At Advokaadibüroo TARK OÜ (hereinafter the Law Firm, we, us), we value your privacy and are committed to protecting your personal data.
This Privacy Notice explains how we collect and process personal data of our clients, prospective clients, business partners, and other individuals who interact with us (hereinafter you), as well as your rights in relation to such data.
1. Data Controller
Advokaadibüroo TARK OÜ
Liivalaia 36, Tallinn, Estonia
Email: info@tark.legal
We act as the controller of your personal data within the meaning of applicable data protection laws.
2. What Personal Data We Process
The categories of personal data we process depend on the nature of our relationship and the services provided. We only process data that is necessary and relevant for specific purposes.
Depending on the circumstances, we may process the following categories of personal data:
Basic Information
- First and last name
- Personal identification code or date of birth
- Identity document details
- Photograph (where required for identification purposes)
- Occupation and employer
This information is generally obtained directly from you, but in certain cases may also be collected from third parties or public registers.
Contact Information
- Telephone number
- Email address
- Postal address
Due Diligence Information (KYC)
- Information required to comply with “Know Your Client” obligations
- Data necessary to fulfil anti-money laundering and counter-terrorist financing requirements
Service-Related Information
- Client agreement and related documentation
- Information received or created in the course of providing legal services
- Communication records
- Billing and payment information
3. Purposes and Legal Bases for Processing
We process personal data only where there is a valid legal basis under applicable law.
A. Performance of a Contract
We process personal data where necessary to:
- Conclude a contract with you
- Perform obligations arising from a client agreement
- Provide legal services
This may include client identification, case management, communication, and billing.
B. Compliance with Legal Obligations
We are required to process certain personal data in order to comply with legal obligations, including:
- Anti-money laundering and KYC requirements
- Accounting and financial reporting obligations
- Statutory disclosure or reporting duties
C. Legitimate Interests
We may process personal data where it is necessary for our legitimate interests, provided that such interests do not override your fundamental rights and freedoms.
Examples include:
- Managing and improving our services
- Ensuring information security
- Managing client relationships
- Defending or establishing legal claims
You have the right to object to processing based on legitimate interests.
D. Consent
Where required, we process personal data based on your consent (for example, when sending newsletters or marketing communications).
You may withdraw your consent at any time by contacting us at info@tark.legal. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
4. Recipients of Personal Data
Where necessary, we may share personal data with:
- IT service providers and other technical support providers
- Auditors, consultants, or professional advisers
- Debt collection service providers
- Cooperation partners involved in providing legal services
- Public authorities, where required by law
We ensure that all service providers process personal data in accordance with applicable data protection requirements.
5. International Transfers
As a general rule, we do not transfer personal data outside the European Union (EU) or the European Economic Area (EEA).
If such transfer becomes necessary for the provision of legal services, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation.
6. Retention of Personal Data
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Notice or as required by law, professional regulations, or applicable limitation periods.
Once personal data is no longer required, it will be securely deleted or anonymised.
7. Your Rights
Subject to applicable law, you have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of personal data
- Request restriction of processing
- Object to processing
- Receive your personal data in a structured, commonly used, machine-readable format (data portability)
To exercise your rights, please contact us at info@tark.legal.
You also have the right to lodge a complaint with the competent data protection supervisory authority or seek judicial remedy.
8. Amendments to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legal requirements or our data processing practices.
The latest version will always be available on our website.