Advokatbyrå Hästö, Salingre, Engberg & Welin Ab, Company ID: 2036136-4 (hereinafter ”Hästö & Co”)
Your privacy is important to us. In this privacy notice we describe how we at Hästö & Co collect and process your personal data in connection with:
- client matters
- cookies used on our website
- performing our statutory duties
- communicating with suppliers and business partners
1. For which purposes do we process your personal data?
Data gathered in client relationship
We process personal data in managing our client relationships. Processing of personal data is necessary in order for us to perform our client assignments and related matters such as invoicing. We also process personal data received from our clients for marketing purposes such as event invitations and informing about current legal affairs. The legal basis for processing personal data related to client matters is either performing a contract with the client or our legitimate interest to conduct our client assignments or maintain a business relationship.
Data gathered in recruitment process
If you have applied for a position at Hästö & Co, we process the personal data which you have provided to us in the specific recruitment process. If you have sent us an open application, we process your personal data in filling vacancies for one year after sending the application. The processing of personal data is necessary for conducting the recruitment process. We do not process the data for any other purposes without your consent. The legal basis for processing personal data within recruitment process is legitimate interest to fill vacancies in our company.
Data gathered in order to perform our statutory obligations
We process your personal data in order to perform our statutory duties such as our know your client obligations. We also process personal data that is needed to fulfill our conflict of interest procedures under the rules of the Finnish Bar Association. The legal basis for processing your personal data is our statutory duties as a law firm.
Data gathered from the website
We may collect personal data through the contact boxes on our website. This data is collected in order to contact you regarding your contact request. The legal basis for processing your personal data is our legitimate interest to answer you inquiry.
We also process personal data of the contact persons of our suppliers and other business partners in order to maintain our business relationship. The legal basis for processing personal data of the contact persons of our suppliers and other business partners is legitimate interest for ordinary communication.
We also gather information of persons that have signed up for our events. The data is only used in order to organize the event and the information will not be used for other purposes. The legal basis for processing personal data is our legitimate interest to organize events for people that have voluntarily signed up for them.
2. How do we process your personal data?
We process your data as long as needed in order to perform our purpose of processing described above or as may otherwise be required by law.
3. How will we share and transfer your personal data?
We will not share or transfer your personal data to third parties unless it is required by law or is necessary in order for us to prepare for legal proceedings or otherwise to perform services for our clients. We might from time to time give contact details of our clients to trustworthy researchers, which conduct surveys on legal services and are not allowed to publish the contact details or use them for any other purpose than the survey.
We will share personal data to our suppliers as they perform services on our behalf (data processors). Our suppliers are obligated to process personal data for the abovementioned purposes only and are obliged to perform appropriate technical and organizational measures for the protection of personal data.
We mainly process personal data within the EU/EEA. However, we may need to transfer personal data outside this area. In this case, we will implement appropriate measures to ensure that your personal information remains protected and secure.
4. What rights do I have as a data subject?
Data subjects have the following rights regarding their personal data:
Right for access
You have the right to request access to your personal data. You have a right by request to receive information whether or not your personal data is being processed and the purpose for processing.
Right for rectification and erasure
You have a right to request the rectification, erasing, or supplementing the erroneous, unnecessary, incomplete or obsolete personal data. Erasure can only take place where personal data is no longer necessary in relation to the purposes for which is was collected.
Right to restriction of processing
In some cases you have a right to restrict the processing of your personal data.
Right to data portability
Insofar as you have yourself provided personal data on the basis of consent or contract and the data is processed automatically, you have the right to receive such data in machine-readable format and the right to transfer such data to another controller if this is technically feasible.
Right to object
In certain circumstances you have the right to object processing of your personal data.
Right to withdraw consent
If the processing of personal data is based on consent, you have the right to withdraw your consent to such processing at any time by notifying us.
Right to make a complaint to the supervising authorities
If you feel that we have not followed applicable data protection legislation, you have a right to make a complaint to the competent supervising authorities.
Please note that there might be situations in our client matters where applicable legislation and Bar Association Rules may restrict or prohibit you from exercising your rights.
In all matters related to the processing of your personal data and all situations regarding the exercising of your rights, you should contact Hästö & Co by:
- by e-mail: firstname.lastname@example.org, or
- by post at the address Advokatbyrå Hästö, Salingre, Engberg & Welin Ab, PL 183, 00131 Helsinki
Hästö & Co can request the data subject to further define their request in writing, and, if needed, the identity of the data subject can be authenticated before initiating any other measures.