We hereby provide you with information on processing your personal data by the Latvian office of bnt attorneys in CEE (hereinafter: “bnt Latvia” or “we” in any form). bnt Latvia gives the highest priority to protecting your personal data and not only due to our professional duty of confidentiality. In processing your personal data we observe all data protection regulations, including the provisions of the EU General Data Protection Regulation (hereinafter: “GDPR”). This privacy statement specifies which of your personal data will be processed, discloses the purposes for processing your data and how you can exercise your rights under the GDPR.
In the context of data processed by bnt Latvia, the controller under the General Data Protection Regulation (GDPR) is:
Jensen & Sviķis Legal SIA
Reg. Nr. 42103087000
Antonijas iela 24-7, LV-1010, Riga, Latvia
Phone: +371 6616 44 11
Personal data and data processing purposes
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. It encompasses details of personal or material circumstances such as name, address, e-mail address, phone number, date of birth, age, sex, social security number, video recordings, photos, voice recordings of individuals, and biometric data such as fingerprints. Personal data can also include special categories of data such as health data or data relating to criminal proceedings.
Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, dissemination or otherwise making available, aligning or combining, restricting, erasing or destroying.
Legal grounds for processing your personal data
We process your personal data to provide and perform legal services, thus based on the contractual relationship between us.
We process your personal data for the purpose of sending you newsletters on current legal developments and inviting you to certain events (e.g. “Business Breakfast”) only with your consent, which you can revoke at any time; or if our legitimate interest arises in providing information required for successful cooperation with you.
We process your contact details (your name, phone number, email address, your company name and your position) to optimise our contact management (“Client Relationship Management “CRM””). You are entitled to object to any further processing of your data within our CRM at any time. Furthermore, we process personal data which we have obtained from you in the course of and for the purposes of providing our legal services.
We may also process your personal data in reliance on any other legal basis in accordance with the GDPR and in compliance with data protection and civil law provisions. We process only personal data which is necessary in order to carry out and execute our legal services, or data which you have provided to us on a voluntary basis.
Your rights in connection with your personal data
As our client or as a data subject you have at all times – though limited by our duty of professional secrecy as attorneys at law – the following rights as regards your personal data processed by bnt Latvia:
- a right to access your personal data stored,
- a right to obtain information about the origin and recipients of your personal data as well as the purpose of data processing,
- a right to rectification,
- a right to data portability,
- a right to object,
- a right to restrict processing as well as
- a right to request that data which is inaccurate and/or unlawfully processed is made unavailable or erased.
You have the right to object to the processing of your personal data, unless such processing is required by law or is justified by our legitimate interests. In certain cases, you also have the right to receive your personal data processed by us in a machine-readable format of our choice, or to instruct us to transmit such data directly to a third party of your choice.
We kindly ask you to notify us of any change in your personal data.
You may revoke your consent to use your personal data at any time.
You may send your request for access, erasure, rectification, objection and/or data portability to the address of bnt Latvia referred to in Section 1 above, provided your request does not involve disproportionate efforts.
Despite our best efforts to guarantee the protection and integrity of your data, we cannot fully rule out that disagreements may arise on the nature of the use of your data. If you consider that we are unlawfully using your data, you may lodge a complaint with the Latvian Data Protection Authority (www.dvi.gov.lv).
Newsletter, events, seasonal greetings
You can subscribe to our press releases or newsletters at https://bnt.eu/en/news/overview to follow the latest legal developments that could influence your business. In particular, you can withdraw your consent or in the case of any other legal basis unsubscribe from receiving newsletters by using the contact details for bnt Latvia referred to in Section 1 above.
For the purposes of sending you our press releases and newsletters, we process (collect, save) some of your personal data (name, surname, organisation, email address). This information is then shared with the bnt office in Slovakia –
bnt attorneys-at-law, s.r.o.
IdNo: 35 886 978
Cintorínska 7, 811 08 Bratislava, Slovakia
Phone: +421 2 57 88 00 88
who use this data to send you the respective publications. Therefore, as far as concerns processing your personal data for the purposes of newsletters and other publications, both bnt Latvia and bnt Slovakia (bnt attorneys-at-law, s.r.o.) fulfil the role of joint data controllers within the meaning of the GDPR.
Our events, workshops and lectures (collectively: “Events”) provide detailed information on the latest developments in different areas of law and also allow you to network with industry participants and meet bnt lawyers in person. You are therefore welcome to attend these Events at any time. We will use your personal data (name, surname, organisation, email address, postal address) to send out invitations and, in our legitimate interest, process your name, your company, and your position to optimize contact management.
We will use your contact details to send out seasonal greetings and, in our legitimate interest, process your name, your company, and your position to optimize contact management.
We have taken appropriate organisational and technical measures to ensure the protection of your personal data in particular against unauthorised, unlawful or accidental access, processing, loss, use and tampering. In spite of our efforts to ensure an appropriately high standard of diligence requirements at all times, it cannot be ruled out that information you have provided via the internet might be accessed or used by other persons. Please note that we can therefore not assume any liability whatsoever for disclosure of information due to errors in data transfer and/or unauthorised access by third parties not caused by us (e.g. hacking of e-mail accounts, telephone, or interception of fax messages).
Use of data
When entering into a client-attorney relationship or a contractual relationship with us, you will disclose your (or your relatives’, co-workers’ or other third parties’) personal data and business or trade secrets. In all these cases, we generally assume that you are authorised to disclose this data. We use your data and data of third parties associated with or nominated by you only to the extent necessary for properly establishing and processing our mandate or fulfilling our contractual relationship with you. We will not process data made available to us for purposes other than those covered by your consent or otherwise by a provision in accordance with the GDPR, except for use for statistical purposes, provided that data made available is anonymised.
Transfer of data to third parties
In order to perform our services we may have to transfer your data to third parties (e.g. other bnt offices, an opposing party, substitutes, insurance companies, service providers we are using and to whom we provide data), courts or authorities. Your data will be transferred solely in compliance with the GDPR, especially to perform our services or based on your prior consent.
Please note that in the context of providing our legal services, we regularly obtain from third parties information which is related to you in the context of particular facts or cases.
Some of the above recipients of your personal data are located, or process your personal data, outside the country you reside in. The level of data protection in other countries may not be the same as in Latvia. However, we will transfer your personal data only to countries in respect of which the EU Commission has decided that they have an appropriate level of data protection, or we will take measures to ensure that all recipients have an appropriate level of data protection.
Notification of data incidents
We aim to ensure that data incidents are detected at an early stage and immediately reported to you or to the competent supervisory authority, including the respective data categories concerned.
Storage of data
We will store data no longer than is necessary to fulfil our contractual or legal obligations and to defend liability claims, if any.
Our mandate as a law firm requires us to represent your interests zealously, faithfully and conscientiously. We are therefore legally required in our clients’ interest to collect any personal data about our clients needed to conscientiously represent them. Moreover, we process your personal information based on an engagement contract, your consent or any other purposes covered by data protection laws. We use your personal data for statistical purposes only when anonymised.
Events and Newsletters
We will invite you to our events if you have signed up for an event, workshop or lecture. In this case, your invitation is sent out based on your consent, which you may revoke at any time. If you are or were a client or business partner, it is in our legitimate interest to invite you to events. You can notify us at any time that you do not wish to receive further invitations. Staying in touch with our former lawyers and co-workers is a matter of particular concern to us. We will also send you these invitations in reliance on your consent, which you can revoke at any time.
The same rules apply as to our press releases and/or newsletters sent to you.
Client Relationship Management (“CRM”)
If you have contacted us, we will be in possession of your contact details. It is in our legitimate interest to process your contact details. However, you may certainly object at any time to any further processing of your data for the optimisation of our contact management.