6 pieces. 1, a: Consent • Nature of the Data Protection Regulation. 6 pieces. 1, b: Fulfillment of contract. • The nature of the Data Protection Regulation. 6 pieces. 1, c: Legal obligation Page 3 • Nature of the Data Protection Regulation. 6 pieces. 1, d: Protection of the vital interests of you or other private persons • Nature of the Data Protection Regulation. 6 pieces. 1, f: Balance of interest. For special (personal sensitive) personal data: • The nature of the Data Protection Regulation. 9, par. 2 a: Consent • Nature of the Data Protection Regulation. 9, par. 2 c: Protection of the vital interests of you or other private persons • Nature of the Data Protection Regulation. 9, par. 2 f:
2.4 Scope of data Before we process your personal data, we investigate whether it is possible to minimize the amount of personal data in relation to the purpose of the processing. We are also investigating whether some of the data types we use can be used in anonymous or pseudonymized form. This is possible if it does not adversely affect our obligations to public authorities or our daily operations. We only collect, process and store the personal data necessary to fulfill our intended purpose. In addition, it can be decided by law what type of data it is necessary to collect and store in relation to running a law firm. The type and extent of the personal data we process may also be required to fulfill a contract or other legal obligation.
2.5 Checks We regularly check that your personal data is not incorrect or misleading as far as possible. In this connection, we ask that you inform us of relevant changes in your personal data. You can contact the individual attorney with whom you have agreed to notify of changes. 3.1 Security To protect you from unauthorized access to your personal data, we use IT solutions that automatically ensure that all data is only accessible to relevant persons. In addition, at ADVOCATFIRMAET KRARUP, we have adopted internal procedures and policies regarding information security. These procedures and policies contain instructions and actions that protect your data from being destroyed, lost, altered, published, and against unauthorized access or sharing.
4.1 Disclosure of personal data As part of our legal assistance, we are sometimes obliged to disclose personal data to third parties. This can be, for example, in the process of litigation, bankruptcy proceedings, bankruptcy proceedings, founding of a company and in many other contexts. Third parties include, for example: - Courts - Counterparty lawyers - Creditors (creditor information) - The Danish Business Agency Disclosure of personal data to a third party will always be legally justified and otherwise necessary to fulfill your or your company's legitimate interests.
5.1 Right of access On request, you can gain insight into what personal data and category of personal data we process about you and what the purpose of the processing is if you have not already been informed. You can also gain insight into how long we keep your personal data and who else has access to your personal data.
5.2 Right of objection You may at any time object to the processing of your personal data and withdraw a previously issued consent for the processing of your personal data. However, please be aware that there will be certain personal data that we will be able to process without your consent if we have a legitimate interest and if the protection of your interests does not exceed that interest.
5.3 Right to Correction If you believe that the personal data we process about you is inaccurate or misleading, you have the right to have it corrected. You must contact the lawyer with whom you have entered into legal assistance.
5.4 Right to have personal data restricted / or deleted Page 5 As long as you are a client of ADVOCATFIRMAET KRARUP and up to 10 years after the client relationship has ended, we store your personal data for the fulfillment of public obligations and for any legal disputes. . However, in some cases, we will have an obligation to delete your personal data earlier. This is the case, for example, if you withdraw consent or if the storage of your personal data is no longer necessary for the stated purposes. If you request that your personal data be corrected or deleted, we will investigate whether the conditions for this have been met, in which case we will make the necessary changes or deletions as soon as possible.
5.5 Right to data portability If you request to be informed what personal data ADVOCATFIRMAET KRARUP processes about you, and the conditions for this, you are entitled to submit these to us in a structured, commonly used and machine-readable format, and we can and will not prevent you from transmitting this information to third parties. If you request, and it is technically possible, we will make sure to send the requested personal data directly from ADVOCATFIRMAET KRARUP to a third party.
5.6 Right to complain If you believe that your personal data is being processed in violation of applicable law or other legal obligations, you have the right to file a complaint with the Data Inspectorate. (Dt@datatilsynet.dk).