Privacy Policy

At Advokaadibüroo TARK OÜ (hereinafter the Law Firm, we, us), we value your privacy and are committed to protecting your personal data.

This Privacy Notice explains how we collect and process personal data of our clients, prospective clients, business partners, and other individuals who interact with us (hereinafter you), as well as your rights in relation to such data.

1. Data Controller

Advokaadibüroo TARK OÜ
Liivalaia 36, Tallinn, Estonia
Email: info@tark.legal

We act as the controller of your personal data within the meaning of applicable data protection laws.

2. What Personal Data We Process

The categories of personal data we process depend on the nature of our relationship and the services provided. We only process data that is necessary and relevant for specific purposes.

Depending on the circumstances, we may process the following categories of personal data:

Basic Information

  • First and last name
  • Personal identification code or date of birth
  • Identity document details
  • Photograph (where required for identification purposes)
  • Occupation and employer

This information is generally obtained directly from you, but in certain cases may also be collected from third parties or public registers.

Contact Information

  • Telephone number
  • Email address
  • Postal address

Due Diligence Information (KYC)

  • Information required to comply with “Know Your Client” obligations
  • Data necessary to fulfil anti-money laundering and counter-terrorist financing requirements

Service-Related Information

  • Client agreement and related documentation
  • Information received or created in the course of providing legal services
  • Communication records
  • Billing and payment information

3. Purposes and Legal Bases for Processing

We process personal data only where there is a valid legal basis under applicable law.

A. Performance of a Contract

We process personal data where necessary to:

  • Conclude a contract with you
  • Perform obligations arising from a client agreement
  • Provide legal services

This may include client identification, case management, communication, and billing.

B. Compliance with Legal Obligations

We are required to process certain personal data in order to comply with legal obligations, including:

  • Anti-money laundering and KYC requirements
  • Accounting and financial reporting obligations
  • Statutory disclosure or reporting duties

C. Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided that such interests do not override your fundamental rights and freedoms.

Examples include:

  • Managing and improving our services
  • Ensuring information security
  • Managing client relationships
  • Defending or establishing legal claims

You have the right to object to processing based on legitimate interests.

D. Consent

Where required, we process personal data based on your consent (for example, when sending newsletters or marketing communications).

You may withdraw your consent at any time by contacting us at info@tark.legal. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Recipients of Personal Data

Where necessary, we may share personal data with:

  • IT service providers and other technical support providers
  • Auditors, consultants, or professional advisers
  • Debt collection service providers
  • Cooperation partners involved in providing legal services
  • Public authorities, where required by law

We ensure that all service providers process personal data in accordance with applicable data protection requirements.

5. International Transfers

As a general rule, we do not transfer personal data outside the European Union (EU) or the European Economic Area (EEA).

If such transfer becomes necessary for the provision of legal services, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation.

6. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Notice or as required by law, professional regulations, or applicable limitation periods.

Once personal data is no longer required, it will be securely deleted or anonymised.

7. Your Rights

Subject to applicable law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of personal data
  • Request restriction of processing
  • Object to processing
  • Receive your personal data in a structured, commonly used, machine-readable format (data portability)

To exercise your rights, please contact us at info@tark.legal.

You also have the right to lodge a complaint with the competent data protection supervisory authority or seek judicial remedy.

8. Amendments to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legal requirements or our data processing practices.

The latest version will always be available on our website.