Privacy policy / GDPR

The General Data Protection Regulation has applied as law in all EU member states since 25 May 2018.

Guard Advokater AB is the data controller for personal data received in the course of our legal practice or otherwise processed in contact with authorities.

You are not obliged to provide personal data to us, but if you do not, we cannot take on an engagement because we cannot carry out the necessary conflict-of-interest and anti-money-laundering checks.

Purposes and legal basis

We process personal data to carry out mandatory conflict-of-interest and (where applicable) anti-money-laundering checks, to perform and administer the engagement, to protect your interests and for accounting and invoicing purposes. This processing is based on it being necessary for the performance of a contract, a legal obligation, or your consent.

The data may also be used for business and method development, market analysis, statistics and risk management. Such processing is based on our legitimate interest in developing our business.

Disclosure

We will not disclose personal data to third parties except where (i) specifically agreed between the Firm and you, (ii) necessary within an engagement to protect your rights, (iii) necessary to fulfil a legal obligation or comply with a decision of an authority or court, or (iv) we engage external service providers who perform services on our behalf. Data may be disclosed to courts, authorities, opposing parties and their counsel where necessary to protect your rights.

Retention

In accordance with Guard Advokater AB's obligations under the Code of Professional Conduct, personal data is kept for ten years from the completion of the matter, or for such longer period as the nature of the matter requires. Data processed to develop, analyse and market the Firm's business is kept for one year after the last contact.

If you unsubscribe from newsletters or similar, the data will be deleted immediately.

The website and the chat

When you book a first call in the chat on our website, we store what you write yourself: your name, phone number, e-mail address (if you provide it), the area of law concerned, a short description, your preferred time and the text of the chat. We use this information only to contact you and book the call. If you give an e-mail address, we send an automatic e-mail confirming that we have received your request; it does not contain your description of the matter. The legal basis is that the processing is necessary in order to take steps at your request before a possible engagement agreement is entered into (Article 6(1)(b) GDPR).

Please do not write personal identity numbers, health information or details about crimes in the chat. We go through such matters with you in a secure conversation, fully covered by our duty of confidentiality.

How long website data is kept

Booking requests from the chat are deleted automatically twelve months after they were received.

If you become a client, the information is transferred to our case management system and is then kept in accordance with the rules under Retention above.

Cookies and storage in your browser

The website uses no cookies for statistics, marketing or tracking, and we show no advertising. That is why we do not need to ask for your consent to cookies.

The chat keeps the conversation in your browser's session storage (sessionStorage) so that it remains while you move between pages. This storage is needed for a function you have chosen to use and disappears when you close the tab. Nothing is sent to us until you submit a booking yourself.

Fonts are served from our own server, so no information about your visit is sent to Google or other font services. The map link opens Google Maps only when you click it.

Automated assistant in the chat

The chat is answered by an automated digital assistant, which is stated in the very first message (in accordance with Article 50 of the EU AI Act). The assistant gives no legal assessments and makes no decisions about you – it only helps you book a call with a lawyer. At present, no external AI service is used. If that changes, we will update this policy beforehand.

Providers that process data on our behalf

We use a small number of carefully selected providers (data processors). A data processing agreement is in place with each of them.

• Supabase – database for booking requests and questions. The data is stored in Stockholm (Amazon Web Services, region eu-north-1).
• Vercel Inc. – hosting of the website. The server functions run in Stockholm. Vercel is a US company; any transfers to the United States are protected by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework, under which Vercel is certified.

Your rights

You have the right to request, free of charge, information from Guard Advokater AB about the use of personal data concerning you. At your request or on our own initiative, we will correct or delete inaccurate data or restrict its processing.

You also have the right to request that your data is not processed for direct marketing purposes, and the right to receive your personal data in a machine-readable format or, where technically possible, have it transferred to a third party of your choice.

If you are dissatisfied with our processing, you may lodge a complaint with the supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection (IMY, www.imy.se). You may also contact the supervisory authority in the country where you live or work.

Contact

Guard Advokater AB's contact person for data protection matters is Sadik Kutlu, who can be reached at +46 73 533 43 13 or sadik@guardadvokater.se.

Contact us at info@guardadvokater.se or at the address below if you have any questions about our processing of personal data.

Data controller: Guard Advokater AB, reg. no. 556771-0719, Scheelegatan 1, 112 23 Stockholm, Sweden, +46 8 20 14 40, info@guardadvokater.se.