MAAVI LAW – PRIVACY NOTICE
MAAVI LAW may collect and process personal data about you as a prospective or existing client, in connection with the performance of our legal advisory services or in relation to our duties as a law firm. This Privacy Notice informs you of the conditions of our processing of your personal data and your personal rights in this connection in accordance with the General Data Protection Regulation (“GDPR”). We reserve the right to amend this Privacy Notice at any time. 

DATA CONTROLLER
In most situations, we will act as the data controller for all the personal data we process. If you have any questions about our processing of your personal data or you wish to exercise your rights, you are always welcome to contact us at:

E-mail: mogens.vind@maavilaw.dk

As our service depends on your correct and updated personal data, we kindly ask you to inform us if there are any relevant changes regarding your personal data.

YOUR RIGHTS
As a data subject, you have certain rights according to the GDPR when your personal data are being processed. If you want to exercise one or more of your rights as a data subject, you must contact us in writing via the e-mail address indicated above.

Below is a specification of your rights when we process personal data about you.

• • You have the right to obtain access to your personal data being processed by us and to receive a copy of the data.
  • You also have the right to object to our processing of personal data about you, to request rectification or erasure of any personal data about you that you believe is incorrect or outdated, and you can request a restriction of our processing of personal data about you. Exercising some of these rights, such as the right to erasure, will require that certain conditions under GDPR are met.
  • To the extent that we process your personal data, you can always withdraw your consent to any future processing by sending us an e-mail. Withdrawal will not affect the lawfulness of the processing which has already taken place on the basis of your consent. If you choose to withdraw your consent, the processing of your personal data will cease and the data will be erased, unless there are objective grounds for their continued retention.

EXCEPTIONS
As a data subject, you are entitled to information about our processing of your personal data. However, the rules of the Danish Administration of Justice Act and the Code of Conduct for the Danish Bar and Law Society impose on us a duty of non-disclosure, which may require us in certain cases to decline disclosure to you if your personal data or the processing of them are to remain confidential.

We may also decline disclosure in order to safeguard essential private or public interests, where such interests are found to override your interest in receiving the information. We may also decline disclosure to you if you are already in possession of the information or if disclosing the information to you is impossible or would involve a disproportionate effort or would impair the achievement of the objectives of the processing.

Disclosure and transfer of personal data
In order for us to deliver our services to you, it may be necessary for us to disclose relevant personal data about you to our business partners. Your personal data are disclosed only in connection with case management and providing legal advice, and only when we are legally obliged to do so, or when you have given consent.

In addition, we may disclose your personal data to data processors, who are assisting us in our business operations. We only use data processors that provide sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the relevant data protection laws, including ensuring the protection of the rights of the data subject.

When disclosing your personal data, we will take steps to ensure that your personal data is protected against unintended loss or amendment, unauthorized publication and unauthorized persons accessing your personal data.

The Danish Data Protection Agency
If you wish to make a complaint about our processing of your personal data, you have the right to contact the Danish Data Protection Authority (“Datatilsynet”). Please see their website for more information: www.datatilsynet.dk (website in Danish).

PROCESSING OF PERSONAL DATA
MAAVI LAW will process the following personal data in the performance of our services:

SERVICES	PERSONAL DATA	PURPOSE	LEGAL BASIS	RETENTION	DISCLOSURES
Legal advice and services, including but not exclusively relating to litigation, corporate law, mergers and acquisitions, and competition law.	We will only process such personal data as is necessary for our stated purpose relating to clients, companies’ owners, directors, current and former employees, staff, customers, and suppliers. These may include name, address, date of birth, contact details, payroll, financial information, medical card and CPR numbers, terms of employment, plus any other necessary personal information relevant to our stated purpose.	Personal data will only be processed for the purpose of the provision of the legal advice and services for which we have been engaged.	Performance of a contract. OR Pursuit of our legitimate interests or those of a third party. OR Complying with our legal obligations. For Special Category personal data: Your explicit consent. OR The exercise or defence of legal claims.	The personal data will be retained for up to a period of 5 years after closure of the case. OR Any period required by relevant law.	We will only disclose your personal data as necessary for the purpose of the provision of the legal service for which we are engaged or when legally obliged to do so.
Client, supplier and partner relationships and managing enquiries.	We will only process such personal data as is necessary for our stated purpose relating to clients and potential clients. These may include name, address, email, phone number, company details and position, areas of interest.	Personal data will only be processed for the purpose of establishing and maintaining client, supplier and partner relationships and managing enquiries.	Performance of a contract. OR Pursuit of our legitimate interests or those of a third party.	Up to 5 years after the conclusion of the client relationship. OR Any period required by relevant law.	We will only disclose your personal data as necessary for the purpose of the relationship or when legally obliged to do so.
Statutory checks, e.g. Money Laundering, KYC	We will only process such personal data as is necessary for our stated purpose relating to clients and potential clients. These may include name, address, passport/driver’s license, CPR number, or medical card.	Personal data will only be processed for the purpose of fulfilling our duties for the statutory checks.	Complying with our legal obligations.	Up to 5 years after the conclusion of the client relationship. OR Any period required by relevant law.	We will only disclose your personal data as necessary for the purpose of the checks and when legally obliged to do so.