Processing of Personal Data

When you interact with us, either as a private client or as a contact person for a corporate client, Rime processes your personal data. Below, you will find information on the personal data collected, the reasons for this collection, and your rights associated with the processing of your personal data.

The Data Controller for the personal data we process is Rime Law Firm DA (“Rime”), represented by our managing director, Niels R. Kiær. Rime’s contact information is:

Address:  Pb. 394 Sentrum, 0103 Oslo

Email:  mail@rime.no  Phone: 23 00 34 00

Organization Number:  879 469 082

For any questions regarding our processing of personal data, you can contact us.

Why We Collect Personal Data and the Type of Information We Collect

We collect and use your personal data for various purposes depending on who you are and how we come in contact with you. We collect the following personal data for the purposes stated here:

We process contact information, identity documentation, payment information, etc. This processing is based on GDPR Article 6 (1) letter b (necessary to fulfill a contract to which the data subject is party) for private clients, and GDPR Article 6 (1) letter f (necessary for purposes related to legitimate interest) for corporate client contacts. Additionally, Rime is legally obliged under the Anti-Money Laundering Act § 4 (2) no. 3, cf. §§ 17 and 18, and processes data accordingly under GDPR Article 6 (1) c (necessary to fulfill a legal obligation).

We process personal data necessary for the case at hand. This processing is based on GDPR Article 6 (1) letter b for private clients and GDPR Article 6 (1) letter f for corporate client contacts.

We process personal data necessary for the case. The processing is based on GDPR Article 6 (1) letter f (necessary for purposes related to legitimate interest). We have determined that this processing is essential for efficiently resolving cases according to commercial considerations and proper legal practice. For special categories of data, the processing has legal grounds in GDPR Article 9 (2) letter f (establishing, asserting, or defending legal claims).

We process necessary personal data based on GDPR Article 9 (2) letter f, alongside a systemic consideration of the Criminal Procedure Act and the rules of proper legal practice point 2.3.

We process personal data necessary for the case, based on the legal obligation to archive ongoing and completed cases.

We process contact and payment information based on GDPR Article 6 (1) letter b for private clients and GDPR Article 6 (1) letter f for corporate client contacts.

In this context, we process names and email addresses based on the consent of the recipient, usually a private client or a contact person at a corporate client, as per the Marketing Act § 15.

We process contact information based on GDPR Article 6 (1) letter f (necessary for purposes related to legitimate interest), as it is essential for safeguarding our commercial interests.

(e.g., reuse of documents in later cases). We process necessary personal data based on GDPR Article 6 (1) letter f. We have assessed that this processing is essential for internal learning processes and working more efficiently.

We process CVs, applications, certificates, diplomas, reference statements, internal evaluations/interview reports, potential personality tests, and aptitude tests based on a contract with the job applicant, i.e., GDPR Article 6 (1) letter b. If we retain application documents after the recruitment process is concluded, it’s based on the consent of the applicant, cf. GDPR Article 6 (1) letter a.

We process server logs, detection, clarification, and follow-up of security incidents, etc., based on GDPR Article 6 (1) letter f (necessary for purposes related to legitimate interest). We have assessed this processing as essential for ensuring information security and preventing unauthorized disclosure of personal data.

Rime does not use cookies.

We retain your personal data as long as necessary for the purpose for which the personal data was collected.

This means, for instance, that personal data processed based on your consent will be deleted if you withdraw your consent. Personal data processed to fulfill a contract with you will be deleted once the contract and all obligations arising from the contractual relationship are met. In both cases, deletion assumes that current legislation does not dictate continued retention and that the data is no longer necessary for the purpose for which it was collected, as per the storage time overview below.

Personal data processed to fulfill a legal obligation by the authorities will be deleted when the legal basis dictates so. This includes accounting and bookkeeping regulations.

Below is an overview of how long we process personal data for different purposes:

You have the right to request access, correction, or deletion of the personal data we process about you. You also have the right to request limited processing and under certain conditions, object to the processing. You can read more about these rights on the Data Inspectorate's website: www.datatilsynet.no.

To exercise your rights, you must contact us by email or phone. We will respond to your inquiry as soon as possible, and no later than 30 days. We will ask you to confirm your identity or provide additional information before allowing you to exercise your rights over us. We do this to ensure that we only provide access to your personal data to you - not someone pretending to be you.

You can withdraw your consent for processing personal data at any time.

Complaints

If you believe that our processing of personal data does not align with what we have described here, or that we otherwise violate privacy legislation, you can complain to the Data Inspectorate. You can find information on how to contact the Data Inspectorate on their website: www.datatilsynet.no.

If there are changes to our services or changes in the regulations regarding the processing of personal data, it may change the information you are given here. Updated information will always be easily accessible on our website.