Inventio

Vaativaan liikejuridiikkaan erikoistunut asianajotoimisto

PRIVACY NOTICE

Updated 1.10.2023

Inventio Attorneys Ltd (”Inventio”) provides legal services for its clients. These legal assignments require processing of personal data on a regular basis. This privacy statement outlines how personal data is processed in Inventio’s operations where Inventio acts as data controller. As a responsible organisation, Inventio ensures that personal data is processed in an appropriate manner and in accordance with applicable data protection legislation.

This Privacy Notice will be updated from time to time if required for example due to changes in legislation. Inventio informs data subjects of all material changes to this Privacy Notice.

Data controller

Inventio Attorneys Ltd
Business ID: 2420286-2
Bulevardi 7 A, 00120 Helsinki, Finland
info@inventio.fi

Purpose and grounds for processing of personal data

Personal data is processed for the purpose of handling legal assignments and client relationships, and to some extent for marketing purposes. Job applicants’ personal data is processed for recruitment purposes.

Processing concerns the following categories of personal data:

  • data subjects’ basic information (such as name, email address, phone number and home address, and in some cases date of birth)
  • information of client organization’s contact persons (such as name, email address, phone number and organization information)
  • various information included in the documents related to the assignments
  • concerning job applicants, information related to the recruitment process and contact details

The processing of personal data is primarily based on the client or other contractual relationship between Inventio and the data subject or the legitimate interest of Inventio as a data controller.

Data Sources

The personal data are mainly collected from the data subject, from the organisation represented by the data subject or from public sources such as authorities or information services. Inventio aims to ensure from time to time from the data subject that the personal data are accurate and up-to-date.

Recipients and transfers of personal data

Personal data will not be disclosed to third parties unless it is necessary for the provision of legal services, in which case the disclosure is based on, for example, legal requirements or an order of an authority.

However, Inventio uses service providers who process personal data on behalf of Inventio as part of the services they provide. Inventio has entered into appropriate agreements with the service providers and ensured the proper processing of personal data in these situations.

Personal data are not transferred outside the European Union or the European Economic Area, unless it is necessary for the purposes for which the personal data are processed. In such cases, transfers are made in accordance with the requirements of applicable data protection legislation.

Protection of personal data and data security

Trust and confidentiality are key values of Inventio in all its operations. In light of this, Inventio ensures that personal data are processed in compliance with the general data protection principles.

Personal data are protected by reasonable technical security measures against loss, unauthorized processing, use, destruction, modification and disclosure. In order to ensure adequate data security, Inventio has implemented appropriate technical and organisational security measures, taking into account the nature of the personal data being processed. To the extent the processing concerns special categories of personal data, a higher level of data security is applied.

How long do we keep your personal data?

Personal data shall be processed only to the extent and for as long as it is necessary and justified for the purpose, such as the client relationship. Personal data will be kept for the duration and 10 years after the end of the client relationship or longer, if required by applicable law. In case personal data concern a potential client, personal data will be kept for a maximum of two years. Personal data of job applicants will be kept for six months from the receipt of the job application.

Personal data are deleted at the end of each retention period.

Data subject rights

The data subject has a right to access his or her personal data that Inventio processes. In addition, the data subject has a right to request rectification of his or her data, object to the processing of data if the processing is based on Inventio’s legitimate interest, and restrict the processing of his or her data and request the erasure of his or her data (right to be forgotten).

Inventio has a right to retain the data subject’s personal data, despite the data subject’s request, if the processing is necessary for example for compliance with a statutory obligation, for the verification of a contractual obligation, for the performance of actions necessary for the client relationship or for any other similar justification. If the data subject requests the erasure of his or her data, Inventio cannot continue the provision of its services for the data subject.

The data subject has a right to lodge a complaint with a supervisory authority if he or she considers that Inventio has not processed personal data according to the applicable data protection regulation. The data subject can lodge the complaint with a supervisory authority of a member state in which the data subject habitually resides or his/her workplace is located, or where the alleged breach of data protection regulation has occurred.

More information

If you have any further questions on Inventio’s privacy practices or you wish to exercise your rights as a data subject, please contact us by email info@inventio.fi.

Back to top