Privacy notice

Your integrity is important and it is key for us to ensure that your personal data are processed in a safe and legal manner. This Privacy notice explains how we process your personal data, as well as your rights as a data subject.

Törngren Magnell & Partners Advokatfirma KB (”TM & Partners”) processes personal data about you during the course of our business, such as when you engage us for legal services.

TM & Partners is the data controller for the processing of personal data described in this Privacy notice. You may find our contact details below.

We may in addition to this Privacy notice provide you with additional information regarding certain processing of personal data. Such additional information supplements and should be read together with this Privacy notice.

It is voluntary to provide us with personal data we request. However, if you refrain it may affect the services we provide, the newsletter, invites to seminars and other events that we may send to you and how we can process your job application.

1. Our use of your personal data

A. Legal services and obligations

We process your personal data when we conduct our business and provide our legal services to our clients. You may find below the categories of personal data we process, the purposes for the processing and the legal basis for the processing.

Categories of personal data

Purpose

Legal basis

1. Contact and identification information.
E.g. name, address, passport number (under certain circumstances), email address and workplace.

Fulfil legal obligations. E.g. to prevent money laundering and financing of terrorism as well as to rule out conflicts of interest.

Legal obligation.

Fulfilment of legal obligations in accordance with the Swedish Act on Measures against Money Laundering (SFS 1993:768) and to fulfil our obligations pursuant to the rules of the Swedish Bar Association.

2. Background information.
E.g.  corporate involvements and beneficial ownerships.

3. Financial information.
E.g. banking details, invoice and payment history.

Invoicing.
E.g. to be able to invoice for our services.

Legitimate interest.
Our legitimate interest consists of administering invoices.

4. Communication.
E.g. personal data in written and oral communications between you and us, together with such data set out in item 1 above.

Maintain the relationship and document decisions between us.
E.g. to be able to follow up on our discussions and to communicate with you.

Legitimate interest.

Our legitimate interest consists of documenting decisions between us and to communicate with you.

5. Data set out in items 1–2 above.

Perform legal services.

E.g. to conduct legal analyses, draft agreements and register a position you hold within a certain company with the Swedish Companies Registration Office.

Legitimate interest.
Our legitimate interest consists of being able to perform legal services on behalf of our clients.

6. Data set out in items 1–4 above.

Defend us from or make legal claims.
E.g. if you may have a legal claim against us or if we have a legal claim against you.

Performance of contract.

The processing is necessary for the performance of the contract entered into with you (e.g. reminder of correction). Should the claim be unrelated to the contract with you, will our processing be based on our legitimate interest to defend us against legal claims or to make legal claims.

How we receive personal data
We receive the personal data from you, our clients or our clients’ other advisers (e.g. legal and financial advisers), counterparties and their advisers or representatives (e.g. legal and financial advisers), your employer or other persons related to the engagement. We also collect your personal data from private and public databases (e.g. the Swedish Companies Registration Office and databases with information on corporate engagements).

Recipients of personal data
Personal data may be shared with IT-suppliers, providers of information services, providers of data rooms and under certain circumstances with other advisers. Personal data may also be shared with authorities, if required by law, arbitration tribunals, counterparties and their advisers as well as representatives.

Retention period
Personal data are retained in accordance with our obligations pursuant to the rules of the Swedish Bar Association to keep material pertaining to client engagements for ten years after completion of an engagement, or during a longer period if called for based on the nature of the engagement or client relationship. Personal data that we must process to fulfil our accounting requirements will be processed until the seventh year after the calendar year in which the financial year ended. Personal data processed to defend us against or make legal claims is processed until the end of statute of limitations.

Processing within the EU/EEA
Personal data are mainly processed on servers within EU/EEA. We may in order to provide our legal services, transfer your personal data to third parties outside the EU/EEA (e.g. local representatives or third party service providers). In such cases, we will take appropriate measures to ensure an adequate level of protection, e.g. by entering into standard contractual clauses.

B. Newsletters, invitations to seminars and events

We process your personal data when you register to our newsletters or to participate in our seminars or events we organise. You may find below the categories of personal data we process, the purposes for the processing and the legal basis for the processing.

Categories of personal data

Purpose

Legal basis

1. Contact and identification information.
E.g. name, title and email address.

Mailings and invitations.
E.g. to send newsletters, invite you to seminars and events.

Legitimate interest.
Our legitimate interest consists of being able to send mailing and invites.

How we receive personal data
We receive personal data from you or your employer.

Recipients of personal data
Personal data may be shared with IT-suppliers and companies that administer mailings and invitations.

Retention period
Personal data collected for the purpose of sending newsletters and invitations to seminars and other events to you will be retained until you unsubscribe to such mailings. Personal data, with the exception of contact details, collected in relation to your participation in a seminar or other event we organise, will be deleted as soon as the seminar or event has taken place.

Processing within the EU/EEA
See section A above.

Unscribe from mailings
If you no longer wish to receive mailing and invitations, you may unsubscribe at any time by emailing us at info@tmpartners.se.

C. Recruitment

We process personal data about you when you apply for a job with us. You may find below the categories of personal data we process, the purposes for the processing and the legal basis for the processing.

Categories of personal data

Purpose

Legal basis

1. Contact and identification information.
E.g. name, address and email address.

Administration of your application.
E.g. to process your application and determine whether we can offer you an employment.

Necessary prior to entering into a contract. The processing is necessary to take steps at your request to enter into an employment contract.


Legitimate interest.
Our legitimate interest consists of administering invoices.

2. Education and work experience.
E.g. degrees, employment history and form of employment.

3. Communication.
E.g. personal data in written and oral communications between you and us, together with such data set out in item 1 above.

How we receive personal data
We receive personal data from you, references that you have provided and from public sources (e.g. universities).

Recipients of personal data
Personal data may be shared with IT-suppliers, recruitment consultants and providers of evaluation services.

Retention period
Personal data collected for the purpose of recruitment will be retained during an ongoing recruitment process and will then be retained as long as an applicant, that has not been offered a position, has a right to take legal actions against us due to the recruitment process. Personal data are thereafter erased.

Processing within the EU/EEA
See section A above.

2. Security

We implement appropriate security measures to protect your personal data from unauthorised access, use, modification and dissemination. E.g. the processing is carried out in premises with appropriate physical safeguards and IT-systems with appropriate IT-security. When other legal entities than us, process personal data on our behalf, we ensure that they are bound by a data processing agreement and that we set requirements on security as well as confidentiality in accordance with applicable law.

3. Your rights

As a data subject, you have rights on how your personal data may be processed. Your rights include, amongst other, the following.

  • Right to information. You may at any time request information on the personal data we, as a data controller, process about you.
  • Right to access. You may request a copy of your personal data we process.
  • Right to rectification. You may request that we correct incorrect or incomplete information about you.
  • Right to erasure. You may request deletion of your personal data. This right applies in the following circumstances:
  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing is based on and we have no other legal basis for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • The personal data have been unlawfully processed.
  • The personal data must be erased for compliance with a legal obligation.

We may in certain cases be prevented from immediately erasing some of your personal data due to legal obligations or to establish, exercise or defend legal claims.

  • Right to restrict the processing. You may request that the processing of a certain personal data may only be processed for certain specific purposes. This right applies in the following circumstances:
  • You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure.
  • We no longer need the personal data for the purposes of the processing, but they are required by you to establish, exercise or defend legal claims.
  • When you have objected to our processing and during a period pursuant to pending a verification whether our legitimate base to process your personal data overrides yours.
  • Right to object. You may object to our processing of your personal data. We may in such case no longer process such personal data, unless we can demonstrate compelling legitimate bases for the processing which overrides your interest, rights and freedoms or for the establishment, exercise or defence of legal claims.
  • Right to submit a complaint to supervisory authorities. See section 4.

You may at any time request to exercise any of your rights by contacting us at info@tmpartners.se.

4. Right to submit complaints

If you believe that we process your personal data in breach of the GDPR or other data protection legislation, you may submit a complaint to the Swedish Authority for Privacy Protection (Sw. Integritetsmyndigheten).

5. Contact details

If you have any queries or feedback on how we process your personal data, please contact us at info@tmpartners.se.

Törngren Magnell & Partners Advokatfirma KB

Company registration number: 969715-1687

Jakobs Torg 3, SE-111 52 Stockholm

 

This Privacy notice may be updated from time to time. It was last updated on 24 February 2021.