Processing of personal data in connection with
Legal Practice
Clients and opposing parties:
- Non-sensitive personal data, including name, email address, phone number, address, job title, CVR number, and financial information.
- Confidential personal data, including civil registration numbers (CPR) and information regarding criminal convictions and offenses.
- Special categories of personal data (sensitive), including race or ethnic origin, health information, and trade union membership.
Opposing party representatives, secondary parties in legal proceedings, business partners, arbitrators, witnesses, expert witnesses, etc.:
- Non-sensitive personal data, including name, email, phone number, address, job title, and CVR number.
Personal data is processed for the purpose of safeguarding the client's interests in connection with the preparation and conduct of a lawsuit or arbitration case, including, among other things, by:
- Drafting and reviewing pleadings
- Summoning witnesses
- Obtaining information from expert witnesses
- Cooperation with the courts and arbitration tribunals
- Settlement of fees for arbitrators and expert witnesses, as well as witness compensation
We process personal data (non-sensitive) pursuant to Article 6(1)(b) of the GDPR when processing is necessary for the performance of a contract to which the data subject is a party, and pursuant to Article 6(1)(e) of the GDPR when necessary for the performance of a task carried out in the public interest.
We rely on Article 6(1)(f) of the GDPR to process personal data (non-sensitive) in connection with our cooperation with the courts and arbitration tribunals, and the legitimate interest we pursue is the practice of law.
We process special categories of personal data (sensitive data) pursuant to Article 9(2)(f) of the GDPR if the processing is necessary for the establishment, exercise, or defense of legal claims.
Civil registration numbers (CPR numbers) are processed pursuant to Section 11(2)(4) of the Danish Data Protection Act and Article 9(2)(f) of the GDPR when necessary for the establishment, exercise, or defense of legal claims. Information regarding criminal convictions and offenses is processed pursuant to Section 8(3) of the Danish Data Protection Act, cf. Article 10 of the GDPR, as the processing is necessary for the conduct of legal proceedings and arbitration.
Personal data processed in connection with case management is deleted 10 years after archiving, unless special circumstances make the case worth preserving for a longer period – for example, if continued processing is necessary for the establishment, exercise, or defense of legal claims.
We do not disclose your personal data to external parties unless it is necessary and there is a legal basis for doing so. This may include public authorities, private companies or individuals, foundations, associations, etc., depending on the nature of the case.
We entrust information to our data processors (e.g., IT providers).
Bankruptcy, debt collection, reconstruction, and liquidation
The company undergoing bankruptcy, reconstruction, or liquidation is the data controller, and the processing of personal data for the company under reconstruction, liquidation, or bankruptcy is carried out by us as the trustee/liquidator of the estate.
We process personal data concerning, among others, customers, suppliers, debtors, owners, employees, management members, and creditors connected to companies under reconstruction, liquidation, or bankruptcy:
- Personal data (non-sensitive), including identification and contact information, personnel data, salary and financial information, and contractual arrangements.
- Confidential personal data, including civil registration numbers (CPR) and relevant information regarding any criminal offenses.
- Special categories of personal data (sensitive), including relevant information regarding trade union membership and/or health.
Collaborators (e.g., co-trustees):
- Personal data (non-sensitive), including contact information and details regarding their actions in connection with the collaboration.
Personal data is processed in connection with the winding-up process for one or more of the following purposes:
- handling bankruptcy estates, including acting as trustee in accordance with the rules of the Bankruptcy Act, ensuring the management and realization of the estate's assets, administering the estate, and preparing final estate accounts, etc.
- handling reconstructions, including ensuring the identification and collection of receivables, maintaining operations, managing the company's ongoing contractual relationships, maintaining a register of creditors, and preparing reconstruction proposals and plans,
- handling liquidations, including acting as liquidator, ensuring the identification and collection of receivables, and deciding on the resumption, merger, solvent liquidation, or bankruptcy proceedings of the company,
- identifying, securing, and realizing assets, including the examination and collection of claims,
- to conduct investigations for the purpose of identifying potential voidable or liability-inducing transactions,
- to conduct investigations for the purpose of establishing management liability or claims for damages,
- to send demand letters and enforcement requests, as well as to appear in enforcement court and enter into payment arrangements,
- to observe statutory requirements, e.g., registrations and filings with the Danish Tax Agency (SKAT) and other authorities, and
- to receive assistance from foreign authorities and lawyers in order to secure assets located abroad.
We use Article 6(1)(f) of the GDPR to process personal data (non-sensitive) in connection with the case, and the legitimate interest we pursue is to practice law and fulfill the legal mandate.
We also process personal data included in case management pursuant to Article 6(1)(c) of the GDPR, based on a legal obligation to do so.
Civil registration numbers (CPR numbers) are processed pursuant to Section 11(2)(4) of the Danish Data Protection Act and Article 9(2)(f) of the GDPR when necessary for the establishment, exercise, or defense of legal claims.
Information regarding criminal convictions of debtors, owners, or employees is processed pursuant to Section 8(3) of the Danish Data Protection Act, cf. Article 10 of the GDPR, as such processing is a prerequisite for handling the cases.
Personal data is deleted 10 years after the case is archived, unless special circumstances make the case worth retaining for a longer period, e.g., if continued processing is necessary for the establishment, exercise, or defense of legal claims.
We do not disclose your personal data to external parties unless it is necessary and there is a legal basis for doing so. This may include public authorities, private companies or individuals, foundations, associations, etc., depending on the nature of the case.
We entrust data to our data processors (e.g., IT providers).
Legal advice and assistance, including the preparation of legal documents, assessments, and contracts, as well as assistance during negotiations, etc.
Clients and opposing parties:
- Personal data (non-sensitive), including, among other things, name, email address, telephone number, address, job title, CVR number, and information regarding financial circumstances.
- Confidential personal data, including civil registration numbers (CPR numbers).
- Special categories of personal data (sensitive), including racial or ethnic origin, health information, and trade union membership.
Contact person at the client, business partners, or other advisors:
- Personal data (non-sensitive), including name, email address, telephone number, address, and job title.
Personal data is processed for the purpose of preparing notes, providing advice via email or telephone, assisting during negotiations, or assisting in the preparation of materials.
We use Article 6(1)(f) of the GDPR to process personal data (non-sensitive) in connection with legal advice, and the legitimate interest we pursue is to practice law and fulfill our legal mandates.
We process civil registration numbers (CPR numbers) pursuant to Section 11(2)(4) of the Danish Data Protection Act, including Article 9(2)(f) of the GDPR, when these are necessary for the establishment, exercise, or defense of legal claims.
We process special categories of personal data (sensitive) pursuant to Article 9(2)(f) of the GDPR, if the processing is necessary for the establishment, exercise, or defense of legal claims.
Personal data is deleted 10 years after the case is archived, unless special circumstances make the case worth retaining for a longer period, e.g., if continued processing is necessary for the establishment, exercise, or defense of legal claims.
We do not disclose your personal data to external parties unless it is necessary and there is a legal basis for doing so. This may include public authorities, private companies or individuals, foundations, associations, etc., depending on the nature of the case.
We entrust information to our data processors (e.g., IT providers).