Privacy policy
This privacy policy explains how ANNOT Advokatbyrå AB (“ANNOT”) processes personal data. Personal data means any information that directly or indirectly identifies an individual, such as a name, contact details or other information that can be linked to a person.
ANNOT is the controller for the processing of personal data carried out as part of the firm’s activities, unless otherwise stated. Personal data is processed in accordance with the General Data Protection Regulation, supplementary data protection legislation and the Swedish Bar Association’s professional conduct rules.
Personal data we process
ANNOT processes personal data provided to us in connection with engagements, enquiries and other matters. This may include names, addresses, email addresses, telephone numbers, personal identity numbers, job titles, employer details, payment information, case information and other information relevant to the engagement.
Personal data may be provided by the client or obtained from counterparties, courts, public authorities, insurance companies, business partners or other parties involved in a matter.
Purposes and legal bases
We process personal data to perform engagements, fulfil contracts, protect our clients’ rights and interests, comply with legal obligations, and manage administration, invoicing, accounting, conflict checks and archiving.
We may also process personal data to communicate with clients and other contacts, respond to enquiries, develop our operations and comply with requirements imposed by law, official decisions or the Swedish Bar Association’s professional conduct rules.
Depending on the purpose and circumstances, the legal basis is the performance of a contract, compliance with a legal obligation, a legitimate interest or, in certain cases, consent.
Special categories of personal data
In certain engagements, ANNOT may process special categories of personal data, such as information concerning health, trade union membership or political opinions, as well as data relating to criminal convictions and offences. Such data is processed only when necessary for the engagement and where there is a lawful basis for doing so.
Recipients of personal data
Where necessary to perform an engagement or comply with legal obligations, personal data may be disclosed to courts, public authorities, counterparties, legal representatives, insurance companies, experts, suppliers and other relevant parties.
ANNOT may engage processors for services such as IT, systems operation, accounting and administration. Processors may process personal data only in accordance with our instructions and the applicable data processing agreement.
Retention
Personal data is retained for as long as necessary for the purposes for which it is processed. Information in client matters is normally archived for at least ten years after the engagement has ended, or for a longer period where required by the nature of the engagement, applicable law or the Swedish Bar Association’s professional conduct rules.
Your rights
Individuals whose personal data is processed by ANNOT may request access to their data, correction of inaccurate data, erasure, restriction of processing and object to processing. In certain circumstances, the right to data portability also applies.
These rights may be restricted due to legal professional privilege, legal obligations or the need to establish, exercise or defend legal claims.
Cookies and external maps
The website uses necessary local storage to remember cookie choices. Google Maps is loaded only after consent. Google may then process technical information such as the IP address and information about the browser, device and map interactions. Further information is available in our cookie policy.
Contact
Questions about our processing of personal data may be sent to ANNOT Advokatbyrå AB by email at info@annotadvokat.se or by post to Järnbrogatan 3B, 602 24 Norrköping, Sweden.
If you believe that your personal data is being processed in breach of applicable rules, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

