Processing of personal data – information according to the General Data Protection Regulation (EU) 2016/679

Bright Advokat AB believes that your personal privacy is very important. Therefore, we protect you from feeling unsecure when processing your personal data. As the personal data controller for the personal data we receive, we therefore ensure that we always follow applicable legislation on the protection of personal data.

Personal data is such information that, directly or indirectly, can be attributed to a physical person who is alive. Examples of such information are names, contact details, photos, social security numbers, IP address and content in e-mail and other communication. Bright Advokat AB processes different personal information about you depending on the situation, but mainly your name, identification information, contact information and information about your corporate commitments. We may also process other information about you if necessary, e.g. for a proper money laundering control. We process personal information about you who are employed by a client or counterparty, a counterparty agent, a client as a private person, otherwise affected by our assignments, attends our seminars and other events or receives newsletters, seeks employment with us or performs assignments for us.

You are not obliged to provide us with personal data, but without it we cannot undertake an assignment as your legal representative since we cannot carry out the necessary controls regarding conflict of interests and money laundering.

We process personal data in order to carry out mandatory controls regarding conflict of interests and (when applicable) money laundering, to perform and administer assignments, to safeguard our clients’ interests, for accounting and billing purposes, and to communicate with you. This information is processed on the basis that it is necessary for us to enter into and execute agreements where our or our client’s interest in processing your data outweighs your potential interest in us not processing the data. The information can also be used for marketing and events organized by Bright Advokat AB. The data processed for marketing purposes is processed on the basis of our legitimate interest in developing the business and communicating with our contacts.

Contact us if you want to know more about the basis on which we process your personal data and how we, if applicable, have balanced possible interests.

Bright Advokat AB will not disclose personal information to anyone outside the firm unless (i) it has been specifically agreed between the law firm and the person whose personal data we process, (ii) it is necessary in the context of a specific assignment to safeguard the client’s rights and interests; (iii) it is necessary for us to fulfil a statutory obligation or to comply with a governmental decision or court decision; or (iv) we employ third-party service providers who perform assignments on our behalf. The information may be disclosed to the courts, authorities, counterparties and counterparties if necessary to safeguard the client’s rights.

The personal data is stored, in accordance with the Code of Conduct of the Swedish Bar Association, for a period of at least ten years from the date of completion of the case, or the longer time required by the nature of the case. We do not store personal data longer than necessary for the purpose of the processing, unless the data must or may be stored longer by law.

The personal data you provide us during a recruitment process will only be processed by us for recruitment purposes. Furthermore, the personal data will only be available to the selected employees at Bright who are responsible for the current recruitment process. Your personal data will be processed during the duration of the recruitment process and for a maximum period of 2 years after you have submitted your application to us. This is so that we will be able to contact you in the event of any upcoming recruitment, should you not be offered a position with us at the first application.

You have the right to receive information from Bright Advokat AB about what personal data we store about you without charge. We will, at your request or at our own initiative, correct or delete any information that is incorrect or limit the processing of such information. You also have the right to access your personal data in a machine-readable format as well as the right to data portability. If you are dissatisfied with our treatment of your personal data, you can submit a complaint to a supervisory authority, which in Sweden is the Data Inspectorate ( You can also contact the regulator in the country where you live or work.

Contact us via email at or by mail to address below if you have any questions regarding our personal data processing. Personal data controller is Bright Advokat AB, Biblioteksgatan 11, 111 46 Stockholm.