Privacy policy

The data controller responsible for the processing of the personal data covered by this privacy policy is:

HAY LAW
CVR no. 44316846
c/o Ferdinand Kontorhotel
Rahbeks Allé 21
1801 Frederiksberg C
Phone: +45 31 36 62 65
Email: hay@haylaw.dk

If you have questions about HAY LAW's processing of your personal data or wish to exercise your rights under the data protection rules, you are welcome to contact:

Advokat Hussain Ali Alhaidary
Phone: +45 31 36 62 65
Email: hay@haylaw.dk

When contacting us regarding your personal data, we may ask you to provide the information necessary for us to identify you and process your request correctly. This may, for example, be your full name, your email address and, if relevant, information about the matter to which your enquiry relates.

We endeavour to respond to enquiries as soon as possible and within the deadlines set out in the data protection rules.

As part of our legal advice and case handling, HAY LAW may process ordinary personal data about, among others, clients, counterparties, witnesses, advisers, employees of clients and other persons relevant to a matter.

This may include, among other things:

name and contact details,
address,
position and place of work,
phone number and email address,
financial information,
information about contractual and business relationships,
information about legal disputes and case circumstances,
identification details,
CPR number, where there is a legitimate and lawful basis for doing so,
information about criminal offences, where this is relevant to the specific matter, and
sensitive personal data, where the processing is necessary and lawful.

As a general rule, we collect information directly from you or from our client. Depending on the specific matter, we may also receive or obtain information from, for example, counterparties, courts, public authorities, registers, databases, other advisers or other relevant third parties.

HAY LAW processes personal data when it is necessary to provide legal advice and representation and to safeguard our clients' interests.

The processing may, among other things, take place for the purpose of:

establishing and administering client relationships,
legal advice and case handling,
conducting court cases, appeals and other disputes,
communication with clients, counterparties, courts and authorities,
establishing, enforcing or defending legal claims,
conflict checks,
invoicing and bookkeeping,
compliance with legal and regulatory obligations,
client due diligence procedures and checks under the anti-money laundering legislation, where the specific matter is covered by this,
documentation of our advice and
protection of the legal interests of HAY LAW and our clients.

HAY LAW is subject to the anti-money laundering legislation in certain types of matters.

When this is the case, we are obliged, among other things, to carry out client due diligence procedures and obtain the information necessary to establish and verify our clients' identity and, where relevant, information about beneficial owners.

This may, among other things, involve the processing of name, address, CPR number, identification, ownership interests and other information that is necessary under the legislation for us to fulfil our obligations.

If you are a client of HAY LAW, the processing of your ordinary personal data will, as a general rule, be necessary to enter into or perform the agreement on legal assistance, cf. Article 6(1)(b) of the Data Protection Regulation.

If you are not yourself our client but are, for example, a counterparty, witness, employee of a client or otherwise relevant to a matter, the processing will typically take place on the basis of the legitimate interests of HAY LAW or our client in advising on, establishing, enforcing or defending legal interests, cf. Article 6(1)(f) of the Data Protection Regulation.

Processing may also be necessary to comply with a legal obligation incumbent on HAY LAW, cf. Article 6(1)(c) of the Data Protection Regulation.

HAY LAW only processes CPR numbers where there is a lawful and legitimate basis for doing so. This may, for example, be necessary in connection with client due diligence procedures under the anti-money laundering legislation, registrations with public authorities, land registration, corporate law transactions, court cases or other circumstances where unambiguous identification is necessary.

In connection with, among other things, criminal cases and other matters where information about criminal offences is relevant, HAY LAW may process information about criminal convictions, charges, offences and related matters. The processing takes place only where there is a valid legal basis for the processing.

In certain matters, it may be necessary to process sensitive personal data, for example health information or information about trade union membership. Such data is only processed where there is a lawful basis and where the processing is necessary in the specific context.

As part of our assistance, it may be necessary to register or disclose information about you to public authorities, courts or public digital solutions, for example virk.dk, tinglysning.dk or minretssag.dk.

In such cases, we process only the information necessary for the registration or case handling in question.

If you apply for a position with HAY LAW, we process the information that you yourself provide to us in connection with your application, including typically name, contact details, CV, education, work experience, references and other information contained in your application.

The purpose is to be able to assess your qualifications and to conduct a fair and efficient recruitment process.

The processing takes place, as a general rule, on the basis of HAY LAW's legitimate interest in being able to recruit qualified employees, cf. Article 6(1)(f) of the Data Protection Regulation.

If we wish to retain your application with a view to a possible later position, we will, as a general rule, ask for your consent. Such consent may be withdrawn at any time.

HAY LAW processes personal data confidentially and in observance of lawyers' duty of confidentiality and the rules of professional conduct.

As part of our case handling, it may be necessary to disclose personal data to, among others:

clients,
counterparties and their advisers,
courts,
tribunals and arbitral tribunals,
public authorities,
experts and other advisers,
collaboration partners, where this is necessary for the handling of the matter, and
suppliers who process data on our behalf.

Disclosure takes place only where it is necessary and has a lawful basis.

HAY LAW uses external suppliers for, among other things, IT operations, hosting, electronic document and case management, communication, security and the handling of client due diligence procedures and other administrative functions.

When a supplier processes personal data on behalf of HAY LAW, this is done on the basis of a data processing agreement and in accordance with our instructions. We require our data processors to implement appropriate technical and organisational security measures to protect personal data.

A more detailed overview of relevant data processors may be obtained by contacting HAY LAW.

If personal data is transferred to a country outside the EU/EEA, we ensure that a valid transfer basis and the necessary safeguards are in place in accordance with the data protection rules.

HAY LAW retains personal data for as long as it is necessary for the purposes for which the data was collected, or for as long as retention is necessary to comply with applicable law, documentation requirements, rules of professional conduct or to be able to establish, exercise or defend legal claims.

For ordinary legal matters, case-related information may, as a general rule, be retained for a number of years after the conclusion of the matter. Information and documentation obtained under the anti-money laundering legislation is retained, as a general rule, for 5 years after the end of the client relationship or the relevant matter.

When there is no longer a legitimate or legal basis for retaining the personal data, it is deleted or anonymised.

If an applicant is not offered employment, the data is, as a general rule, deleted when the recruitment process is completed. If, with your consent, we wish to keep your application with a view to future positions, it will, as a general rule, be retained for up to 6 months, unless otherwise agreed.

When HAY LAW processes personal data about you, you have a number of rights under the data protection rules. Depending on the circumstances, you may, among other things, have the right to:

access the personal data we process about you,
rectification of incorrect or incomplete data,
erasure of your personal data,
restriction of the processing,
objection to processing that takes place on the basis of a legitimate interest, and
data portability in the cases where the conditions for this are met.

The rights are not absolute. HAY LAW may therefore, in certain cases, be entitled or obliged to refuse a request in whole or in part.

If a processing is based on your consent, you may withdraw the consent at any time. The withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.

You can read more about your rights on the website of the Danish Data Protection Agency: www.datatilsynet.dk.

If you are dissatisfied with HAY LAW's processing of your personal data, we encourage you to contact us first, so that we have the opportunity to address your enquiry.

You also have the right to submit a complaint to the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk

HAY LAW may update this privacy policy from time to time, for example as a result of changes in legislation, our processing of personal data, the use of new technical solutions or changes in our services and organisation.

The version of the privacy policy applicable from time to time will be available on HAY LAW's website.