Below, you can read the privacy policy of CLM Advokater Advokatanpartsselskab (hereinafter "we", "us"), which describes how we process personal data when acting as a data controller. This applies in a number of situations, including the handling of our clients' cases, the recruitment of new employees, and marketing activities.

We process personal data in accordance with applicable data protection legislation at all times. The current rules for the processing of personal data are set out in the General Data Protection Regulation (Regulation No. 2016/679 of 27 April 2016) and the Danish Data Protection Act (Act No. 502 of 23 May 2018).

1. WHO WE PROCESS PERSONAL DATA ABOUT

We process personal data about our clients, counterparties, suppliers, employees, business partners, job applicants, users of our website, and recipients of marketing information, etc.

2. WHERE DATA IS COLLECTED FROM

Personal data is collected directly from you, your employer, your advisor, or another third party, such as our clients, public authorities, the Civil Registration System (CPR), auditors, the police, or business partners, etc. In addition, we may use cookies to collect personal data about you, such as your IP address or other identifiers, when you visit our website.

The source depends on the context in which the personal data is used, including the specific circumstances of the case.

3. HOW WE PROCESS DATA

"Processing" of personal data includes any activity to which personal data is subjected, such as collection, registration, systematization, organization, storage, adaptation, alteration, retrieval, use, or disclosure.

We only process personal data when it is necessary for specific purposes and there is a legal basis for doing so.

Below you can read when, how, and for what purposes we collect and use your personal data:

• Processing of personal data on our website
• Processing of personal data in connection with recruitment
• Processing of personal data in connection with the practice of law
• Processing of personal data in connection with the establishment of client relationships, client management, and marketing

4. DISCLOSURE OF PERSONAL DATA

We only disclose your personal data to external parties when necessary and when there is a legal basis for doing so. This may include public authorities, private companies or individuals, foundations, associations, etc., depending on the nature of the matter. In addition, we entrust data to our data processors (e.g., IT providers).

Our employees are only granted access to your personal data if they have a work-related need to access it.

5. TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EU/EEA

Transfer of personal data to a country outside the EU/EEA that has not been deemed secure by the European Commission, because data protection rules may be less stringent than in Denmark and the rest of the EU/EEA, may take place on the basis of various transfer mechanisms that establish a framework ensuring adequate data protection. Examples include entering into the European Commission's standard contractual clauses on data protection with the recipient and implementing supplementary measures, or relying on an adequacy decision from the European Commission confirming that appropriate data protection is in place in such countries. In specific cases, transfers to such countries may also take place in accordance with Article 49(1) of the GDPR, for example, when the transfer is necessary for the establishment, exercise, or defense of legal claims.

6. STORAGE AND DELETION

We delete your personal data when it is no longer necessary for the purpose or purposes for which it was collected and processed.

We have internal guidelines for the retention period of all categories of personal data, which are established in accordance with the obligations we are subject to under applicable law, including documentation and audit requirements.

7. YOUR RIGHTS

You have a number of rights under data protection regulations regarding our processing of your data. Please contact us if you wish to exercise your rights.

You have the following rights:

• RIGHT OF ACCESS
  You have the right to access the personal data we process about you, as well as a range of additional information.
  ‍
• RIGHT TO RECTIFICATION
  You have the right to have inaccurate personal data about you rectified.
  ‍
• RIGHT TO ERASURE
  In specific cases, you have the right to have your personal data erased before the time of our standard general erasure occurs.
  ‍‍
• ‍RIGHT TO RESTRICTION OF PROCESSING
  In certain cases, you have the right to restrict the processing of your personal data.

• RIGHT TO OBJECT
  In certain cases, you have the right to object to our otherwise lawful processing of your personal data.

• ‍RIGHT TO DATA PORTABILITY
  In certain cases, you have the right to receive a copy of your personal data or to have personal data transmitted directly from us to another data controller.

• RIGHT TO WITHDRAW CONSENT
  You have the right to withdraw your consent at any time if our processing of your personal data is based on your consent. You can do this by contacting us using the contact information provided below.
  
  If you withdraw your consent, it will only take effect from that point forward. This means that if you choose to withdraw your consent, it will not affect the legality of our processing of your personal data based on your previously provided consent up until the time of withdrawal.

You can read more about your rights in the Danish Data Protection Agency's guide on the rights of data subjects, which you can find at www.datatilsynet.dk

8. EXCEPTIONS TO OUR DUTY TO PROVIDE INFORMATION

In certain cases, we may refrain from observing the duty to provide information to you if the personal data about you or the processing thereof must remain confidential. This is because we are subject to professional secrecy under the rules of the Danish Administration of Justice Act and the Code of Conduct for the Danish Bar and Law Society.

In a number of cases, we may also refrain from fulfilling the duty to provide information to you in accordance with Section 22 of the Danish Data Protection Act for reasons of overriding private interests, including your own interests or overriding private or public interests, if it is assessed that these interests outweigh your interest in receiving the information. This applies, for example, if the duty to provide information has negative consequences for the protection of our clients' interests, such as in connection with legal proceedings and the enforcement of civil claims, including the right to prepare one's own defense, or criminal acts, control or supervisory functions, internal investigations, and similar situations.

We may also waive the duty to provide information if you are already aware of the information, if it is impossible or would require a disproportionate effort, or if providing the information would hinder the fulfillment of the purposes of the processing.

9. CONTACT INFORMATION

You may contact us if you wish to exercise your rights as described above in section 8, if you wish to file a complaint, or if you have other questions regarding our privacy policy.

In this regard, you may write to your contact person at our firm or contact us at:

CLM Advokater Advokatanpartsselskab

Bavnehøjvej 5, 6700 Esbjerg

Phone: +45 44 22 59 00
Email: mail@clmadvokater.dk

10. COMPLAINTS TO THE DANISH DATA PROTECTION AGENCY

You may lodge a complaint with the Danish Data Protection Agency regarding our processing of your personal data. Learn more at www.datatilsynet.dk

11. CHANGES TO OUR PRIVACY POLICY

Our privacy policy was last updated on May 8, 2025, and is subject to change.