Processing of personal data

– information under the General Data Protection Regulation (2016/679/EC)

OAK ONE Advokat AB is responsible for the personal data received in connection with assignments or otherwise processed when the assignment is prepared or administered. You are not required to provide us with personal information, but without it we are unable to fulfil an assignment, as we need it to carry out necessary policies to control conflict of interest, money laundering and terrorism.

We process personal data in conjunction with engagements so we can meet the requirements to which we are subject by law and the regulations of the Swedish Bar Association, our commitments, and safeguard our clients’ interests as well as perform administrative tasks in conjunction with engagements.

We handle the data to perform mandatory conflict of interest checks, anti-money laundering and anti-terrorism financing controls, to perform and manage the assignment, to safeguard your interests and for accounting and billing purposes. This data is processed only if there is a legal basis for the processing, such as it being needed for us to fulfil our agreement with you as a client, allowed after a balance of interests (e.g. marketing), needed to fulfil a legal obligation (e.g. send information to the Swedish Tax Agency) or, when applicable, subject to your consent. The data can also be used for business and method development, market analysis, statistics and risk management. The data processed for developing and analyzing the business is treated based on our legitimate interest in developing the business and communicating with our contacts.

We will not disclose personal data to third parties other than when (i) it is specifically agreed between the law firm and yourself, (ii) when it is necessary within the framework of an assignment to exercise your rights, (iii) if it is needed for us to comply with a statutory duty or to comply with authority decisions or court rulings; or (iv) if we hire third-party service providers who perform assignments on our behalf. The information may be disclosed to courts, authorities, counterparties, and counterparty counsels if necessary to safeguard your rights.

Personal data is stored, in accordance with the duty of the law firm according to the Code of Professional Conduct for Members of the Swedish Bar Association, for a period of ten years from the date of completion of the case or such longer period following from the nature of the matter. Data processed for developing, analyzing, and marketing the law firm’s activities is stored for a period of three years after the last contact. If you unsubscribe from newsletters or the like, the information will be deleted immediately.

You are entitled to request information from the law firm regarding the use of your personal data at no charge. We will correct or delete information that is incorrect or limit the processing of such information at your request or on our own initiative. You also have the right to request that your data is not processed for direct marketing purposes. Further, you have the right to obtain your personal information in a machine-readable format or, if technically possible, to transfer the data to a third party that you instruct. If you are dissatisfied with our treatment, you can file a complaint with a supervisory authority, which in Sweden is Integritetsskyddsmyndigheten (www.imy.se).

The above rights may be limited by the duty of confidentiality and archiving obligation applying to members of the Swedish Bar Association.

Anyone with objections about, or comments on, the way we process personal data has the right to contact or file a complaint with the Swedish Authority for Privacy Protection (Sw. Integritets- skyddsmyndigheten), which is the supervisory authority for our processing of personal data.