Contact Details

Data Controller: Pro Juridica Attorneys Ltd
Web page: http://www.projuridica.fi
Address: Hallituskatu 13-17 D, 90100 Oulu, Finland
Tel.: +358 20 7551 480
E-mail: oulu@projuridica.fi
Contact person: Jaana Laamanen
E-mail of the contact person: jaana.laamanen@projuridica.fi
The contact person is not the data protection officer referred to in the GDPR.

Purpose and Legal Basis for the Processing of Data

We process your personal data for the following purposes:

• for the provision of legal services, in which case the processing is based on the performance of a contract of assignment or a legitimate interest of the controller;
• actions related to maintaining the customer relationship, such as opening and managing an assignment, in which case the processing is based on the controller’s legitimate interest and fulfilling the assignment agreement;
• customer acquisition and marketing, in which case the processing is based on the controller’s legitimate interest;
• to comply with our legal obligations and the instructions of the Advocates Act (496/1958) (the controller’s legal obligation). Such obligations include, for example, performing a conflict of interests check, identifying the customer, and taking measures to comply with the Act on Preventing Money Laundering and Terrorist Financing (444/2017);
• recruitment measures, where the legal basis for processing is a legitimate interest in the implementation of possible pre-contractual measures, and possibly consent to the retention of data for the future recruitment process.

Collection of the Personal Data

We collect basic data about you based on the purpose of the processing, such as your name, address, e-mail address, telephone number, age, work assignment(s) and employer(s).

Customer identification data: statutory personal data to identify the customer (KYC process) and asses the customer’s financial situation and political influence.

Customer data: data related to the contractual relationship between us and the customer, as well as communication between the parties.

Consents and restrictions: consents and restrictions provided by the subject regarding different purposes of personal data processing.

Analytics: data about the use of our website, such as your IP-address and browser type. The data collected by the website does not identify any specific user.

Transfer of the Personal Data

Personal data may be disclosed to authorities in statutory matters or based on an attorney-at-law assignment. The controller may use external service providers who process personal data on our behalf for the purposes described in this privacy policy (e.g. providers of technical services). These service providers are only allowed to use personal data in accordance with the agreement between us and the service provider and our instructions. We require service providers to take appropriate technical and organisational measures to protect personal data. Data stored in the register is not regularly disclosed to third parties, including outside the EU or EEA.

Storage Time of Personal Data

The retention of customer or potential customer data for sales and marketing purposes will be periodically reviewed. At the same time, the accuracy of the data is checked. Unnecessary and outdated data will be deleted when the data is checked, or when it is otherwise deemed necessary. In connection with marketing messages, we inform about the possibility of prohibiting marketing by responding to a marketing email. Job applicants’ personal data is regularly deleted. Personal data related to attorney-at-law assignments are stored in accordance with the applicable legislation.

Regular Data Sources

We collect your personal data directly from you or communication with you when you use the services we provide. Through our own collection of personal data from public sources such as websites, we may add individuals to our registers for marketing purposes. Personal data may also be collected and updated when you send an email to one of our staff members.

In addition, personal data may be collected and updated from the registers of various service providers, such as Alma Insights or Suomen Asiakastieto Oy or other service providers and networks providing contact information.

Data Protection Rights

You have, for example, the following rights under the GDPR, but please note that the information in the possession of an attorney-at-law office is, however, mainly subject to attorney’s confidentiality and non-disclosure obligations. The attorney-at-law office is obliged to comply with the provisions concerning Advocates Act:

• Right of access: you have the right to request from the controller, at reasonable intervals, access to personal data concerning you.
• Right to rectification: you have the right to request that the controller corrects or supplements, without undue delay, inaccurate personal data.
• Right to erasure: in certain situations, you have the right to demand that the controller erase data concerning you without undue delay. Please note, Pro Juridica Attorneys is obliged to perform ongoing assignments despite of restrictions.
• Right to restriction of processing: in certain situations, you have the right to demand the controller to restrict the processing of personal data concerning you, e.g. if you contest the accuracy of the personal data, the processing is unlawful, the controller no longer needs the personal data for the purpose of the processing and/or you have objected to the processing of the personal data for purposes other than direct marketing.
• Right to object: you have the right to object to the processing of your personal data, after which we do not send you any customer or marketing messages.
• Right to data portability: you have right to receive the personal data that you have provided to the controller in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller.
• Right to withdraw consent: Whenever the legal basis for processing the personal data is based on your consent, you have the right to withdraw the consent at any time. Please notice, however, that this may affect the provision of the service in question.

Miscellaneous

If you have any questions about our privacy policy or wish to exercise your rights, please contact us through the contact information in the section “Contact Details”.

If the controller’s measures are not in accordance with the GDPR, or if the controller has not ensured subject’s rights on an adequate level, you have right to lodge a complaint with a supervisory authority.

The processing of personal data is carried out with care. Data processed by information systems is appropriately protected. The data is accessible only to persons whose job description includes the processing of that data.