Data Protection Policy Updated February 2021

1. General

This data protection policy describes how Park Law AB, a business law firm with the Swedish company registration number 559274-8379 (“Park Law”, “we” or “us”), processes personal data as a data controller. Park Law will only collect and process personal data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679).

2. The Personal Data We Process

In the table below, you can see what types of personal data we process, the purposes for doing so, and the legal grounds upon which we base the processing.

PERSONAL DATA	PURPOSE	LEGAL GROUND	STORAGE TIME
Contact information: Name, email address, address, telephone number(s), personal identification number, employer, as well as other data necessary for the execution of our assignment.	To register the persons as our clients or the contact persons at the client company To handle the client’s matter according to the client’s instructions To invoice the clients To comply with bookkeeping legislation	Fulfilment of a contractual obligation (related to handling the client’s matter) or legitimate interests pursued by Park Law	For 10 years after completion of the relevant assignment
Anti-money laundering (AML) information: name, email address, address, telephone number(s), a copy of passport, or other identity documents, an assessment if the person is politically exposed	To perform the mandatory conflict of interest checks and the anti-money laundering controls	Complying with legal obligations	For 10 years after completion of the relevant assignment
Name, email address, telephone number(s)	To manage and assist those who contact us	Other legitimate interests	As long as it is required to assist those who contact us
Email address	To invite clients to events or to provide other	Other legitimate interests	As long as the Park Law sends out such information unless the recipient declines.

3. Recipients and transfers of personal data

The personal data mentioned above may be transferred to the following categories of recipients:

- Courts, and similar judicial entities and/or authorities such as the Swedish Tax Agency and the Swedish Police Authority

- Recipients to whom Park Law has been directed by the client to transfer information.

- Companies that provide services upon which Park Law relies for its core activities (such as data storage and backup). Park Law only works with companies that process personal data within the EU/EEA or with companies that are considered to maintain the same level of protection as within the EU/EEA, for example, that are subject to the EU Standard Contractual Clauses and supplementary security measures as needed.

4. Your rights

The right to a register excerpt . You have the right to request a transcript of your personal data that we store and process. Your request must be submitted in writing to us using the contact information below, including your signature.

The right to rectification . Park Law wants you to correct inaccurate or incomplete information about you, and kindly ask you to contact us in this case.

Data portability . When it comes to the personal data you have provided to us, you have the right to request a transfer to another provider. Contact us for help with this.

The right to be forgotten . You have the right to object to our processing of your personal data. The consequence of this may be that we are no longer able to carry out the assignment. Contact us and we will see to what extent this is possible.

Marketing communications . You may at any time decline marketing communications from Park Law. Let us know in that case.

5. Changes to this data protection policy

Park Law reserves the right to amend this data protection policy at any time.

All changes to this policy will be found at www.parklaw.se. Please visit our website regularly to keep you informed of any changes.

6. Contact

For more information on Park Law’s data protection management, or if you have any questions or concerns, please feel free to contact Park Law via mia.park@parklaw.se