Privacy policy

1. Introduction

Wikström & Partners Advokatbyrå AB (“Wikström & Partners,” “we,” “our,” or “us”) is committed to protecting and respecting your privacy. We strive to be transparent and clear about how we process personal data and ensure that our processing is in accordance with applicable laws. In this Privacy Policy (“Policy”), we inform you about how we collect and process personal data concerning contacts at clients, potential clients, and other business contacts, such as opposing counsels, job seekers and service providers. If you have any questions about this Policy or our processing of personal data, you are always welcome to contact us at info@wikstrompartners.se.

2. Who is the controller for the personal data we process?

The data controller is the organization that, alone or jointly with others, determines the purposes for which personal data are processed and how the processing is carried out. For the processing of personal data described in this Policy, Wikström & Partners Advokatbyrå AB, 556942-0606, with address Slottsbacken 8, 111 30 Stockholm, Sweden, is the data controller.

3. What personal data do we process and why?

Purpose

Execution and administration of client assignments

Legal basis Processing activities
Legal obligation
The processing is necessary to fulfil a legal obligation.
  • Where applicable, implementation of anti-money laundering checks in accordance with the Anti-Money Laundering and the Financing of Terrorism (Prevention) Act (2017:630)
Legitimate interest
The processing is necessary for our legitimate interest in managing and administering our relationships with clients, as well as conducting conflict of interest checks in accordance with our obligation to avoid conflicts of interest.
  • Execution of conflict of interest checks
  • Management, administration and documentation of assignments
  • Communication with relevant parties within the scope of client assignments, such as clients, opposing counsels and authorities
  • Management and administration of billing
Categories of personal data
Identity information, such as name and personal identification number, contact information, such as address, email, and telephone number, work-related information, such as job title and employer, and other information you provide to us in connection with client assignments.
Storage period
In accordance with the Code of Conduct of the Swedish Bar Association, we are required to archive documents related to client assignments for ten (10) years from the completion of the assignment or for a longer period if the nature of the assignment requires it.

 

Purpose

Marketing and business development

Legal basis Processing activities
Legitimate interest
The processing is necessary for our legitimate interest in marketing our services and/or maintaining a business relationship with clients and other organizations.
  • Sending information about legal news, invitations to events and seminars, and other information related to Wikström & Partners via email
  • Publication and analysis of posts on LinkedIn and on Wikström & Partners’ website
  • Creation and administration of contact list
Categories of personal data
Identity information, such as name, contact information, such as address, email, and telephone number, work-related information, such as job title and employer, information related to your LinkedIn account, such as profile picture, and any other information you provide us with.
Storage period
For processing based on our legitimate interest, we process your personal data for fifteen (15) months from your last contact with Wikström & Partners, or as long as your employer or principal has a business relationship with us. For processing based on your consent, we process personal data until you withdraw your consent.

 

Purpose

Registration and participation in events and seminars

Legal basis Processing activities
Legitimate interest
The processing is necessary for our legitimate interest in providing, managing, and following up on our events and seminars, to educate and to inform about our business and services.
  • Communication before and after participation, such as registration confirmation or management of incoming inquiries
  • Creation and administration of participant list
  • Evaluation and analysis of participation
Explicit consent

When processing personal data regarding allergies and special dietary requirements, we rely on explicit consent.

  • Administration of requests for special dietary requirements
Categories of personal data
Identity information, such as name, contact information, such as address, email, and telephone number, work-related information, such as job title and employer, and any other information you provide us with.
Special categories of personal data
In connection with the implementation of events and seminars that involve catering, we may process personal data regarding allergies and special dietary requirements.
Storage period

For processing based on Wikström & Partners’ legitimate interest, we process your personal data for fifteen (15) months from your last contact with Wikström & Partners, or as long as your employer or client has a business relationship with us. For processing based on your explicit consent, we process personal data until you withdraw your consent.

 

Purpose

Handling of inquiries and other communication

Legal basis Processing activities
Legitimate interest
The processing is necessary for our legitimate interest in managing incoming inquiries and handling other communication.
  • Handling inquiries and other communication via email, telephone or social media that are unrelated to clients or client assignments
  • Communication with employees of service providers
Categories of personal data
Identity information, such as name, contact information, such as address, email, and telephone number, work-related information, such as job title and employer, and any other information provided to us during such communication.
Storage period
For processing based on Wikström & Partners’ legitimate interest, we process your personal data for fifteen (15) months from your last contact with Wikström & Partners, or as long as your employer or principal has a business relationship with us.

 

Purpose

Recruitment procedures

Legal basis Processing activities
Legitimate interest
The processing is necessary for our legitimate interest in administering and evaluating job applications.
  • Administration and evaluation of candidates and received application
  • Communication with applicants
  • Communication with references
Legal obligation
The processing is necessary to fulfil legal obligations. If job application documents contain special categories of personal data, we process such data based on obligations under labor law.
  • Archiving of job application documents to meet requirements under anti-discrimination legislation
Explicit consent
If unsolicited job applications contains special categories of personal data, we only process such data based on the data subjects explicit consent.
  • Administration of received unsolicited job applications
Categories of personal data
Identity information, such as name and personal identification number, contact information, such as address, email, and telephone number, work and education-related information, such as educational certificates, work references, and previous employers, and any other information you provide us with, such as a portrait.
Special categories of personal data
We never request special categories of personal data in connection with recruitment procedures but may receive such information in certain cases.
Storage period

For processing based on Wikström & Partners’ legitimate interest, we retain your job application documents for twelve (12) months from the date of the application. When you apply for an advertised position, we retain your job application documents for two (2) years from the time the position is filled, in accordance with anti-discrimination legislation.

 

Purpose

Compliance with legal obligations

Legal basis
Processing activities
Legal obligation
The processing is necessary to fulfil a legal obligation.
  • Fulfilment of obligations related to accounting, auditing, and taxation.
Categories of personal data
Identity information, such as name and personal identification number, contact information, such as address, email, and telephone number, work-related information, such as job title and employer.
Storage period
In accordance with the Book-keeping Act (1999:1078), we are required to store accounting documents for seven (7) years from the end of the calendar year in which the financial year ended.

4. From where do we obtain your personal data?

Wikström & Partners continuously collects and receives personal data related to our business. Primarily, we process personal data that we directly receive from you or the organization you represent, for example, when you send us an email, register for an event we organize, or submit a job application. We may also collect and receive your personal data from other sources, such as clients, opposing parties, opposing counsels, and other parties involved in a client matter, such as courts or other authorities. Additionally, we may collect personal data from various websites and service providers, such as recruitment agencies, as well as private or public registers, such as the Swedish Companies Registration Office.

5. Who may we share your personal data with?

Wikström & Partners may share your personal data to third parties under certain conditions. We may do so in cases where (i) it has been specifically agreed upon between you and Wikström & Partners, (ii) it is necessary within the scope of an assignment to protect your interests, or those of your employer or principal, (iii) it is necessary for us to fulfil a legal obligation or comply with a decision of an authority or court, or (iv) in the event that we engage external service providers who perform tasks on our behalf. We only share your personal data with trusted third parties with whom we have entered into agreements ensuring that your personal data is processed in accordance with applicable data protection laws.

We may share your personal data with the following categories of recipients:

  • Clients, opposing parties and opposing counsels
  • Courts, arbitration tribunals, authorities, banks, insurance companies and other public organizations
  • The Swedish Bar Association
  • Service providers
  • Social media platforms

6. When may we transfer your personal data to a country outside of the EU/EEA?

We strive to process your personal data only within the EU/EEA. However, in certain cases, we may transfer your personal data to a country outside the EU/EEA, for example, when using a service provider with residence outside the EU/EEA. Whether we or a subcontractor transfer your personal data to a country outside the EU/EEA, we ensure that your personal data is subject to an adequate level of protection by implementing appropriate safeguards.

If the European Commission has determined that a country outside the EU/EEA, to which we transfer personal data (for example, because a service provider we engage is resident there), ensures an adequate level of protection equivalent to the level guaranteed by the General Data Protection Regulation (GDPR), we base the transfer of personal data on that transfer mechanism. You can read more about the transfer mechanism and the countries covered by such a decision here. If the receiving country is not covered by an adequacy decision or even if it is, we always implement other appropriate safeguards, such as entering into the European Commission’s standard contractual clauses with the recipient of your personal data. The conclusion of standard contractual clauses means that the recipient guarantees that the protection of personal data under the GDPR also applies to them. You can read more about the European Commission’s standard contractual clauses here.

We always assess on a case-by-case basis whether a transfer of personal data to a country outside the EU/EEA can be carried out and on what grounds. Where applicable, we implement additional safeguards regarding your personal data, such as organizational and technical security measures. For more information on the specific safeguards implemented in your case, please contact us at info@wikstrompartners.se.

In connection with client assignments, we may exceptionally transfer personal data to a country outside the EU/EEA, for example, if our client or the opposing party is resident in a country outside the EU/EEA. We may also transfer personal data to a country outside the EU/EEA through our service providers, but only on an exceptional basis. Your interaction with Wikström & Partners on LinkedIn also involves the transfer of personal data to the United States.

7. Your rights regarding your personal data

As the controller, we are responsible for processing your personal data in accordance with applicable data protection laws and ensuring that you can exercise your rights under the General Data Protection Regulation (GDPR). The following is an explanation of the rights granted to you under the GDPR. If you wish to exercise any of these rights, please contact us at info@wikstrompartners.se. More information about your rights can be found on the website of the Swedish Authority for Privacy Protection (“IMY”).

Right to information: You have the right to receive information about how we process your personal data. We primarily provide this information through this Policy, but we also respond to your inquiries.

Right of access: You have the right to know whether we process your personal data and, if so, to access the personal data in the form of a free copy of the register and information about how we process your personal data. Requests for a register extract can be sent to info@wikstrompartners.se. Please note that we may charge a reasonable fee for administering repeated requests for a register extract. We reserve the right to take reasonable measures to verify the identity of the person making the request for a register extract.

Right to rectification: You have the right to have inaccurate personal data we process about you rectified without undue delay, as well as the right to have incomplete personal data we process about you completed.

Right to erasure (“right to be forgotten”): You have the right to have the personal data we process about you erased under certain circumstances. This applies if:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • the processing is based on your consent, and you withdraw your consent while there is no other legal basis for the processing;
  • you object to the processing of personal data based on our legitimate interests, and there are no overriding legitimate grounds for the processing;
  • we process your personal data for direct marketing purposes, and you object to such processing;
  • we have processed your personal data unlawfully;
  • erasure is required for us to comply with a legal obligation to which we are subject;
  • the personal data relates to a child for whom you have parental responsibility, and the data was collected in connection with the offer of information society services (e.g., social media).

To the extent that our processing of your personal data is necessary for a specific purpose, such as defending a legal claim, we are not obliged to erase your personal data and may therefore deny your request.

Right to restriction of processing: You have the right to obtain restriction of our processing of your personal data under certain circumstances. This applies if:

  • you contest the accuracy of the personal data during the period in which we verify the accuracy of the personal data;
  • our processing of your personal data is unlawful, but you oppose the erasure of the personal data and instead request restriction of its use;
  • we no longer need the personal data for the purposes of the processing, but you need it to establish, exercise, or defend legal claims;
  • you have objected to our processing of your personal data based on our legitimate interests during the period in which we verify whether our legitimate grounds override your interests.

Right to data portability: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this personal data to another controller without hindrance from us. Where technically feasible, you have the right to request that we transmit such personal data directly to another controller. Your right to data portability presupposes that the processing is based on your consent or on a contract and is carried out by automated means.

Right to object: Under certain conditions, you have the right to object to our processing of your personal data. This applies when we process personal data to perform a task of public interest, as part of the exercise of public authority, or based on a legitimate interest. In such cases, we may only continue processing your personal data if we have compelling legitimate grounds that override your interests. You always have the right to object to the processing of your personal data for direct marketing purposes. After such objection, we are obligated to cease the processing your personal data for such purposes.

Right to withdrawal of consent: You have the right to withdraw your consent at any time regarding the processing of your personal data based on your consent. In that case, we will cease with the processing of your personal data. Requests for withdrawal of consent can be sent to info@wikstrompartners.se.

Right to lodge a complaint: If you have complaints about our processing of personal data, you have the right to lodge a complaint with IMY, which is the Swedish supervisory authority. You can find IMY’s contact information here.

8. Cookies

We use cookies on our website www.wikstrompartners.se. A cookie is a small text file that contains information that a website you visit requests to save locally on your computer, tablet, or mobile phone through your web browser. The cookie is stored on the device, and on the next visit to the website, the cookie is sent back to the website, allowing the device and selected preferences to be recognized. There are different types of cookies and many different use cases. More information about cookies is available on the Swedish Post and Telecom Authority’s website. Cookies used on www.wikstrompartners.se:

Name Domain Storage period Description Category
cookieyes-consent wikstrompartners.se 1 year Are used to remember website visitors’ consent preferences regarding our use of cookies Necessary
pll_language wikstrompartners.se 1 year Are used to remember website visitors’ language preferences Functional

 

We use necessary cookies for the basic functioning of the website. We do not need to obtain your consent for the use of necessary cookies. We use functional cookies to improve the user-friendliness of our website. For the use of functional cookies, we need to obtain your prior consent. You provide us with your consent by selecting “Accept” when you visit our website for the first time or by adjusting your cookie settings and consenting to the use of functional cookies. The consequence of not giving your consent is that your language settings will not be saved for your next visit to our website.

Through the use of cookies, we may collect personal data about you, such as your IP address. Regarding the collection of personal data based on necessary cookies, your personal data is processed based on Wikström & Partners’ legitimate interest in providing a good user experience to our website visitors. Regarding the collection of personal data based on functional cookies, your personal data is processed based on the consent you have provided.

You can change your cookie settings at any time by clicking on “Cookie settings” in the website’s footer. You always have the right to withdraw a given consent.

You can also manage your settings regarding cookies in your web browser. There, you can choose to block all cookies (including necessary cookies), regardless of the issuer. You can also review and delete cookies from different issuers to which you have previously given consent. Below you will find more information on how to manage cookies in your web browser:

9. Automated individual decision-making, including profiling

Wikström & Partners do not apply any processes for automated individual decision-making, including profiling.

10. Updates and contact information

We reserve the right to update this Policy. The current version was published on 30 May 2023. Please do not hesitate to contact us if you have any questions about this Policy, our processing of your personal data, or if you wish to exercise any of your rights.

 

Wikström & Partners Advokatbyrå AB, org.nr 556942–0606
Slottsbacken 8, 111 30 Stockholm
Tel.nr: +46(0) 8 410 613 40
E-post: info@wikstrompartners.se