Advokatfirmaet Vingaardshus logo

+45 46 92 92 00

Privacy policy

INTRODUCTION

In order to provide legal counselling and other legal services, there is a range of personal data we need to process. Our privacy policy is intended to help you understand what data we collect, why we collect it and what we use it for. This is important information, so we hope you will take the time to read it.

Should you have any questions or require further information, please feel free to contact us.

CONTACT DETAILS OF THE DATA CONTROLLER

Advokatfirmaet Vingaardshus
Vingårdsgade 22
9000 Aalborg, Denmark
post@vingaardshus.dk
+45 46 92 92 00

OUR PROCESSING OF YOUR PERSONAL DATA

We process personal data that you or another party has provided to us, for example in connection with document preparation, legal proceedings or a dispute.

In connection with the provision of our services, we may process the following information about you:

Legal services:

If you are a client or a potential client of Advokatfirmaet Vingaardshus, we initially process your data in order to provide you with legal advice (in order to enter into an agreement or fulfil the agreement we have with you or the company you represent).

Depending on the circumstances, we may process your identity, contact and professional data, including your name, email address, telephone number, home address, job title, educational background and information about our business relationship. In addition, we process information about financial matters, including payment information and tax information. Subject to the type of case, we may also process data on personnel, salary and finance, health, criminal offences, trade union matters, information on religion, education, passport, driving licence, civil registration number, and family matters.

The legal basis for our processing is pursuant to section 6(1)(b) of the General Data Protection Regulation and our legitimate interest in managing the client relationship, cf. section 6(1)(f) of the General Data Protection Regulation.

Depending on the specific circumstances of the case or cases in which we assist you, we may also process sensitive personal data, cf. section 6(1)(f) and 9(2)(f) of the General Data Protection Regulation, and/or information about criminal offences, cf. section 8(3) and (4) of the Danish Data Protection Act.

As a law firm, we are subject to obligations under the Danish Money Laundering Act in connection with certain of our legal services, and therefore we will also process your personal data in this connection, including identity data, e.g. name, civil registration number, passport number, etc. We only process information obtained in accordance with the Danish Money Laundering Act – identity information and information about the business relationship – in order to fulfil our obligations under the Danish Money Laundering Act. The information is not used for commercial purposes. The legal basis for this processing is the Danish Money Laundering Act.

Development of existing or potential client relationships, etc:

We may also process your personal data for the purpose of maintaining and developing existing or potential client relationships as well as our relationship with business partners, business associates, etc.

In this context, we may process information about your name, title, company, address, telephone numbers, which networks you are part of and in some cases birthday and anniversaries, etc. The information is generally only collected if you choose to provide it to us, e.g. via your email signature, business card, etc. However, we may also collect data from other sources, e.g. publicly available information from your employer’s website or virk.dk.

The basis for processing your personal data is Advokatfirmaet Vingaardshus’ legitimate interest in maintaining and developing the above-mentioned relationships, cf. section 6(1)(f) of the General Data Protection Regulation.

Parties, counterparties, representatives and other third parties, including clients, employees and suppliers in bankruptcy estates

If you are a party, counterparty, representative or other third-party operator in a case handled by Advokatfirmaet Vingaardshus, we generally process your data in order to assist our client or the bankruptcy estate in the case in question.

We may process your identity, contact and professional data, including your name, email address, telephone number, your home address, your job title, your relation to the case and other general personal data included in the case, e.g. financial data.

The legal basis for our processing is our legitimate interest as a lawyer in assisting our client or the bankruptcy estate with the handling of the case, cf. section 6(1)(f) of the General Data Protection Regulation. In certain cases, the legal basis may also be compliance with a legal obligation, cf. section 6(1)(c) of the General Data Protection Regulation.

Depending on the specific circumstances of the case(s) in which we assist, we may also process sensitive personal data about you, cf. sections 6(1)(f) and 9(2)(f) of the General Data Protection Regulation, information about criminal offences, cf. section 8(3) and (4) of the Danish Data Protec-tion Act and/or information about your civil registration number, cf. sections 6(1)(f) and 9(2)(f) of the General Data Protection Regulation, cf. sections 11(2)(4) and 7(1) of the Danish Data Protection Act. We may also process your sensitive personal data if it has been made public by you and if it is rel-evant to the case we are processing, cf. sections 6(1)(f) and 9(2)(e) of the General Data Protection Regulation.

We generally only process the data that is necessary to provide our services or that we are legally obliged to process.

Events etc.

When you register for an event, we register and process your personal data such as name, email address, telephone number, title (if applicable) and company name. Our processing takes place for the purpose of communicating about and organising the event. In addition, based on a specific assessment, we may use the information for the preparation of participant lists, which are delivered to the participants at the meeting, including the lecturers, and the material is used in connection with the sending of invitations and the preparation of courses and other events.

We may take photos during events, which we will use on Advokatfirmaet Vingaardshus’ social media profiles (Facebook, LinkedIn and Instagram). These will only be situational photos that are intended to depict the event itself and not profile photos that are intended to depict you. If you do not want photos of you to be shared on the social media mentioned above, you can always notify us of this, possibly in connection with registering for the event.

The basis for processing your personal data is Advokatfirmaet Vingaardshus’ legitimate interest as the processing of your personal data is necessary for the organisation of the event, cf. section 6(1)(f) of the General Data Protection Regulation.

Social media sites

When you visit our pages on Facebook, LinkedIn, Instagram and YouTube, please be aware that your personal data is processed. We only process your personal data when you actively interact with our content, including liking, commenting or sharing.

You should be aware that the providers of the social platforms and services process your personal data for the purpose of, among other things, compiling statistics for the owner of a given page. We only use such data in anonymised form and therefore do not process personal data in this context. We refer in this regard to the data policies of Facebook, LinkedIn, Instagram and YouTube for further information. We also refer to Facebook’s purpose for processing personal da-ta.

In all cases, we encourage you not to submit sensitive personal data on social media in general; should you need to send such data to us, please do so in encrypted form via our website.

The legal basis for the processing of your personal data is Advokatfirmaet Vingaardshus’ legitimate interest in making content available on social media to the users who have chosen to follow Advokatfirmaet Vingaardshus for image branding and marketing purposes, cf. section 6(1)(f) of the General Data Protection Regulation.

Newsletters

When you subscribe to our newsletters, we register and process your personal data such as first name and email address, as well as the subject areas you select. Our processing takes place for the purpose of sending newsletters within the areas of interest you have selected.

Following your consent to receive newsletters from us, the legal basis for sending newsletters is the legitimate interests of Advokatfirmaet Vingaardshus. We use your personal data to ensure that you receive the requested material, cf. section 6(1)(f) of the General Data Protection Regulation.

TIME LIMITS FOR DELETION/STORAGE

We strive to delete (or anonymise) personal data as soon as it has no relevance.

However, as lawyers, we are subject to legal liability, under which the limitation period for such cases is 10 years. On this basis, we retain the information necessary for a case during this period.

We also store personal data in accordance with other legislation, such as the Danish Bookkeeping Act, which means that for certain data there will be a minimum storage period.

We store accounting material and information obtained for compliance with the Danish Money Laundering Act for a period of 5 years, as required by the Danish Bookkeeping Act and the Danish Money Laundering Act.

Personal data provided when subscribing to newsletters is deleted after receipt of your cancellation.

We store personal data collected in connection with events for up to 3 years after the event has ended. Personal data linked to one of our social media posts is deleted no later than 5 years after publication.

Comments that are not linked to a post from us are deleted when you remove your comment yourself.

YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION

In connection with our processing of your personal data, you have several rights:

  • The right to receive information about how we process your personal data (duty of disclo-sure).
  • The right to access your personal data.
  • The right to have inaccurate personal data rectified.
  • The right to have your personal data erased.
  • The right to object to your personal data being used for direct marketing purposes.
  • The right to object to automated individual decisions, including profiling.
  • The right to transfer your personal data (data portability).

 

All of the above rights are handled manually by contacting our data controller listed in point 1.

We may refuse requests that are unreasonably repetitive, require disproportionate technical intervention (e.g. to develop a new system or significantly change an existing practice), affect the protection of others’ personal information, or something that would be extremely impractical (e.g. requests for information that exists as backups).

If we can rectify information, we will of course do so free of charge, unless it requires disproportionate effort.

We endeavour to maintain our services in a way that protects information from erroneous or ma-licious destruction.

Therefore, when we erase your personal data from our services, we may not always be able to delete associated copies from our archive servers immediately, and the data may not be removed from our backup systems.

You have the right to complain to the Danish Data Protection Agency at any time. You can find more information about this at www.datatilsynet.dk

INFORMATION THAT WE DISCLOSE

We do not disclose personal data to companies, organisations and individuals outside of Advokatfirmaet Vingaardshus. However, the following are exempted:

  • Disclosures with your consent
  • We disclose personal data to companies, organisations or individuals if we have your consent. We require an active opt-in for the disclosure of all personal data.
  • For external data processing
  • We disclose personal data to our business partners or other trusted companies or individuals who process it for us. Their processing is based on our instructions and in accordance with our privacy policy and other applicable confidentiality and security measures, such as our data processing agreement.
  • For legal reasons
  • We disclose personal information to companies, organisations or individuals if we believe in good faith that access, use, preservation or disclosure of the information is necessary to:
    • Comply with applicable laws, regulations, legal process or lawful requests by public authorities.
    • Enforce applicable terms of service, including investigation of potential violations.
    • Detect, prevent, or otherwise protect against fraud, breaches of security, or technical issues.
    • Keep Advokatfirmaet Vingaardshus, our employees or the rights, property or safety of the public free from harm, as required or permitted by law.

 

We may share non-identifying information with the public and our partners.

For example, we may share anonymised information with the public to show general trends with-in each area of law.

INFORMATION SECURITY

We have implemented the following organisational and technical measures at Advokatfirmaet Vingaardshus to protect your information:

  • Antivirus protection on all IT systems that process personal data.
  • Backup of all IT systems that process personal data.
  • Use of industry-typical IT systems for the processing activities.
  • Restricting access to personal data so that access is only granted where necessary.
  • Data processing agreements with suppliers who process personal data on behalf of Advokatfirmaet Vingaardshus.
  • Non-disclosure agreements with employees who need to process personal data.
  • Guidance on the secure processing of personal data and information assets for employees with access to information systems.
  • Conducting the above risk assessment and documentation of all systems that process personal data to ensure an informed basis for the security level of personal data processing at Advokatfirmaet Vingaardshus.

COMPLIANCE AND CO-OPERATION WITH SUPERVISORY AUTHORITIES

We regularly review our compliance with our own privacy policy.

We also comply with several self-regulatory security policies.

When we receive formal written complaints, we contact the sender to follow up on the complaint.

We co-operate with the relevant regulatory authorities, such as the Danish Data Protection Agency, to resolve complaints about the transfer of personal data that we cannot resolve directly with our users.

CHANGES

Our privacy policy may change on a regular basis.

We will not restrict your rights under this privacy policy without your explicit consent.

Any changes to this privacy policy will be indicated on this page; if there are material changes, we will provide separate notice of them (for certain services, we will, among other things, provide notice of changes via email).

Contact us

Do you have any questions or do you need assistance? Or do you wish us to call you?

Send us a message here.

Please do not send us any personal information here. You can do this through a secure mail here.

YOUR MESSAGE HAS ARRIVED

Thank you for your message. We will get back to you as soon as possible.

Best regards

Advokatfirmaet Vingaardshus