Privacy notice


People capabilities Services Banking and Finance Competition, Trade and Foreign Investment Construction and Engineering Corporate and M&A Corporate Crime Data Privacy, Security and Technology Employment, Labor and Pensions Financial Services Regulation Heinonen Insurance Intellectual Property Litigation and Dispute Management Private Client Real Estate and Planning Strategic Contracts Tax Industries Consumer Energy Financial Services Governments and Infrastructure Industrials Life Sciences and Healthcare Real Estate Technology, Media and Telecoms Technology, Media and Telecoms overview Data Centers Resources Insights Client tools Events and training Business topics About About us Purpose and values Responsible business Community Diversity and inclusion Environmental sustainability Pro bono Reports News Careers Global Careers Applications Why us? Lawyers and partners Business professionals Students and recent graduates Offices Finland Visit global site Select a local version of the site Angola Asia Austria Belgium Bulgaria Czech Republic Estonia Finland France Germany Hungary Iraq Ireland Italy Jordan Latvia Lithuania Luxembourg Mauritius Mozambique Netherlands Poland Portugal Qatar Romania Saudi Arabia Slovakia South Africa Spain Sweden Switzerland Tunisia United Arab Emirates United Kingdom United States Rest of the world en Select language English Suomi Privacy notice Privacy notice Privacy notice Clients Third parties Recruitment Home Legal Notices Home Legal Notices Privacy notice Privacy Notice Processing of personal data of Eversheds Attorneys Ltd.’s (“Eversheds”) clients and partners and personal data processing related to marketing. Data processing in a nutshell We collect your personal data for, inter alia, taking care of the client relationship, developing our business operations, and planning marketing. The data we process are given to us by you in connection with, for example, assignments, or obtained from various directories, registers and other public sources of information, such as the Population Information System and credit information registers. We process your personal data when taking care of an assignment and when sending you client communications or marketing material. We respect the protection of your privacy in all of our processing. We do not process any data which can be directly connected to you, unless this is necessary for the purposes of the processing. You can influence how we process your personal data. Your rights as a data subject and how to use them are described in the section Rights of the data subject. We collect your personal data for, inter alia, taking care of the client relationship, developing our business operations, and planning marketing. The data we process are given to us by you in connection with, for example, assignments, or obtained from various directories, registers and other public sources of information, such as the Population Information System and credit information registers. We process your personal data when taking care of an assignment and when sending you client communications or marketing material. We respect the protection of your privacy in all of our processing. We do not process any data which can be directly connected to you, unless this is necessary for the purposes of the processing. You can influence how we process your personal data. Your rights as a data subject and how to use them are described in the section Rights of the data subject . Who processes your data? Eversheds Attorneys Ltd. (Business ID: 25562026, address Fabianinkatu 29 B, 00100 Helsinki, Finland; “we”) processes your personal data as the controller for the purposes of taking care of assignments, engaging in co-operation, or marketing. Who can you contact in questions related to data protection? If you have any questions related to data protection or you wish to exercise your rights, you may contact: Eversheds Asianajotoimisto Ltd. Data protection matters Fabianinkatu 29 B 00100 Helsinki Finland [email protected] Types of personal data What personal data do we process? We will process the following information about you for managing the client relationship and for marketing purposes. Basic information, such as: name and personal identity code (for private clients) contact information: address, telephone number and email address position and title in company, if marketing is directed at the company you work for or if you represent a corporate client Data related to client relationship: communication and correspondence related to client relationship data related to the handling, invoicing and debt collection pertaining to assignments customer due diligence data of the principal and/or client as required under legislation (including copy of identity card) information on meetings Information related to marketing and events: provided information on interests your participation in training and client events marketing measures targeted at you and any information provided or received in connection therewith direct marketing consents and prohibitions Data of co-operation partners: Name Name and position of the company’s representative in the company (when the co-operation partner is a company) Contact details (email address, telephone number, address) Managing the client relationship requires the provision of name and contact details. In certain cases, we are also obligated, under legislation on preventing money laundering etc., to conduct customer due diligence, in which case accepting the assignment requires the provision of the requested due diligence data. For what purposes do we process your personal data? We process your personal data for taking care of assignments as well as taking care of administering, analysing and developing the client relationship, including through electronic client communications, direct marketing, opinion polls and market research. We can also use your personal data for analysing, planning and developing the business operations of Eversheds and any of its group companies. We process your personal data for the planning, targeting, sending, developing and planning of marketing. If you are a co-operation partner or represent such partner, we process your data for the purposes of co-operation. On what grounds do we process your data? We process your data to provide any requested quotations and to prepare and execute an agreement concerning an assignment or co-operation. We also process your data on the basis of the legitimate interests resulting from the client relationship or potential client relationship with you or with the company you represent, as well as based on the legal obligation related to customer due diligence. We process your personal data on the basis of the consent you give us when we ask you for a marketing authorisation for sending direct marketing and newsletters. You may withdraw your consent at any time by informing us about it at [email protected]. Data sources and data transferring From where do we obtain your personal data? We collect your personal data primarily from you when we conclude an assignment agreement with you. If you represent a corporate client, we will collect your data primarily from you. We may also receive your information from the corporate client that you represent. If you represent a corporate client or a potential corporate client, we collect your data from websites and other public sources, the business information service provided by Asiakastieto Oy, and other commercial operators which provide information about companies and their representatives. We check our clients’ credit references from the service provided by Asiakastieto Oy. Who do we share your personal data with? We will disclose your personal data to the extent permitted and required under applicable legislation and proper professional conduct of attorneys-at-law. When assignments require, we will disclose personal data to authorities, courts and counterparties, other law firms belonging in the Eversheds Sutherland chain, and our subsidiary Heinonen & Co, Attorneys-at-Law, Ltd. For the purposes of conducting conflict checks, we will provide Eversheds Sutherland LLP in Great Britain with the necessary personal data (primarily client’s name and contact person, and nature of the assignment). We have outsourced personal data processing to the following service providers, which process your personal data on our behalf: IT system providers Communication service providers Marketing tool providers. Providers of identification solutions Transfers of data to third countries always take place using the bases for transfer pursuant to the General Data Protection Regulation. Joint Controllers We and Facebook Ireland are joint controllers in relation to our company page. We have entered into the Controller Addendum with Facebook ireland (https://www.facebook.com/legal/controller_addendum) to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the joint processing. We have agreed that we provide you with the information given in the section and we have agreed that between us and Facebook Ireland, Facebook Ireland is responsible for enabling your rights under Articles 15–20 of the GDPR with regard to your personal data stored by Facebook Ireland. The contact details and Facebook Ireland and Facebook Ireland’s Data Protection Officer can be found in Facebook Ireland's Data Policy at https://www.facebook.com/about/privacy. When you visit, like or comment our Instagram account or follow our Instagram page, we process jointly your data to collect user information. This user information is collected to develop our Instagram page and services. Further information on how Facebook Ireland processes personal data, including the legal basis Facebook Ireland relies on and the ways you can exercise your rights against Facebook Ireland, can be found in Facebook Ireland’s Data Policy at https://www.facebook.com/about/privacy. We and LinkedIn Ireland are joint controllers in relation to our LinkedIn page. We have entered into the Controller Addendum with LinkedIn Ireland (https://legal.linkedin.com/pages-joint-controller-addendum) to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the joint processing. We have agreed that between us and LinkedIn Ireland, LinkedIn Ireland is responsible for enabling your rights pursuant to the GDPR with regard to your personal data stored by LinkedIn Ireland. The contact details of LinkedIn Ireland and its Data Protection Officer as well as information on the processing of personal data carried out by LinkedIn Ireland, including your rights towards LinkedIn Ireland, can be found in LinkedIn Ireland's Data Protection Policy at https://www.linkedin.com/legal/privacy-policy. When you visit, like or comment our LinkedIn page, we process jointly your data to collect user information. This user information is collected for marketing purposes and to develop our LinkedIn page and services. Rights of the data subject What rights do you have? You can exercise your rights by contacting [email protected] or Eversheds Attorneys Ltd. Data protection matters Fabianinkatu 29 B FI-00100 Helsinki, Finland Right of access You have the right to obtain from the controller confirmation as to whether we process personal data concerning you. You also have the right to access personal data concerning you as well as information on the processing of your personal data as set out in the Data Protection Regulation. If you exercise your right to access the information, we will provide you with a copy of the personal data we process. If you request multiple copies, we may charge a reasonable fee for them on the basis of administrative costs. Some of the data we process are under legislation and proper professional conduct of attorneys-at-law subject to specific secrecy and confidentiality obligations which prevent giving access to such information. Right to rectification You have the right to request us to rectify any incorrect data without undue delay. You also have the right to have incomplete personal data completed by providing a supplementary statement. Right to erasure You have the right to have us erase personal data concerning you without undue delay if: your personal data are no longer needed for the purposes for which they were collected or otherwise processed; you withdraw consent on which the processing is based and there are no other legal grounds for such processing; you object to the processing of your personal data on grounds relating to your particular situation and there are no legitimate grounds for processing, or you oppose the processing of your personal data for direct marketing purposes; we have processed personal data unlawfully; or personal data have to be erased in order to comply with a legal obligation we are subject to. Right to restriction of processing You have the right to have us restrict processing of your personal data so that your personal data may, in addition to storing, be processed only with your consent or for the establishment, exercise or defence of legal claims or to protect the interests of another person if: you contest the accuracy of your personal data, in which case we will restrict processing for a period enabling the controller to verify the accuracy of the personal data; we process your personal data unlawfully and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need your personal data for the purposes of the processing but you require them for the establishment, exercise or defence of legal claims; or you have objected to the processing of your personal data on grounds relating to your particular situation and you are waiting for the verification whether our legitimate grounds override the grounds of your objection. Right to data portability You have the right to receive the personal data provided to us by you in a structured, commonly used and machine-readable format and the right to transmit those data to another controller if: our processing is carried out by automated means; and the processing is based either on your consent or is necessary for executing our agreement or performing pre-contractual measures upon your request. The right to data portability is limited to conduct which does not adversely affect the rights and freedoms of others. Right to object to processing of personal data You have the right to object to the processing of your personal data on grounds relating to your particular situation if there are no legitimate grounds for the processing. You have the right to object to the processing of your personal data for direct marketing purposes. You can prevent the sending of direct marketing by clicking the adjacent link "unsubscribe from marketing communications". Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with the Data Protection Ombudsman if you find that your rights under the Data Protection Regulation have been breached in the processing of the personal data. Storing and data security How long do we store your personal data? We will store the personal data for as long as is necessary for the purposes for which they are processed or for complying with our legal obligations. In the storage periods, we will take into account, for example, the periods for filing suit as set out in legislation, bookkeeping obligations, requirements of anti-money laundering legislation, and the Finnish Bar Association’s recommendations on storing documentation. The customer due diligence data will be stored for a period of five years after the regular client relationship has ended. Bookkeeping material will be stored for six years starting from the end of the year during which the accounting period ended. If you have not paid an invoice and any collection charges by the end of the storage period, we will store the data until the amount has been paid in full or until its payment can no longer be demanded. Personal data collected for marketing purposes will be stored until we are requested to stop processing such personal data for marketing purposes. How do we ensure data security in the processing of personal data? We store your personal data in systems which are protected with firewalls, passwords and other technical and organisational measures generally accepted in the field at the time. Any materials maintained manually are located in premises to which unauthorised access is prevented. Only those of our employees who need to process the personal data over the course of the performance of their working duties have access to the personal data we process. Legal notices General Terms Privacy notice Cookies Distance Selling Whistleblowing LinkedIn YouTube Connect Contact us Client login Staff login Subscribe About us About Eversheds Sutherland Purpose and values Responsible business Alumni Insights Client tools Events and training Business topics Careers Offices © Eversheds Sutherland 2024. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client. For further information about these Eversheds Sutherland Entities and Eversheds Sutherlands’ structure please see the Legal Notices page of this website.

Processing of personal data of Eversheds Attorneys Ltd.’s (“Eversheds”) clients and partners and personal data processing related to marketing.

Data processing in a nutshell

We collect your personal data for, inter alia, taking care of the client relationship, developing our business operations, and planning marketing.
The data we process are given to us by you in connection with, for example, assignments, or obtained from various directories, registers and other public sources of information, such as the Population Information System and credit information registers.
We process your personal data when taking care of an assignment and when sending you client communications or marketing material.
We respect the protection of your privacy in all of our processing. We do not process any data which can be directly connected to you, unless this is necessary for the purposes of the processing.
You can influence how we process your personal data. Your rights as a data subject and how to use them are described in the section Rights of the data subject.
We collect your personal data for, inter alia, taking care of the client relationship, developing our business operations, and planning marketing.
The data we process are given to us by you in connection with, for example, assignments, or obtained from various directories, registers and other public sources of information, such as the Population Information System and credit information registers.
We process your personal data when taking care of an assignment and when sending you client communications or marketing material.
We respect the protection of your privacy in all of our processing. We do not process any data which can be directly connected to you, unless this is necessary for the purposes of the processing.
You can influence how we process your personal data. Your rights as a data subject and how to use them are described in the section Rights of the data subject .

Who processes your data?

Eversheds Attorneys Ltd. (Business ID: 25562026, address Fabianinkatu 29 B, 00100 Helsinki, Finland; “we”) processes your personal data as the controller for the purposes of taking care of assignments, engaging in co-operation, or marketing.

Who can you contact in questions related to data protection?

If you have any questions related to data protection or you wish to exercise your rights, you may contact:

Eversheds Asianajotoimisto Ltd.
Data protection matters
Fabianinkatu 29 B
00100 Helsinki
Finland

[email protected]

Types of personal data

What personal data do we process?

We will process the following information about you for managing the client relationship and for marketing purposes.

Basic information, such as:

name and personal identity code (for private clients)
contact information: address, telephone number and email address
position and title in company, if marketing is directed at the company you work for or if you represent a corporate client

Data related to client relationship:

communication and correspondence related to client relationship
data related to the handling, invoicing and debt collection pertaining to assignments
customer due diligence data of the principal and/or client as required under legislation (including copy of identity card)
information on meetings

Information related to marketing and events:

provided information on interests
your participation in training and client events
marketing measures targeted at you and any information provided or received in connection therewith
direct marketing consents and prohibitions

Data of co-operation partners:

Name
Name and position of the company’s representative in the company (when the co-operation partner is a company)
Contact details (email address, telephone number, address)

Managing the client relationship requires the provision of name and contact details. In certain cases, we are also obligated, under legislation on preventing money laundering etc., to conduct customer due diligence, in which case accepting the assignment requires the provision of the requested due diligence data.

For what purposes do we process your personal data?

We process your personal data for taking care of assignments as well as taking care of administering, analysing and developing the client relationship, including through electronic client communications, direct marketing, opinion polls and market research. We can also use your personal data for analysing, planning and developing the business operations of Eversheds and any of its group companies.

We process your personal data for the planning, targeting, sending, developing and planning of marketing.

If you are a co-operation partner or represent such partner, we process your data for the purposes of co-operation.

On what grounds do we process your data?

We process your data to provide any requested quotations and to prepare and execute an agreement concerning an assignment or co-operation.

We also process your data on the basis of the legitimate interests resulting from the client relationship or potential client relationship with you or with the company you represent, as well as based on the legal obligation related to customer due diligence.

We process your personal data on the basis of the consent you give us when we ask you for a marketing authorisation for sending direct marketing and newsletters. You may withdraw your consent at any time by informing us about it at [email protected].

Data sources and data transferring

From where do we obtain your personal data?

We collect your personal data primarily from you when we conclude an assignment agreement with you. If you represent a corporate client, we will collect your data primarily from you. We may also receive your information from the corporate client that you represent.

If you represent a corporate client or a potential corporate client, we collect your data from websites and other public sources, the business information service provided by Asiakastieto Oy, and other commercial operators which provide information about companies and their representatives.

We check our clients’ credit references from the service provided by Asiakastieto Oy.

Who do we share your personal data with?

We will disclose your personal data to the extent permitted and required under applicable legislation and proper professional conduct of attorneys-at-law. When assignments require, we will disclose personal data to authorities, courts and counterparties, other law firms belonging in the Eversheds Sutherland chain, and our subsidiary Heinonen & Co, Attorneys-at-Law, Ltd. For the purposes of conducting conflict checks, we will provide Eversheds Sutherland LLP in Great Britain with the necessary personal data (primarily client’s name and contact person, and nature of the assignment).

We have outsourced personal data processing to the following service providers, which process your personal data on our behalf:

IT system providers
Communication service providers
Marketing tool providers.
Providers of identification solutions

Transfers of data to third countries always take place using the bases for transfer pursuant to the General Data Protection Regulation.

Joint Controllers

We and Facebook Ireland are joint controllers in relation to our company page. We have entered into the Controller Addendum with Facebook ireland (https://www.facebook.com/legal/controller_addendum) to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the joint processing. We have agreed that we provide you with the information given in the section and we have agreed that between us and Facebook Ireland, Facebook Ireland is responsible for enabling your rights under Articles 15–20 of the GDPR with regard to your personal data stored by Facebook Ireland. The contact details and Facebook Ireland and Facebook Ireland’s Data Protection Officer can be found in Facebook Ireland's Data Policy at https://www.facebook.com/about/privacy. When you visit, like or comment our Instagram account or follow our Instagram page, we process jointly your data to collect user information. This user information is collected to develop our Instagram page and services. Further information on how Facebook Ireland processes personal data, including the legal basis Facebook Ireland relies on and the ways you can exercise your rights against Facebook Ireland, can be found in Facebook Ireland’s Data Policy at https://www.facebook.com/about/privacy.

We and LinkedIn Ireland are joint controllers in relation to our LinkedIn page. We have entered into the Controller Addendum with LinkedIn Ireland (https://legal.linkedin.com/pages-joint-controller-addendum) to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the joint processing. We have agreed that between us and LinkedIn Ireland, LinkedIn Ireland is responsible for enabling your rights pursuant to the GDPR with regard to your personal data stored by LinkedIn Ireland. The contact details of LinkedIn Ireland and its Data Protection Officer as well as information on the processing of personal data carried out by LinkedIn Ireland, including your rights towards LinkedIn Ireland, can be found in LinkedIn Ireland's Data Protection Policy at https://www.linkedin.com/legal/privacy-policy. When you visit, like or comment our LinkedIn page, we process jointly your data to collect user information. This user information is collected for marketing purposes and to develop our LinkedIn page and services.

Rights of the data subject

What rights do you have?

You can exercise your rights by contacting [email protected] or

Eversheds Attorneys Ltd.
Data protection matters
Fabianinkatu 29 B
FI-00100 Helsinki, Finland

Right of access

You have the right to obtain from the controller confirmation as to whether we process personal data concerning you. You also have the right to access personal data concerning you as well as information on the processing of your personal data as set out in the Data Protection Regulation.

If you exercise your right to access the information, we will provide you with a copy of the personal data we process. If you request multiple copies, we may charge a reasonable fee for them on the basis of administrative costs.

Some of the data we process are under legislation and proper professional conduct of attorneys-at-law subject to specific secrecy and confidentiality obligations which prevent giving access to such information.

Right to rectification

You have the right to request us to rectify any incorrect data without undue delay. You also have the right to have incomplete personal data completed by providing a supplementary statement.

Right to erasure

You have the right to have us erase personal data concerning you without undue delay if:

your personal data are no longer needed for the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based and there are no other legal grounds for such processing;
you object to the processing of your personal data on grounds relating to your particular situation and there are no legitimate grounds for processing, or you oppose the processing of your personal data for direct marketing purposes;
we have processed personal data unlawfully; or
personal data have to be erased in order to comply with a legal obligation we are subject to.

Right to restriction of processing

You have the right to have us restrict processing of your personal data so that your personal data may, in addition to storing, be processed only with your consent or for the establishment, exercise or defence of legal claims or to protect the interests of another person if:

you contest the accuracy of your personal data, in which case we will restrict processing for a period enabling the controller to verify the accuracy of the personal data;
we process your personal data unlawfully and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need your personal data for the purposes of the processing but you require them for the establishment, exercise or defence of legal claims; or
you have objected to the processing of your personal data on grounds relating to your particular situation and you are waiting for the verification whether our legitimate grounds override the grounds of your objection.

Right to data portability

You have the right to receive the personal data provided to us by you in a structured, commonly used and machine-readable format and the right to transmit those data to another controller if:

our processing is carried out by automated means; and
the processing is based either on your consent or is necessary for executing our agreement or performing pre-contractual measures upon your request.

The right to data portability is limited to conduct which does not adversely affect the rights and freedoms of others.

Right to object to processing of personal data

You have the right to object to the processing of your personal data on grounds relating to your particular situation if there are no legitimate grounds for the processing.

You have the right to object to the processing of your personal data for direct marketing purposes. You can prevent the sending of direct marketing by clicking the adjacent link "unsubscribe from marketing communications".

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Data Protection Ombudsman if you find that your rights under the Data Protection Regulation have been breached in the processing of the personal data.

Storing and data security

How long do we store your personal data?

We will store the personal data for as long as is necessary for the purposes for which they are processed or for complying with our legal obligations. In the storage periods, we will take into account, for example, the periods for filing suit as set out in legislation, bookkeeping obligations, requirements of anti-money laundering legislation, and the Finnish Bar Association’s recommendations on storing documentation.

The customer due diligence data will be stored for a period of five years after the regular client relationship has ended. Bookkeeping material will be stored for six years starting from the end of the year during which the accounting period ended.

If you have not paid an invoice and any collection charges by the end of the storage period, we will store the data until the amount has been paid in full or until its payment can no longer be demanded.

Personal data collected for marketing purposes will be stored until we are requested to stop processing such personal data for marketing purposes.

How do we ensure data security in the processing of personal data?

We store your personal data in systems which are protected with firewalls, passwords and other technical and organisational measures generally accepted in the field at the time.

Any materials maintained manually are located in premises to which unauthorised access is prevented.

Only those of our employees who need to process the personal data over the course of the performance of their working duties have access to the personal data we process.

Privacy Notice