Foyen is the data controller for the personal data that we receive in respect of contact persons in connection with engagements or which is otherwise processed when the engagement is prepared or administered.
Foyen will always comply with applicable laws regarding privacy and will also ensure that personal information is treated confidentially. All employees are bound by strict confidentiality. Foyen will not disclose personal data to a third party without prior consent unless specifically stated herein.
Foyen may process the following personal data:
- Telephone number
- Email address
- Mailing address
- Name and address information of an employer/principal (in the event you have contact with us in your capacity as a representative of the employer/principal)
If you contact Foyen by telephone, email, or letter, we may store notes or correspondence which may contain personal data, if such information is part of an ongoing matter or a future matter which we are handling.
Lawfulness of the processing
Foyen processes your data as follows:
- We process your data legally, correctly, and in a transparent manner.
- We obtain your personal data for the stated and legitimate purposes stated in this policy, and we will not process your personal data in any way which is inconsistent with these purposes.
- We collect and process personal data which is adequate, relevant, and necessary for the purposes for which it is collected and used.
- We process your personal data only for as long as is necessary for the purposes for which it was collected.
- We process correct data. Foyen will update and correct data as soon as Foyen learns of any errors.
In accordance with the obligation imposed on Foyen under the Code of Professional Conduct for Members of the Swedish Bar Association, we save your personal data for ten years from the date of conclusion of the matter, or longer if necessary due to the nature of the matter.
Data which is processed for the purpose of developing, analysing, and marketing the law firm’s business is saved for three years after the most recent contact. If you unsubscribe from the newsletter or suchlike, relevant data will be erased immediately.
Legal grounds and purposes
Foyen collects and processes your personal data in order to perform our undertakings in those cases where Foyen has entered into an engagement agreement with you, as well as to administer the engagement and to safeguard your interests, in accordance with in Article 6(1)(b) of the GDPR. In addition, we process your data in order to conduct mandatory conflict of interest checks and also, in certain cases, to conduct anti-money laundering checks, in accordance with Article 6(1)(c) of the GDPR.
It is necessary for us to process your personal data to enable us to enter into agreements regarding engagements and to satisfy applicable legal requirements regarding verification of identity. You are not obligated to provide personal data to us. However, if you choose not to provide your personal data to us, we cannot undertake the engagement since, in such case, we cannot conduct necessary checks for conflict of interest and money laundering.
In addition, Foyen may process your personal data, primarily email address and telephone number, in order to send information about Foyen’s business, news which we deem to be of interest to you or other marketing, in accordance with a weighting of interests which is conducted in accordance with Article 6(1)(f) of the GDPR. At all times, you have the right to decline direct marketing.
The data may also be used in Foyen’s business development and in analyses of our business, e.g. through market analysis, statistics, and risk management. The data which is processed in this way is processed based on our legitimate interest in developing the business and communicating with our contacts, in accordance with Article 6(1)(f) of the GDPR.
Moreover, in addition to the above-stated, Foyen made process your personal data to the extent Foyen is obligated to do so based on legislation or public authority decision, in accordance with Article 6(1)(c) of the GDPR.
Personal data processor
Foyen retains a personal data processor who processes all personal data through storage of data and through operation of our systems. In certain cases, the processor may read personal data if our IT systems require maintenance or other technical support. Our processor is bound by strict confidentiality pursuant to contract.
Our data is stored and processed only on servers located in the EU/EEA. We may transmit your data to a third country (a country outside of the EU/EEA), however only if the transfer is necessary to perform an agreement between you and Foyen, or to carry out measures which precede such an agreement at your request.
We may transfer data about you to third parties, such as courts, public authorities, and another party to your matter in the event doing so is necessary, within the scope of a matter, to safeguard your rights, in order to respect your rights and obligations in our capacity as your legal counsel, or following agreement with you, or to enable us to perform a legal obligation or comply with a public authority decision or court order.
The data may be provided to courts, public authorities, opposing parties and opposing party counsel, where necessary to safeguard your rights.
Foyen takes suitable technical and organisational measures to prevent unauthorised or illegal processing and access, loss, destruction, or damage to personal data, and thereby ensures an appropriate level of security.
You are entitled to:
- obtain confirmation regarding whether we process personal data about you, and in such case obtain access to it in the legally prescribed manner;
- request that we rectify innaccurate personal data about you;
- request that we erase your data where there are no legal reasons to continue the processing;
- request that we restrict the processing of your personal data, provided there are no legal reasons to continue the processing;
- request to obtain the personal data which relates to you, and which you have provided to us, in a structured, commonly used, machine-readable format (portability).
You are also entitled to submit a complaint to the supervisory authority, www.imy.se, regarding our processing.
Please note that in order to ascertain that the correct person is submitting a request for a measure pursuant to the above, we will conduct verification of identity.
If you have questions regarding how we process your personal data, please contact any of our offices as set forth below, or the responsible attorney identified below:
Foyen Advokatfirma KB
182 49 Stockholm
Tel: 08-506 184 00
211 34 Malmö
Tel: 040-661 56 50
Stora Nygatan 33
411 08 Gothenburg
Tel: 031-743 20 60
791 71 Falun
Tel: 023-79 47 90
Designated person at Foyen who is responsible for Foyen’s personal data processing:
Partner Andreas Lindström
Tel: 040-661 56 50