Privacy policy
Customer communication and marketing privacy notice

1. Background

DLA Piper Finland Oy, 2425412-8 (“DLA Piper”, “we”) is the data controller in relation to the processing of our clients’ and stakeholders’ personal data for general customer relationship management, communications, and marketing purposes. As a responsible company, we want to make sure that your personal data is handled appropriately in a manner that respects your privacy. On this page, we describe how your personal data is processed by us in connection with our customer relationship, communications, and marketing activities.

Information on how we process personal data in other contexts can be found here or such information will be separately communicated.   

This privacy notice has been last updated on 18 September 2023.  

2. From where do we collect personal data?

We may collect your personal data in the following ways:

  • Personal data that you give to us, for example, in connection with concluding agreements with us and using our services, communicating with us, subscribing to our newsletter, events or other communications.
  • Personal data that we collect or generate automatically, for example, when you visit our website, we automatically collect some data about you and your visit; or when you use or interact with our IT systems.
  • Personal data that we collect from other sources, for example, by obtaining information from publicly available sources, such as if we order company information from business information registers.   

3. For what purposes do we process personal data?

As part of our day-to-day customer relationship management, communications and marketing operations, we process personal data for a wide variety of purposes. These purposes include:

  • Customer relationship management which involves information of our clients and their contact persons, including engagement information, which are needed in order to manage and develop client relationships.
  • Sending newsletters to our clients, potential clients and other stakeholders.
  • Sending invitations to our events and managing event related information which involves information concerning our clients, potential clients and other stakeholders’ participation to our events.
  • Carrying out requests on our website, such as provision of requested content or receiving contact requests.  
  • Carrying out client satisfaction and market research activities, for example, when we contact our clients to better understand our performance and quality of services.
  • Performing client insight, as we combine our clients’ contact information with other information we observe in connection with interacting with our website (e.g. web forms you have submitted, and content of our website that you have viewed).

To undertake these goals, we may process the following personal data:

  • Identity and contact data (e.g. name, email address).
  • Professional data (e.g. job title, information on the company you work for).
  • Engagement and demographic data (e.g. information on legal service areas or topics that interest you, information on the events attended). 
  • Event data (e.g. feedback provided and dietary preferences indicated by you).
  • Cookie and digital identity data (e.g. IP-address, cookie ID and other similar technical information).

4. Lawful basis for processing personal data

Our lawful basis for processing personal data to fulfil the purposes outlined above include:

  • Our legitimate interests to use personal data in order to:
    • Develop customer relationships and offer insightful and meaningful information on our services, events and brand.
    • Ensure that we provide the best possible products and services to our clients.
  • Where required, consent given by you in a specific context, such as:

Consent for collecting cookie and digital identity data in connection with using our website.

5. Recipients that we share your personal data with

In principle, in the context of our general marketing, communications, and customer relationship management activities, we do not disclose personal data to any external third parties. However, in some cases we may share general identity data, contact data, professional data, and event related data with other DLA Piper entities or with our collaboration partners. For example, if we arrange a joint client event together with other DLA Piper entities or our collaboration partners, it is necessary to share personal data for event management purposes. Other DLA Piper entities and our collaboration partners are independent controllers.

In addition, to fulfil the purposes of processing personal data, we transfer (or allow access to) personal data to service providers that we have engaged. These service providers provide us with IT, software and marketing related services, such as the provider of our customer relationship management system, social media management tools and analytics tool. These service providers may only process personal data for the purposes outlined in this privacy notice in accordance with our instructions, and never for their own purposes.

6. Where we process personal data

Personal data are predominantly processed within the EU/EEA. However, in limited circumstances some of our service providers may provide part of their services to us from countries outside the EU/EEA. For such cases, we have ensured an adequate level of data protection in accordance with the requirements of EU data protection legislation, including by way of transferring data to countries with an adequacy decision adopted by the European Commission or using, as required, standard contractual clauses adopted by the European Commission (together with appropriate technical and organisational safeguards).

Furthermore, all the DLA Piper entities have signed a data sharing agreement which is based on standard contractual clauses adopted by the European Commission to ensure we will comply with our legal and regulatory obligations under EU data protection legislation.  

7. Data retention

Personal data processed for customer relationship management is stored for the period of customer relationship. The stored data is erased after we have verified that the relevant contact person has been inactive, and no interaction has taken place for a longer period.    

Personal data processed for the purpose of specific marketing activities, such as sending newsletters or managing specific event related information, is stored for the duration of your subscription (i.e. until your unsubscribe from our communication) or until the end of the event and thereafter for a short period to assess the quality and success of the event. However, we may retain limited engagement information on past events attended for customer relationship management purposes (in which case the applicable storage period is as provided above for customer relationship management).  
Data collected from visitors of our website is stored for a maximum period of three years following the last interaction.

8. Your Rights

You have the following rights under EU data protection legislation:

  • Right of access to data.
  • Right to request rectification, erasure or restriction of processing of personal data.
  • Right to object to the processing of personal data, including the right to object to direct marketing.
  • Right to data portability.
  • Right to lodge a complaint with a supervisory authority (contact details for the Finnish data protection authority can be found here).

You can send your request to exercise your rights at marketinghelsinki@fi.dlapiper.com. You must specify the particular right you are exercising, including the relevant personal data in question.  

9. We can update this information

We may occasionally update this information, e.g. if we would process personal data for new purposes, collect additional categories of personal data or share personal data with other recipients. In such a case we will notify you in an appropriate way. The latest version of the information is always published on this page.

10. Contact

If you have any questions regarding the processing of your personal data, please do not hesitate to contact us. See below for contact details.

DLA Piper Finland Oy
2425412–8
​​​​​​​Kanavaranta 1, 00160 Helsinki

E-mail: marketinghelsinki@fi.dlapiper.com