Email: faroelaw@faroelaw.fo
Phone: +298 669900
Our data protection policy relates to our processing of personal data as data controller. We are the data controller in a number of situations, such as when we handle client matters.
The relevant personal data rules currently applicable for our processing of personal data are laid down in the Faroese Data Protection Act (Act no. 80 of 7 June 2020).
Responibility
To “process” personal data means to use it, including actions like collecting, storing, or sharing, whether manually or automatically.
Faroe Law is usually the “data controller” responsible under the Data Protection Act for the personal data we handle. We act as “data processors” only when providing services like document preservation for clients, requiring a data processing agreement.
Faroe Law ensures all personal data is processed legally, fairly, and securely, so you can trust that your information is well-protected.
Whose personal data do we process?
Faroe Law processes and protects the personal data of our clients, opponents, suppliers, employees and partners, in compliance with the applicable data protection laws.
Employees at Faroe Law have access to the personal data needed to advise you in connection with our daily legal activities. We only process the information necessary to deliver the services we provide. We prioritize legal compliance, ensuring that only relevant and essential data is handled. All information is processed in a lawful and fair manner.
How do we process the data?
“Processing” personal data includes any activity involving it, such as collecting, recording, organizing, storing, modifying, consulting, using, or disclosing information.
We primarily process personal data related to our clients, opponents, suppliers, employees, and partners, but only as needed for specific purposes and when legally justified.
Typically, we handle general personal data like names, titles, phone numbers, and email addresses. This processing is essential for delivering our legal services, issuing invoices, conducting quality assurance and audits, and meeting identity verification requirements under the Anti-Money Laundering Act.
In certain cases, we may also need to process data related to criminal offenses or sensitive information, such as health data.
To whom do we disclose your personal data?
We only disclose your personal data to external parties if necessary and if there is a legal basis for doing so. External parties may be public authorities, private businesses or persons, foundations, associations, etc., depending on the nature of the matter. In addition, we pass on data to our data processors (e.g. IT suppliers).
Internally, only employees with a work-related need to see your personal data will be able to access the data.
Your rights
You have certain rights under the data protection rules in relation to our processing of data about you.
If you wish to exercise any of those rights, please contact us.
Right of access
You are entitled to access the data that we process about you and certain other information.
Right to withdraw consent
Where our processing of your personal data is based on your consent, you are entitled to withdraw your consent at any time. You may do so by contacting us as specified below.
If you choose to withdraw your consent, this will not affect the lawfulness of our processing of your personal data on the basis of your previous consent until the time of the withdrawal. If you withdraw your consent, this will only take effect at the time of the withdrawal.
Right of rectification (correction)
You are entitled to have incorrect data about you corrected.
Right of erasure
In special circumstances you are entitled to have data about you erased before the time of our generally scheduled erasure.
Right of restriction of processing
You are in certain circumstances entitled to restriction of processing of your personal data.
Right to object
You are in certain circumstances entitled to object to our otherwise lawful processing of your personal data.
Right to data portability
You are in certain circumstances entitled to receive personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller.
Right to complain
If you are dissatisfied with our processing of your personal data, you have the right to lodge a complaint with the Faroese supervisory authority, Dátueftirlitið (the Faroese Data Protection Agency). You can find their contact information at www.dat.fo.
You can read more about your rights in the Faroese Data Protection Agency’s guide to the rights of data subjects, available at www.dat.fo.
Contact Faroe Law
If you have any questions about data protection at Faroe Law, would like information on how Faroe Law processes personal data or would like to exercise your rights under the Data Protection Act, you are welcome to contact us at faroelaw@faroelaw.fo or +298 669900.
Faroe Law
Magnus Heinasonar gøta 10
P.O. Box 158
110 Torshavn