Privacy Notice 

18 January 2021 

This Privacy Notice describes how we collect and process your personal data, how we share the data we collect, and what are your rights regarding processing. 

”Personal data” means any data that allows the identification of a natural person.  

“Processing” means any action performed on that personal data. 

What personal data do we collect? 

We collect and process the following types of personal data: 

  • basic data such as name, date of birth, contact information, title, professional position, language preferences;  

  • information that we are required to collect due to our statutory obligations relating to know-your client and anti-money laundering procedures, and conflict of interest checking processes, such as ID or passport information, political exposure and beneficial ownership; 

  • data relating to your interaction with us, such as correspondance, visits on our premises, event participation, newsletter subscriptions and related data, appointment bookings, responses to our customer surveys, feedback, and marketing prohibitions;

  • other information relevant for the handling of our client assignments, varying by assignment, may include personal data relating to the client, the client’s family members or other beneficiaries, employees, business partners and/or counterparties, and special categories of data to the extent necessary for the handling of the assignment;

  • personal data generated by us in teh course of our operations;

  • if you apply for a position at Byro, we process personal data necessary to proceed with the recruitment; and

  • in case you consent to our analytics cookies, we may also collect and process analytics data described below in Section Cookies and Analytics.

Kindly note that provision of certain personal data may be a statutory requirement prior to enter into a contract with us. Should you not provide such required data, we might not be able to provide services to you.

How do we collect the data?

The personal data we process is obtained from our clients or other business partners directly, through emails, via website and newsletters, and other communication and documentation you provide to us. We may also process personal data obtained from counterparties or their counsels, government agencies, credit information service providers and publicly available records and sources as well as data generated by us internally in the course of handling our client assignments. In addition, we collect information that the client submits when subscribing for our newsletters or books an appointment from our website.

Why do we process the data?

We will process personal data to provide services to our clients. In that context, we process personal data to identify our clients, complete anti-money laundering procedures and conflict checks. We also process personal data to manage and administer of our client assignment and business relationships, internal reporting, processing of payments, billing, collection, accounting, auditing and relevant services, business development, recruiting, marketing and sales. Furthermore, we process perosal data if necessary for defending or enforcing our rights such as responding to legal claims. If you consent to our analytics cookies, we also process analytics data to help us run our website more efficiently.   

Your personal data will not be subject to automated decision making. 

Legal Grounds for Processing Personal Data 

We process personal data on the following legal grounds: 

  • Compliance with our legal obligations; 

  • Obligations under or prior to entering into an agreement with our client; 

  • Legitimate interest of Byro or that of a third party to operate and develop business effectively, limited by your interests, fundamental rights and freedoms; or 

  • Your consent, which you can withdraw at any time. If the consent is withdrawn, we may not be able to continue our business relationship or continue providing services to this client. Kindly note that the withdrawal of consent will not affect the lawfulness of processing before the withdrawal.

Disclosures of Personal Data 

Our main rule is to not disclose your personal data to any third parties unless we are permitted or required to do so either by law or if an obligation is placed on us by the authorities, if we are involved in a merger or acquisition, in order to assert or defend against legal claims, or for the handling of our client’s assignment, which may involve disclosure of personal data to counsels, advisors and other third parties involved in the assignment, including parties based outside the EEA. We may also disclose your personal data to third parties, if there is a legitimate interest for the disclosure of your personal data (e.g., a joint event with a third party).

We have also entered into agreements with certain service providers who may process your personal data on our behalf as part of their service. We have entered into the appropriate agreements with these service providers to ensure the appropriate processing of personal data 

Transfers of Personal Data 

We do not regularly transfer personal data outside the EEA, however some of our service providers such as Google Analytics may be located outside the EEA. Any transfers of personal data outside the EEA will be made only subject to appropriate safeguards as required by the applicable data protection legislation. 

Personal Data Protection  

Our business relies on confidentiality and we have implemented and maintain appropriate technical and organizational security measures to protect your personal data to ensure data security and compliance with industry standards. We restrict access to your data to such personnel who have a need to access it for the purpose for which it was collected. 

Storage Period 

We keep your personal data only for as long as necessary for our operations and as required by the law. The periods vary greatly from one type of processing to another. 

Cookies and Analytics

We use cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. As our website is powered by Squarespace, you can find more information about viewing the cookies dropped on your device from here.

These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this site only when you acknowledge our cookie banner. We use analytics cookies to view site traffic, activity, and other data. If you consent to our analytics cookies, the information collected for analytics may include e.g. the following details: information about your browser, network, and device; web pages you visited prior to coming to this website; your IP address; clicks; internal links; pages visited; scrolling, searches; and timestamps. This information is also collected by Squarespace, our website analytics provider, to learn about site traffic and activity.

Your Rights 

The applicable data protection legislation provides you with the following rights regarding the processing of your personal data: 

Right to Access 

You have the right to review what data we have collected on you. Please note, that we may deny such access on the grounds provided by law. 

Right to Object 

You have the right based on your particular situation to object to profiling and other  processing in situations where we process your personal data based on our legitimate interests. These situations include profiling and processing of personal data for direct marketing purposes. 

Right to Data Portability

To the extent that you have provided data to us that is processed based on your consent or a contract, and the processing is carried out by automated means, you are entitled to obtain such data primarily in a machine readable format and are entitled to transfer such data to another data controller, where technically feasible.

Right to Restrict Processing 

You can request that processing of your personal data be restricted on the grounds provided by law. 

Right to Rectify  

You have the right to request that any erroneus data be rectified. 

Right to Erasure (Right to be Forgotten) 

You have the right to request us to erase your data. 

Opt out 

You have the right to opt out of future marketing at any time by contacting us and will be offered the possibility to opt out each time we send you marketing material. 

Complaints 

You have the right to submit a complaint regarding the violation of your rights under the applicable data protection laws with the applicable supervisory authority. Please note, that we may be prohibited, due to confidentiality or by law, from disclosing or deleting your personal data and we may be prevented from carrying out certain data subject rights in respect of personal data relating to our client assignments. 

Contact Information 

Byro Legal Oy is the controller of the personal data described in this Privacy Notice. 

If you have any questions or comments concerning the processing of your personal data, or if you would like to exercise any of your data subject rights, please contact: 

Artturi Puoskari 
Byro Legal Oy 
Tel: +358 40 767 6337 
Email: artturi.puoskari@byro.legal with a copy to byro@byro.legal.

Updates to this Privacy Notice 

We may occasionally make changes to this Privacy Notice. All such changes will be posted on this page.