GDPR – Enhanced Protection for Your Personal Data
GDPR stands for General Data Protection Regulation. The purpose of the regulation is to strengthen the protection of personal data in a harmonized manner across the EU Member States. It grants extended rights to individuals whose data is processed, imposes significantly higher penalties on those who fail to comply, and gives supervisory authorities (in Sweden, the Swedish Authority for Privacy Protection, Datainspektionen) greater enforcement powers.
Core Principles of the GDPR
All articles in the GDPR are based on six core principles, which also form the framework for Albatross’s data processing activities.
- Lawfulness – All personal data processing must be supported by a legal basis.
- Transparency – Data subjects must be informed about how their data is processed.
- Purpose Limitation – Data must be collected for specific, pre-defined purposes and not processed for incompatible purposes.
- Storage Limitation – Personal data must not be stored longer than necessary, and storage duration should, where possible, be predetermined.
- Data Minimization – Personal data must be relevant and limited to what is necessary in relation to the purpose of the processing.
- Integrity and Confidentiality – Personal data must be protected through confidentiality, access controls, and technical safeguards. Albatross implements additional protective measures when processing sensitive data or data related to individuals with protected identities.
Legal Basis for Processing Personal Data
Albatross must always base its data processing on one of the legal grounds provided in the GDPR. While six legal bases are provided, four are primarily relevant to Albatross:
- Legal Obligation – Processing necessary to comply with legal obligations.
- Consent – The data subject has given consent to the processing of their personal data.
- Performance of a Contract – Processing necessary to fulfill a contract with the data subject.
- Legitimate Interests – When we determine that Albatross’s interest in processing personal data outweighs the data subject’s interest in not having the data processed. In such cases, Albatross has a legitimate interest to proceed with the processing.
Clients of Albatross Law Firm Ltd
In evaluating whether we can accept an engagement, in managing assignments, and in fulfilling a mandate, it is necessary for us to process personal data. As a rule, personal data is provided by the client, but it may also be supplemented with data from private and public records or other external sources.
The purpose of processing personal data is to fulfill the engagement agreement with you as a client or to comply with legal obligations. These also constitute the legal bases for the processing. For the same purposes, we often need to process data of representatives and beneficial owners, based on Albatross’s legitimate interest in managing the matter.
Sensitive personal data may also be processed for the above purposes, based on the client’s explicit consent or for the establishment, exercise, or defense of legal claims.
The personal data we process may be used for marketing purposes. Such processing is based on Albatross’s legitimate interest. If you have received unsolicited communications from us, you have the right under the GDPR and the Swedish Marketing Act to object to further messages. You may do so by clicking the unsubscribe link in the email or by contacting us at info@albatross.law.
Personal data may, for the purposes mentioned above, be transferred to external parties and, where necessary, to countries outside the EU/EEA (third countries) or to an international organization. Such transfers will only occur if the data is adequately and appropriately protected.
Albatross does not retain data longer than necessary to fulfill the above purposes. After an engagement is concluded, personal data is generally retained for 10 years in accordance with the guidelines of the Swedish Bar Association. However, specific processing purposes may require a longer retention period.
Contact with Albatross Law Firm Ltd
To handle your matter and respond to you when you contact us, we need to store and use your name, email address, and any other contact details you provide. Albatross is responsible for the personal data we collect. Our initial processing of your data is based on our legitimate interest in following up on your inquiry. Therefore, we store your data only for the time necessary to respond to your questions.
Cookies
We use cookies to provide you with the best possible experience on our website. The use of cookies is regulated by the Electronic Communications Act, which requires us to obtain your informed consent to use cookies when you browse our website. This means that you must receive information about the use of cookies, what they are used for, and how to avoid them, before you give your consent. The Swedish Post and Telecom Authority (swedish: Post- och Telestyrelsen) is responsible for supervision.
What Types of Cookies Do We Use?
A cookie is a small text file stored on your computer or mobile device through your browser. There are different types of cookies, and Albatross uses both first-party cookies (set by us) and third-party cookies (set by external providers). Our cookies also have varying lifespans. We use both session cookies, which are stored temporarily and deleted when you close your browser, and persistent cookies, which are stored for a longer period.
First-Party Cookies
We primarily use first-party cookies to show you new content on the website since your last visit. These include both session cookies and persistent cookies, stored for a maximum of 24 months.
How Can I Prevent or Delete Cookies?
If you limit or delete cookies, you may miss out on some functionality on our website. You can delete installed cookies and change your cookie settings in your browser. Since browsers vary, consult the help section of your browser for guidance on adjusting cookie settings to suit your preferences. Instructions are available for managing cookies in Google Chrome, Safari, Internet Explorer, and Mozilla Firefox.
Want to Know More About Cookies and Their Regulation?
For more information about cookies and the Electronic Communications Act, visit the website of the Swedish Post and Telecom Authority.
Your Rights and How to Contact Us
As a data subject, you have the right to transparency regarding how your personal data is processed. This means you may request access to information about the processing. You also have the right to withdraw your consent at any time, request correction of inaccurate data, restriction of unnecessary processing, deletion of unjustified processing, and in some cases, the right to data portability. You may also contact the Swedish Authority for Privacy Protection (IMY) (swedish: Integritetsskyddsmyndigheten) at imy@imy.se to submit a complaint.
You are always welcome to contact us at info@albatross.law if you wish to exercise your rights or have questions or comments related to our processing of personal data.