Privacy Policy

Who are we?
This website is owned and operated by Iacobus Law Firm (“IACOBUS Law”), Løgstørgade 2, 1st floor, DK-2100 Copenhagen Ø, Denmark, company registration (CVR) no.
46179005. Iacobus Law Firm is a registered secondary name of Perregaard Law Firm under the same company registration (CVR) number.

When we process your personal data in connection with your use of our website or the provision of our legal services, IACOBUS Law is the data controller.

IACOBUS Law is subject to the Danish Administration of Justice Act and the rules of professional conduct applicable to lawyers. Further information is available at
www.advokatsamfundet.dk.

Why do we process your personal data?
We process your personal data for the following purposes:
– To respond to enquiries
– To provide legal advice and assistance
– To administer client relationships
– To comply with legal obligations, including those arising under anti-money laundering
legislation and the Danish Bookkeeping Act
– To market our services in accordance with applicable law

Conflict-of-interest checks
Before accepting an engagement, we conduct a conflict-of-interest check in accordance with the Danish Administration of Justice Act and the rules of professional conduct applicable to lawyers. In this connection, we process personal data to ensure that no conflict of interest prevents us from acting.

The processing is based on points (c) and (f) of Article 6(1) of the General Data Protection Regulation (GDPR).

Processing of personal data relating to clients
If you or your business is a client of IACOBUS Law, we process your personal data in order to perform the work that you have asked us to undertake.

The processing is based on point (b) of Article 6(1) of the GDPR. Where the processing includes special categories of personal data or a Danish civil registration (CPR) number, the processing is based on point (f) of Article 9(2) of the GDPR and section 11(2)(iii) of the Danish Data Protection Act for the purpose of establishing, exercising or defending legal claims.

Processing of personal data relating to other persons (counterparties, etc.) 
If you are not a client but are involved in a matter that we handle, including as a counterparty, witness, expert or representative of a public authority, we process your
personal data for the purpose of establishing, exercising or defending legal claims.
The processing is based on point (f) of Article 6(1) of the GDPR, should our legitimate interest in handling the matter overrides your interests and fundamental rights.
Where the processing includes special categories of personal data or a Danish civil registration (CPR) number, the processing is based on point (f) of Article 9(2) of the GDPR
and section 11(2)(iii) of the Danish Data Protection Act.

Marketing
If you subscribe to our newsletter or otherwise consent to marketing, we process your personal data in order to send you relevant information about our services.
The processing is based on point (a) of Article 6(1) of the GDPR. You may withdraw your consent at any time.

What personal data do we process?
We process, among other things, the following categories of personal data:
– Identity and contact details (name, address, email address, telephone number, job title
and place of work)
– Information relating to specific matters
– Financial information
– Danish civil registration (CPR) numbers where necessary for unambiguous identification
or as required by law
– Special categories of personal data where necessary for handling the matter

Sources of personal data
We collect personal data from:
– You
– Our clients
– Counterparties
– Public authorities and courts
– Other persons connected with the matter

Disclosure of personal data
We disclose personal data only where necessary to fulfil the purposes described above or
as required by law.

Personal data may be disclosed to:
– Courts and public authorities
– Counterparties and their advisers
– External business partners
– Data processors that assist with the operation of our business

We use, among others, the following types of data processor:
– IT and cloud service providers (including Microsoft 365)

– Accounting systems (including e-economic)
– Case-management and law firm systems (including Legis 365)

All data processors process personal data on our instructions and in accordance with entered data processing agreements.

Transfers to third countries 
In connection with our use of IT systems and data processors, including cloud solutions,
personal data may be transferred to countries outside the EU/EEA.

We use, among others, Microsoft 365 as part of our IT infrastructure. This may involve personal data being processed by Microsoft Corporation.

Such transfers take place in accordance with the GDPR, including based on:
– the European Commission’s adequacy decision concerning the EU-US Data Privacy Framework; or
– the European Commission’s Standard Contractual Clauses (SCCs).

In this connection, we ensure that appropriate guarantees are in place to protect personal data.

Retention of personal data
We retain personal data for as long as necessary for the purposes for which it was collected.
As a general rule, information relating to matters is retained for up to 10 years after the matter has been concluded, depending on the specific circumstances, including applicable limitation periods.

If your enquiry does not result in a client relationship, the information will generally be retained for up to five years.
Information obtained pursuant to the Danish Bookkeeping Act is retained for five years after the end of the relevant financial year.

Information obtained pursuant to anti-money laundering legislation is retained for five years after the end of the client relationship.

Data security
We have implemented appropriate technical and organizational security measures in accordance with Article 32 of the GDPR to protect your personal data against
unauthorized access, loss, alteration or misuse.

Your rights
Under the GDPR, you have the following rights:
– Right of access
– Right to rectification
– Right to erasure (in certain circumstances)

– Right to restriction of processing
– Right to data portability
– Right to object to processing based on legitimate interests
– Right to withdraw consent

The exercise of these rights may be restricted, including as a result of lawyers’ duty of confidentiality, the rights of other persons or the need to establish, exercise or defend legal
claims.

Automated decision-making
We do not use automated decision-making or profiling.
Complaints to the Danish Data Protection Agency
You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data.

Danish Data Protection Agency
Borgergade 28, 5th floor
DK-1300 Copenhagen K
Denmark
www.datatilsynet.dk

Contact
Iacobus Law Firm
Løgstørgade 2, 1st floor
DK-2100 Copenhagen Ø
Denmark
Email: info@iacobuslaw.com

Updates to this Privacy Policy
We reserve the right to update this Privacy Policy. The current version will be available on our website.