Information on personal data processing

What is personal data and what does it mean to process it?

Personal data is any information that can be attributed to a living natural person. It may, for example, be a name, a social security number or a telephone number. All processing of personal data submitted to Wesslau Advokatbyrå is processed in order for us to fulfil our obligations to you as a client. Processing also takes place in order for us to comply with the rules of the Swedish Bar Association and other relevant regulations that apply to our business.

Your personal data will also be processed by our contractors when they carry out activities involving the processing of personal data. For example, we have engaged contractors to carry out activities relating to the provision of IT systems. All contractors who process personal data on our behalf are covered by data processing agreements that ensure that your personal data is processed in accordance with applicable regulations. As a general rule, the Law Firm is always the controller of the personal data processed.

How Wesslau Law Firm processes your personal data

Wesslau Advokatbyrå protects the privacy of its clients, partners and employees and is committed to always complying with applicable data protection regulations. Everyone has the right to protection of their personal data.

Why Wesslau Law Firm processes personal data

Wesslau Advokatbyrå receives your personal data when you enter into an assignment agreement with us and when you provide us with your personal data to receive marketing material such as newsletters.

Wesslau Advokatbyrå also receives personal data in connection with employment procedures or in connection with the conclusion of supplier agreements with us where contact details of employees of the supplier are stated.

Wesslau Advokatbyrå processes personal data in order to fulfil the agreements with clients that Wesslau Advokatbyrå has entered into. Processing also takes place in order to comply with the regulations that apply to companies in general, such as accounting rules, as well as rules that are specific to lawyers’ activities, such as rules on money laundering. The right to process personal data is based on the agreement between the data subject and Wesslau Advokatbyrå, on a legal obligation or on the consent of the data subject. Wesslau Advokatbyrå may also process personal data as a basis for marketing in the form of, for example, invitations to seminars and other events. The right to process your personal data for marketing purposes is based on a balancing of interests that Wesslau Advokatbyrå carries out before we process your personal data.

Your rights as a data subject

If your personal data is registered with Wesslau Advokatbyrå, you as a data subject have the right to receive information about which of your personal data Wesslau Advokatbyrå processes and to object to certain types of processing. If you wish to receive information about which personal data is processed, you can request this in writing at the address stated on the first page. If Wesslau processes your personal data on the basis of consent, you always have the right to withdraw such consent.

What are your rights regarding your personal data at Wesslau Advokatbyrå?

You have the right to request the information we hold about you. You can do this by requesting an extract from the register of your personal data.
You have the right to correct the personal data we hold about you or to supplement the information. You then contact Wesslau Advokatbyrå.
You have the right to request the restriction of certain processing of your personal data.
You have the right to have your personal data erased.
You have the right, when technically possible, to have the information you have provided to Wesslau Advokatbyrå transferred to yourself or another party (so-called portability of your personal data).

To whom do we disclose your personal data?

Recipients who are independent data controllers:

By law, we are also obliged to disclose certain personal data to authorities such as the Swedish Enforcement Authority.

Data processors:

How your personal data is processed in the event of bankruptcy

Wesslau Advokatbyrå employs lawyers who undertake work as external bankruptcy trustees. Wesslau Advokatbyrå therefore needs to process certain personal data in order to be able to perform an appropriate bankruptcy administration.

Two different data controllers

In the event of bankruptcy, a separate legal entity is created, represented by a bankruptcy trustee. The bankruptcy estate is the data controller for the processing that takes place within the framework of the bankruptcy estate’s activities, i.e. the bankruptcy estate is responsible for ensuring that such processing takes place in accordance with applicable data protection regulations. Wesslau Advokatbyrå is the data controller for the processing of personal data that takes place within the framework of the law firm’s normal operations.

What personal data is processed?

When processing a bankruptcy, the bankruptcy estate handles necessary personal data such as name and social security number, contact details, property designation, vehicle registration number, IP number, bank details and work-related personal data such as salary, trade union membership and health.

Purpose and legal basis

The specific purposes of the processing of personal data in a bankruptcy are to enter into, manage and perform contracts, to fulfil accounting obligations, to draw up the bankruptcy estate inventory and the trustee’s report, to decide on wage guarantees, to ensure that creditors are not disadvantaged and to comply with the other obligations incumbent on the bankruptcy trustee by law.

Wesslau Advokatbyrå and the bankruptcy estate process personal data in the bankruptcy with a legal basis in the fulfilment of contracts, balancing of interests for the handling of relevant business documents, legal obligation for the many obligations incumbent on the bankruptcy trustee under law and in the fulfilment of a task of public interest/exercise of authority in, for example, decisions on wage guarantees. The sensitive personal data processed by Wesslau Advokatbyrå and/or the bankruptcy estate in the bankruptcy proceedings is done on the basis of labour law obligations or to establish, assert or defend legal claims.

Categories of persons

The bankruptcy estate and Wesslau Advokatbyrå process personal data of, among others, representatives of the bankruptcy company, bankruptcy debtors, representatives of creditors, debtors, shareholders, employees, guarantors, customers, suppliers, auditors and accountants, the state, banks, third parties and family members.

Confidentiality and storage

The bankruptcy estate and Wesslau Advokatbyrå handle the personal data included in the bankruptcy with appropriate confidentiality. Personal data linked to the bankruptcy may be disclosed to other actors in the handling of the bankruptcy. These may be group companies, service providers and other consultants or authorities. In some cases, third parties may become independent controllers, joint controllers with the bankruptcy estate or the bankruptcy estate’s data processor.

The personal data in question is processed for as long as it is necessary for the bankruptcy administration and is normally stored for 10 years in accordance with the Swedish Bar Association’s guidelines.

Processing of personal data outside the EU/EEA

We always endeavour to process your personal data within the EU/EEA. However, in some cases, the data may be processed in countries outside the EU/EEA. Your personal data will then also be processed with an adequate level of protection comparable to and at the same level as the protection offered within the EU/EEA.

We take data protection very seriously and protect your rights. We welcome your questions about the processing of personal data.

E-mail: dataskydd@wadv.se

Telephone number: 08-407 88 00

If you are not satisfied with the way we process your personal data, you can always lodge a complaint with the Data Protection Authority.