Information on the Processing of Personal Data for Clients

Information on the Processing of Personal Data for Clients

Updated: October 2026

1. Data Controller

Hartvig Legal ApS is the data controller responsible for the processing of your personal data.

2. Purpose of Processing Personal Data

We process your personal data for the following purposes:

  • Legal advice: To provide advice, represent you and communicate with you.

  • Course administration: To manage registrations, distribute course materials and issue invoices.

  • Compliance with legal requirements: Including the Danish Bookkeeping Act, the Danish Anti-Money Laundering Act and other relevant regulations.

3. Types of Personal Data

We may process the following information about you:

  • General information: Name, address, email address, telephone number, job title and company.

  • Sensitive information: Information concerning health, trade union membership or other specially protected data, where necessary for the matter and where you have provided such information to us yourself.

  • Other information: Danish CPR number (civil registration number), payment information, as well as documents and correspondence relating to your matter.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  1. Article 6(1)(b) (processing necessary for the performance of a contract).

  2. Article 6(1)(c) (processing necessary for compliance with a legal obligation).

  3. Article 9(2)(f) (processing of sensitive personal data for the establishment, exercise or defence of legal claims).

5. Disclosure of Information

We only disclose personal data to third parties where necessary for the handling of your matter or where required by law. This may include:

  • Courts, opposing parties or public authorities.

  • Business partners who assist with IT, auditing or legal services.

  • Course providers when you participate in external events.

All data processors are subject to written data processing agreements ensuring compliance with the GDPR.

6. Retention Period

We retain your personal data for as long as necessary for the purpose of the processing and in accordance with applicable legislation, including, for example, the rules of the Danish Limitation Act.

  • Case files: Typically 5 years after the matter has been concluded.

  • Course information: Up to 2 years after the course has taken place.

  • Bookkeeping information: Minimum 5 years after the end of the financial year.

7. Your Rights

If you need to contact Hartvig Legal ApS to obtain information about how we process your personal data, you can contact us at privacy@hartvig.legal or by telephone: 36 99 15 50.

Under the GDPR, you have the right to:

  • Obtain access to the personal data we process about you.

  • Have inaccurate information corrected.

  • Have personal data erased (“the right to be forgotten”) – subject to certain exceptions.

  • Restrict or object to the processing.

  • Receive your data in a structured, commonly used and machine-readable format (data portability).

If you wish to exercise any of your rights, you can contact us at privacy@hartvig.legal.

8. Security

We protect your personal data through technical and organisational measures, including encryption, access controls and secure storage.

9. Right to Lodge a Complaint

If you believe that our processing of your personal data is contrary to the GDPR, you may contact the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
www.datatilsynet.dk

10. Changes to the Privacy Policy

We reserve the right to update this policy. The latest version will always be available on our website – www.hartvig.legal.