d. visits on our web page
By ‘personal data’ is here meant data and/or assessments about an identified or identifiable physical person.
KKLAW is the data controller and processes all personal data in accordance with applicable rules and regulations.
- Data Processor Agreements
KKLAW has entered into data processor agreements with:
• Intility AS – for the supply of IT-services
• Ascertus Limited – for the supply of filing systems
• Datalex Software AS – for supply of administration- and accounting systems
• Partner Revisjon AS
• Saga Regnskap og Økonomi AS
Intility’s server is placed in Norway. KKLAW’s data processors may use servers or suppliers in other countries, provided this is done in accordance with the requirements of the data processor agreement.
- Personal Data we process
KKLAW collects and processes personal data that is necessary for, among other things, identity verification in accordance with the Norwegian Money Laundering Act of 2009 («hvitvaskingsloven»).
KKLAW processes personal data that is necessary for the performance of the agreement with the client. The amount of personal data we collect, depends on the type of assignment. The data that we process, may also be sensitive personal data (“special categories” of personal data, cf. GDPR Article 9).
We may also, with reference to GDPR Article 6.1 (c) and Article 6.1 (b), process personal data related to contact persons with KKLAW’s clients, counter parties and other parties who have a legitimate legal interest in the case and other advisors.
With reference to GDPR Article 6.1 (b), KKLAW processes personal data about our suppliers to the extent this is necessary for administration of the contractual relationship, performance of the contract and agreed deliveries. This primarily means contact details such as names, e-mail addresses, telephone numbers and address.
c. Marketing Purpose
For marketing purposes, KKLAW processes personal data about existing, former and potential clients. Such personal data is used for submittal of newsletters, offers about seminars or workshops, general company- and service presentations, etc.
The personal data KKLAW processes for marketing purposes include contact information such as name, telephone number, e-mail address and where the person is employed.
For existing clients, the legal basis for processing personal data is the existing relation between us and the client. For others, we may, pursuant to a legitimate interest assessment, process contact details of a person having a relevant role in an organisation we wish to come in contact with.
A person receiving marketing material or who is contacted for marketing purposes, may reserve themselves from further contact by giving KKLAW notice.
The legal basis for this processing is GDPR Article 6 (f).
d. Visitors to our Web Page
KKLAW has the rights to the web page www.kklaw.no. KKLAW does not use information capsules («cookies») and therefore does not store information about how each visitor uses our web page. General data traffic, such as the number of visitors within certain identified periods, etc. are generated and stored.
It is not possible to contact KKLAW directly through our web page. Nor is it possible to sign up for events or subscribe to our newsletters through our web page. KKLAW does therefore not process personal data through our web page.
- Your Rights
Any person has the right to know whether KKLAW processes personal data about him or her and how the data is processed, cf. GDPR Article 15.
A person registered with us may request that personal data that is inaccurate or incomplete, shall be rectified, cf. GDPR Article 16. He or she may, on certain conditions, also demand that his or her personal data are deleted, cf. GDPR Article 17. Pursuant to GDPR Article 20, a person registered with us may in some instances, have the right to receive the personal data concerning him or her, which he or she has provided to us and have the right to transmit those data to another company, (“data portability”).
We shall respond to requests from the data subjects within 30 days and without costs.
If you are of the opinion that we are in breach of any provision of the GPDR, you may complain to the supervisory authority – Datatilsynet. You will find contact information on Datatilsynet’s web page, www.datatilsynet.no.
- Storage and routines for deleting personal data
KKLAW deletes personal data in accordance with our routines. In short, this means that personal data is deleted when there is no longer a justified reason to store them.
Personal data related to a client relation is deleted when the client account has been inactive for ten years, unless consent is obtained for continued storage. The individual case file is deleted ten years after the case is closed. Copies of identity papers collected to perform identity control are deleted when the client account has been inactive for five years.
Personal data for suppliers or parties we co-operate with, is deleted when the contractual relationship has ceased to exist.
- Contact Information:
If you have any questions or comments to this policy or to how we process personal data, you may contact us by e-mail: email@example.com or by sending a letter to Kyllingstad Kleveland Advokatfirma DA, Postboks 1298 Vika, NO-0111 Oslo, Norway.
- Last updated:
29 June 2018.