Nordia Law

June 2022

NORDIA Law will act as data controller when it processes personal data of (assignment´s) contact persons which it has received in connection with assignments, or which is otherwise processed during the assignment. You are not obligated to give your personal data for us, but without it we cannot accept any assignment as it is not possible for us to do proper client conflict of interest or money laundering checks.

We process personal data to perform mandatory client conflict of interest and (if necessary) money laundering checks, to carry out the assignments, to protect the interests of you and third parties and for accounting and billing purposes. The data is processed in order to fulfil contractual obligations, legal obligations, legitimate interests or based on client’s consent.

We also process personal data of our current employees to fulfil our employer obligations as well as personal data of potential job seekers for recruitment purposes. We also process personal data of our former employees for organizing alumni activities and communicating with our alumni members. The data is processed in order to fulfil contractual obligations, legal obligations or legitimate interests.

We may use your contact information for the purposes of marketing our services and contacting our customers. Personal data can also be processed for business and method development purposes, market analysis, statistics and risk assessment. We also process personal data to understand how people use our website and its features so that we can improve their user experience. The data used for business developing and analysing purposes is processed on the grounds of our legitimate interest to develop our business and to communicate with contact persons.

NORDIA Law may also transfer personal data between different NORDIA Law offices in order to perform mandatory client conflict of interest and (if necessary) money laundering checks, for the purpose of information and knowledge exchange as well as resource allocation. We will not distribute any personal data to third parties except if:

• it has been agreed upon between NORDIA Law and you,
• it, within the scope of the assignment, is necessary in order to protect your rights,
• it is necessary for us to comply with a legal obligation or a decision of a public authority or court, or
• we hire an external service provider to execute an assignment on our behalf.

Personal data may be distributed to courts, authorities, adversaries and their attorneys if it is necessary in order to protect your rights.

Personal data will be kept, in compliance with the responsibility NORDIA Law has according to generally accepted legal practice, for ten years after the closing of the case, or a longer time if it is required due to the nature of the assignment. The data used to developing, analysing and marketing purposes will be kept for two years after the last time of the contact. If you unsubscribe from a newsletter or similar subscription, your data will be deleted immediately.

Personal data may also be transferred or disclosed to third party contractors, subcontractors, and/or their subsidiaries and affiliates. Third parties support NORDIA Law in providing its services and provide, run and manage IT systems, including support and information services. Examples of third-party contractors are providers of cloud services as well as website administration and management.

The third-party providers may use their own third-party subcontractors that have access to personal data (sub-processors). We use only third-party providers that are bound to maintain appropriate level of security and confidentiality, to process personal data only as instructed by NORDIA Law, and to transfer the above-mentioned obligations to their sub-processors.

You have the right to request information from us about the processing of your personal data without cost. We will, on your demand or on our own behalf, correct, delete or limit the processing of false or wrongful data. Furthermore, you have the right to object the processing of your personal data for direct marketing purposes. You also have the right to access your personal data in a machine-readable format. If you want to object the processing of your personal data, you may file a complaint to the supervisory authority in the country you reside or work. The following supervisory authorities are applicable in the countries where NORDIA Law operates:

Sweden
Integritetsskyddsmyndigheten: www.imy.se

Denmark
Datatilsynet: www.datatilsynet.dk

Norway
Datatilsynet: www.datatilsynet.no

Finland
Tietosuojavaltuutetun toimisto: www.tietosuoja.fi

If we will transfer your personal data outside EU/EES, we will inform you and provide the information about the legal basis the country where your personal data will be transferred and appropriate safeguards.

If you want to make any inquiry regarding the processing of your personal data, do not hesitate to contact our offices. All the offices listed below, will act as data controller in relation to you when they process your personal data:

STOCKHOLM
Advokatfirman NORDIA
Box 70389, SE-107 24 Stockholm, Sweden
Phone: +46 8 563 08 100, e-mail: stockholm@nordialaw.com

GOTHENBURG
Advokatfirman NORDIA Göteborg
Kungsportsavenyen 1, SE-411 36 Göteborg, Sweden
Phone +46 31 778 35 00, e-mail: gothenburg@nordialaw.com

COPENHAGEN
NORDIA Advokatfirma
Østergade 16, 1100 København K, Denmark
Phone: +45 70 20 18 10, e-mail: copenhagen@nordialaw.com

OSLO
NORDIA Law Advokatfirma AS
Dronning Eufemias gate 8, 0191 Oslo, Norway
Phone: +47 224 21 020, e-mail: oslo@nordialaw.com

HELSINKI
Asianajotoimisto Nordia Oy
Eteläesplanadi 22 A (7th floor), 00130 Helsinki, Finland
Phone: +358 9 4250 5000, e-mail: helsinki@nordialaw.com