This policy describes how Lassen Ricard processes personal data and the basis on which we do so.
Lassen Ricard is the controller responsible for processing the personal data we collect about you. You can find our contact details here:
DK-1256 Copenhagen K
CVR no.: 16725641
Telephone: +45 33322012
We process your personal data so that we can (a) contact you while performing the task you have entrusted us with, (b) in the best possible way perform a task with which your personal data is associated, and (c) meet the obligations placed on us through special legislation, including, for example, the Danish Anti-Money Laundering Act.
When we process data about you in the course of establishing a client relationship and of carrying out a task that you, as a client, have retained us to perform, article 6(1)(b) of the General Data Protection Regulation forms the legal basis for our personal data processing, because we need to process your data in order to perform the task or contract to which you are party, or to take any action at your request before a contract is entered.
As part of this client relationship, we may be obliged by special legislation, for example, the Anti-Money Laundering Act, to collect your personal data. Article 6(1)(c) of the General Data Protection Regulation forms the legal basis for this processing, because we need to process your personal data in order to comply with a legal obligation to which Lassen Ricard is subject.
If you are an opponent or have another similarly necessary relationship with a case, article 6(1)(f) forms the legal basis for our processing of your personal data, because the processing is necessary to enable Lassen Ricard to pursue a legitimate interest that is not overridden by your interests or by fundamental rights and freedoms that require personal data protection.
If a task requires us to collect and process sensitive information about you, such as health information, article 9(2)(f) of the General Data Protection Regulation forms the legal basis for our processing, because such data will only be collected and processed if necessary for establishing, exercising or defending legal claims.
Lassen Ricard only collects and processes information about you if relevant for the matter we are handling.
Accordingly, we normally only ask for ordinary personal information about you, such as your name and contact details – typically your phone number, e-mail address and residential address.
Depending on the nature of the matter, however, Lassen Ricard may have to collect and process other types of personal data, including sensitive information.
Last, to meet the obligations to which special legislation subjects us, such as the Anti-Money Laundering Act, we will often need to obtain your civil registration number (CPR number) and a copy of your passport/health insurance card.
To the extent necessary to perform the task with which your personal data is associated, your personal data will be disclosed to relevant courts of law and authorities as well as the opponent’s/opponents’ attorney(s).
On the basis of data processing agreements, we disclose or hand over your personal data to a limited extent to the data processors that provide us with the assistance necessary for us to run our firm, for example, our IT consultancy firm.
We do not disclose or hand over your personal data for commercial exploitation, marketing purposes or similar.
We will not transfer your personal data to recipients outside the EU and the EEA, unless we do so to a client, opponent or court of law, etc, and only if this is necessary to perform the task with which your data is associated.
We only store your personal data for as long as necessary to perform the task with which your data is associated.
When assessing how long we need to store your personal data, we have two main considerations: (a) that we ensure compliance with the documentation requirements in the legislation, for example, the Danish Act on Bookkeeping and the Anti-Money Laundering Act, and (b) that we have the ability to document your case in the event of a later liability case. The length of a possible liability period will therefore be decisive in your specific case.
The General Data Protection Regulation affords you a number of rights relative to our processing of information about you. Under the legislation, your rights may depend on whether you are a client or have another relationship with our firm. If you wish to exercise your rights, you are welcome to contact us; please see the details above.
You can read more about your rights in the Danish Data Protection Agency’s guidance about the rights of data subjects (in Danish), which you will find at www.datatilsynet.dk.
You are entitled to file a complaint with the Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the Agency’s contact details at www.datatilsynet.dk.