This notice explains how KWS Law, 75 King William Street, London, EC4N 7BE will collect, use or otherwise process your
personal data.
“Personal data” is information relating to you as a living, identifiable individual. KWS Law will process your personal data in accordance with data protection and privacy laws applicable to the firm (including, as applicable: the Data Protection Act
2018, the UK GDPR and the EU GDPR).
In the course of our activities, we may obtain a range of personal data about you. This data may be received from you, or it
may be received from a third party such as another professional advisor, witness, opponent, court, counterparty or obtained
from a public source.
The types of personal data that we hold might include:
Contact details
Identification documents including NI numbers, passport and visa details
Information about you, in connection with matters that we are acting on
Financial information (including invoicing information, credit searches, bank account, card and tax details)
Biographical information about your job, background, interests, and personal life
Expressions of opinion about you
Images captured by CCTV cameras at our offices
Marketing information (e.g. which of our services are relevant/potentially relevant to you, details of your visits to our
website, attendance at events
We may also generate personal data about you in connection with our work for you or in connection with marketing
activity.
We act as a data controller alongside our clients in respect of personal data related to their matters or prospective instructions and whenever we are exercising our professional judgement. Occasionally, we may act as a processor of data on behalf of a client e.g. where we process personal data without providing any legal advice in relation to that personal data.
The basis upon which we process your personal data and consequences to you of not providing it, depend upon the type of personal data involved, our relationship with you, and the purpose for which the data is needed.
To the extent that we have a contract with you (or one is in prospect), the primary legal basis for processing your personal data is that the processing is necessary for the performance of our contract with you, or in order to take steps at your
request prior to entering into a contract.
In addition, processing of your personal data may be necessary for compliance with our legal and professional obligations to
our clients and to third parties. This includes for example, our professional and contractual duties to our clients, the courts
and our obligations to regulators. It also includes other legal obligations we have, for example to identify clients and to report suspected money laundering to the National Crime Agency.
Further, processing may be necessary in pursuit of our legitimate interests. We have legitimate interests:
in complying with our legal and professional obligations;
in maintaining the security of the systems, premises, equipment and information to prevent cyber or physical incidents;
in monitoring capacity and quality to deliver an appropriate level of service to our clients;
in developing new systems or undertaking training and know-how sharing internally with relevant lawyers;
in conducting market research on issues that we believe that you have an interest in or could offer useful insights to
inform commercial decisions or to assist in product development; and
in the case of processing your data for marketing purposes, in marketing our services including providing information
about our services which are or may be of interest to you and building our relationships with clients and prospective
clients.
The addendum below sets out detail of additional legal bases applicable to processing the personal data of particular types
of work we may undertake for you.
We will use your details to provide you with information about our work, activities and matters such as invitations to events
and seminars that we think you will find of interest. We do not otherwise share your data for marketing purposes.
Certain personal data is subject to additional safeguards under data protection legislation. Such information includes details
of:
your racial or ethnic origin;
your political opinions;
your religious beliefs or other beliefs of a similar nature;
whether you are a member of a trade union;
your physical or mental health or condition;
your sexual life;
the commission or alleged commission by you of any offence, or
any proceedings for any offence committed or alleged to have been committed by you, the disposal of such
proceedings or the sentence of any court in such proceedings.
It may be necessary for us to process some sensitive personal data in order to comply with legal or regulatory obligations
(including making reasonable adjustments for clients with disabilities), or if we need to do so in order to seek confidential
legal advice, or establish or defend legal claims.
Otherwise, we will only process your sensitive personal data with your explicit consent. If you voluntarily send us your
sensitive personal data, we shall treat that as your explicit consent for us to hold that data, which otherwise shall only be
processed in accordance with this policy. Where such data is processed by us on the basis of your explicit consent, you may
withdraw your consent at any time: this will not affect the lawfulness of any processing based on your consent before you
withdrew it.
If you decide not to supply personal data that we have requested and as a result we are unable to comply with our professional, legal or regulatory obligations, then we may have to cease acting for you or may be unable to enter into a relevant contract with you.
Your personal data may be seen or used by our partners and staff (whether lawyers or support staff) in the course of their duties or others lawfully working with us in the ordinary course of our business (for example, former staff or partners working with us on a consultancy basis).
We may need to share your data with relevant third parties for example other professional advisers, auditors, counter parties,
witnesses, courts and tribunals in order to fulfil our legal and professional obligations, or to undertake searches about you or
where you ask us to share your data.
We may also outsource some of our support services or engage consultants and others to support us (for example secretarial, marketing, courier, translation or IT services). In these cases relevant personal data would be provided to and processed by the provider of such services, in accordance with the terms of our contract with them and to the extent appropriate for the performance of that contract.
We might need to share or transfer your data confidentially with relevant parties and/or their professional advisers if there is a merger, acquisition, change of control, joint venture or other similar arrangement involving KWS Law.
Exceptionally we might need to share your personal information in order to obtain necessary confidential legal advice or to comply with our insurance, legal or regulatory obligations. For example, we may have to provide some or all of the information to our insurers, legal advisors, public authorities such as HMRC, or to a court/tribunal.
In the course of carrying out the activities referred to above we may transfer your data to other countries, which may not have
the same legal protections for your data as the UK.
Where data is being transferred outside of the UK and/or European Economic Area, we will take steps to ensure that your
data is adequately protected in accordance with UK legal requirements and the EU GDPR (as applicable).
Otherwise for example we may transfer your data if it is necessary for performance of our contractual duties to you, or because we have other legal obligations to transfer the data, or it is necessary for important reasons of public interest. If you require further detail about the protections in connection with any particular relevant transfer, matter or jurisdiction please ask us.
We expect to retain your personal data in accordance with requirements of law and regulation, client requirements, best
practice and insurance.
We may be obliged to suspend any planned destruction or deletion under our retention policy where legal or regulatory
proceedings require it or where proceedings are underway such as require the data to be retained until those proceedings have
finished.
You have the right to request copies of the personal data we hold about you. If you wish to obtain a copy of your personal
data, you may contact us by emailing: info@75kws.com You also have the right to ask for inaccuracies in your data to be corrected, and in certain circumstances for us to stop processing your data or for your data to be erased. Some of these rights
are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise
them.
If you have any questions about this privacy statement, the practices of this web site or your dealings with this web site, please contact us at info@75kws.com. If you believe we have failed to comply with our obligations you have the right to lodge a complaint with the Information Commissioner’s Office.
