Customer Register Privacy Statement

Controller and contact person

Sandström, Laukkanen & Lovén Attorneys Ltd, (2961072-6), c/o Technopolis Ruoholahti 1
Hiilikatu 3, 00180 HELSINKI, FINLAND.

Telephone or email:toimisto@sll-laki.fi

Contact person: Kristian Lovén +358 40 147 3256

Data subjects

In our register, we process personal data of potential, current and former private customers and contact persons of customer organisations as well as opponents.

Grounds for the processing of personal data and purpose of use

The activities of an attorney require the processing of personal data. The purpose of our register is to manage the information on our registered customers in an appropriate and timely manner during their customership, clarifications on the disqualification, customer register maintenance and development as well as reclamations.

Grounds for the processing of personal data:

  • Grounds for the fulfilment of a contract
  • Compliance with laws regulating attorney activities (customer’s basic information and identification information)
  • Collection of the opponent’s information to rule out any disqualification.

Processed personal data

In the register, we process the customers’ personal and contact information as well as other information necessary for the management of the customership and assignment. Such information is:

  • First and last name
  • Personal ID
  • Postal address
  • Telephone number
  • Email address
  • E-invoice address or invoicing email address

In connection with assignments, we also process personal data required for assignments based on law.

Regular data sources

Personal data is collected from data subjects and from public sources.
Safeguarding personal data and information security
Digitally processed personal data is protected and stored in the law office’s system, which can only be accessed by persons who need the data in question in the execution of their duties. The persons in question use personal logins and passwords. The personal data is protected from external use.
Regular disclosures and transfers of personal data
The controller uses external subcontractors in the processing of data. Such subcontractors are, for example, companies maintaining the invoicing systems. As a rule, personal data is otherwise not disclosed to third parties. Subcontractors and other partners taking care of the technical maintenance processing personal data may transfer personal data in accordance with the applicable legislation concerning privacy protection and this Privacy Statement. Agreements concerning the processing of personal data in accordance with the valid Data Protection Regulation have been concluded with the subcontractors. Personal data is not disclosed outside the EU.

Storage period for personal data

Customer data is stored in the register as long as the data subject is a customer of the law firm and for the duration of the reclamation and liability period based on the contract. After the termination of the customership, personal data is stored for a maximum of ten (10) years, unless data needs to be stored longer to clarify disqualification issues. Consent-based data is stored until the consent is withdrawn.

Rights of data subjects

The data subject has the right, at any time, to object to the processing of their personal data for direct marketing purposes. The data subject may give channel-specific direct marketing consents or bans to the law firm.
At any time, the data subject also has, in principle, the right in accordance with the applicable data protection regulation to:

  • be informed of the processing of their personal data;
  • get access to their personal data and check their data processed by the law firm;
  • request for rectification of inaccurate and incorrect data and supplementation of data;
  • request erasure of their personal data;
  • withdraw their consent and object to the processing of their personal data to the extent that the processing of the personal data is based on the data subject’s consent;
  • object to the processing of the personal data on the basis of a specific personal situation in so far as the grounds for the processing is the law firm’s legitime interest;
  • obtain their personal data in a machine-readable format and transfer the data to another controller. The law firm processes the personal data on the basis of the data subject’s consent automatically;
  • request the restriction of the processing of personal data.
    The data subject must submit a request concerning the exercising of the aforementioned rights in accordance with the Contacts section of this Privacy Statement. The law firm may ask the data subject to clarify the request in writing and verify the identity of the data subject before processing the request. The law firm may reject the implementation of the request on the grounds laid down in the applicable legislation.

Right to lodge a complaint with the supervisory authority

All data subjects have the right to lodge a complaint with the relevant supervisory authority or with the supervisory authority of the EU Member State where the data subject’s place of residence or workplace is located if the data subject believes their personal data has not been processed in accordance with the applicable data protection practices.

Mandatory information

The customer’s basic data and identification data are mandatory information. The reason for this is the compliance with laws regulating attorney activities.
Parties in a contractual relationship:
The contracting party’s basic information, data required by the collection of credit in a credit relationship (social security number).
Consequences if data is not disclosed
A customership cannot be launched if mandatory data is not disclosed.

Other personal data sources

Data is also received from customer companies, subcontractors and other partners. Data is also collected from subcontractors selling information services Data is also collected from the opponents and authorities during assignments. These parties operate as independent controllers and are responsible for the delivered personal data and their legitimacy.

Contacts

Request concerning the exercising of the data subject’s rights, questions arising from this Privacy Statement and other contacts must be submitted via email at: toimisto@sll-laki.fi. The data subject may also contact us personally or in writing:
Sandström, Laukkanen & Lovén Attorneys Ltd, c/o Technopolis Ruoholahti 1
Hiilikatu 3, 00180 HELSINKI, FINLAND

Amendments to this Privacy Statement

This Privacy Statement may be clarified or updated from time to time, such as when legislation is amended. This Statement was updated on (27 January 2019)