Privacy policy
This Privacy Policy applies to Advice Skatt KB and Advice Familjerätt AB.
This Privacy Policy was last updated in November 2023. Advice reserves the right to amend and update its Privacy Policy.
Data Controller
Advice Skatt KB and Advice Familjerätt AB belong to the same group and operate in shared office premises. They have also chosen to be present on the same website and therefore apply the same Privacy Policy for the processing of personal data carried out by each company. However, each individual Advice company is the data controller for the personal data processed in relation to its own clients.
Accordingly, Advice Skatt KB is the data controller for clients who engage Advice Skatt KB, while Advice Familjerätt AB is the data controller for clients who engage Advice Familjerätt AB. If you apply for employment with either company, the company to which you apply is the data controller.
As a data subject with either company, you may always use the contact details set out in this Privacy Policy or the phone numbers provided on the website, regardless of which company you are a client of or otherwise in contact with.
Advice Skatt KB and Advice Familjerätt AB are hereinafter jointly referred to as “Advice”, “we”, “us”, or “our”.
Privacy and Processing of Personal Data
Your privacy is important to us, and it is essential that your personal data is processed in a secure and lawful manner. We have therefore implemented appropriate technical and organisational security measures to protect your personal data against, for example, loss and unauthorised access.
In this Privacy Policy, we describe how your personal data is processed, as well as the rights you have as a data subject. Advice processes personal data in the course of its business, for example when you contact us to request legal services. We will also process your personal data if you apply for employment with us.
As a client of Advice, you will automatically receive our newsletter, but you may unsubscribe at any time by clicking the unsubscribe link at the bottom of the newsletter or by emailing us at info@advice.se.
Collection of Personal Data
The majority of the personal data we process is provided by you or your employer, or by parties to whom you refer us for information. We may also receive personal data from your counterparties, their advisers, or representatives. In addition, we may obtain information from authorities or other public registers, and, in recruitment cases, from social media.
Types of Personal Data, Purposes, and Legal Basis
Advice processes personal data in connection with the provision of our legal services and in the course of running our business. We may also process your data if you apply for employment with us.
The main categories of personal data we process are name, personal identity number, other identification details, client number, address, email address, phone number, and other contact details.
The purposes of processing are to carry out anti-money laundering checks, to perform and administer assignments, to safeguard your or our client’s interests, and for accounting and invoicing purposes. We may also process your personal data for other legitimate purposes such as marketing, recruitment, or risk management.
The legal grounds for processing your personal data depend on the context of your interactions with us.
The legal bases for processing depend on the context of your contact with us and may include: consent, performance of a contract, or taking steps prior to entering into a contract, compliance with legal obligations (such as anti-money laundering checks), or legitimate interest, where we have assessed that our legitimate interest outweighs your interests or fundamental rights and freedoms (for example in marketing).
Recipients of Personal Data
Because your privacy is important to us, we will only disclose your personal data to third parties if you consent, if it is necessary to perform our assignment, or if required by law.
We also transfer personal data to our partners, such as IT providers, who process personal data on our behalf.
Transfer of Personal Data to Third Countries
Advice does not transfer your personal data to countries outside the EU/EEA unless it is necessary for the performance of our assignment. Where such transfers occur, they are carried out in compliance with applicable data protection laws, e.g. to countries deemed to provide an adequate level of protection, or by implementing appropriate safeguards such as agreements based on standard contractual clauses together with additional protective measures.
Storage Period
Advice stores personal data in accordance with our retention policy. We never retain data longer than necessary for the purpose of processing, or longer than required by law or regulation (e.g. anti-money laundering checks or bookkeeping).
Typical retention periods are:
- 5 years (anti-money laundering)
- 7 years (bookkeeping)
- 10 years from the closing of a matter, or longer if required by the nature of the matter
Personal data relating to job applicants is stored for the duration of the recruitment process and thereafter deleted unless you consent to longer storage.
Your Rights
As a data subject, you have several rights. It is important to note that these rights are not absolute, and a request to exercise them may not always result in action from us. Your rights include, among others:
Right of access – you may request confirmation of whether we process personal data relating to you and, if so, obtain a copy of such data (a data subject access request).
Right to rectification – you may request correction or completion of inaccurate or incomplete data.
Right to object – you may object at any time to our processing of your personal data. If we cannot demonstrate compelling legitimate grounds to continue processing, we must cease processing.
Right to restriction – in certain cases (e.g. if you object to processing) you may request restriction, which temporarily limits our use of your data other than for, for example, legal claims.
Right to erasure – in some cases, you may request deletion of your personal data. If the data remains necessary for the fulfilment of our assignment, or for the establishment, exercise, or defence of legal claims, we cannot erase it.
Right to data portability – if we process your data on the basis of a contract, you may, in some cases, obtain your personal data for transfer to another data controller.
Complaints
If you believe that Advice processes your personal data in breach of the General Data Protection Regulation (GDPR), or if you are otherwise dissatisfied with our processing, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Contact Details
If you have any questions about this Privacy Policy or our processing of your personal data, please contact us using the details provided on our website or by email at info@advice.se.
