We care about your personal privacy and protecting your personal data. This policy provides information about how we collect, process, and share your personal data, as well as what rights you have.

ProLegal Göteborg AB, reg. no. 556873-2761, (“we” or “ProLegal”) is the data controller for the processing of your personal data and undertakes to protect and respect your privacy and to comply with all applicable laws and regulations, including the EU General Data Protection Regulation (2016/679), GDPR (General Data Protection Regulation).

If you have any questions or wish to exercise your rights under the GDPR, please contact us at info@prolegal.se or by mail to Box 307, 421 23 Västra Frölunda.

1. Your rights

According to the GDPR, you have the right to control your own personal data and to receive information from us about how we process data about you. Below you can read about your rights.

Right to erasure (right to be forgotten)

In certain cases, you may have your personal data erased. Erasure may be relevant, for example, for personal data that is no longer necessary to process or retain for the purpose for which it was collected, or for personal data that has been processed based on your consent if you choose to withdraw your consent. In some circumstances, we are not able to erase your personal data, for example when your personal data is needed for us to fulfill a legal obligation, if it is still necessary to process for the purpose for which it was collected, or if our interest in continuing to process the data outweighs your interest in having it erased.

Right to rectification

If you believe that your personal data is incorrect or incomplete, you may request to have it rectified or supplemented.

Right of access to your data

You have the right to obtain confirmation as to whether we are processing personal data about you and, if so, to access such data as well as information about the processing. This is done by making a so-called data subject access request.

Right to information

You have the right to be informed about how we process your personal data. We inform you through this Privacy Policy and by responding to your questions.

Right to restriction

If you believe that the data we hold about you is not correct, that our processing is contrary to the law, or that we do not need the data for a specific purpose, you have the right to request that we restrict our processing of that data. You may also request that we do not process your data while we are verifying this, or while we are checking whether you have the right to object to certain processing.

Right to object

You have the right to object to the processing of your personal data that is based on a balancing of interests (legitimate interest). If we cannot demonstrate that there are compelling and legitimate reasons for the processing, we must cease such processing. If you object to receiving direct marketing from us, we will stop sending such communications.

Rights relating to automated decision-making

You have the right to object to an automated decision if the decision produces legal effects or similarly significantly affects you.

Right to move your data (data portability)

If we process your personal data to fulfill a contract or based on your consent, you may in certain cases have the possibility to obtain your personal data for use elsewhere, for example by receiving a copy of it in a machine-readable format and transferring it to another data controller.

Withdrawal of consent

If you have given consent for us to process your personal data, you have the right to withdraw your consent to the processing of your personal data at any time by contacting us using the contact details above.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), which is a supervisory authority in Sweden overseeing how we as a company comply with the GDPR legislation. More information can be found on IMY’s website.

Please note that ProLegal may process personal data that is subject to confidentiality or that we have legitimate reasons to withhold from the data subject. Therefore, the possibilities to exercise Your rights may be limited in certain cases.

2. Collection of personal data

We may collect and process the following personal data about you, for example when we provide our services and to communicate with you or to comply with the law.

Customers
Name, title, address, telephone number, email address, identification details for customer due diligence and, where applicable, personal identity number regarding natural persons or representatives of legal entities, as well as payment and invoicing information.

In connection with our assignments, we may also collect the above information about individuals other than our customers, such as opposing parties, representatives, public officials, judges, witnesses, experts, or similar.

Suppliers and business partners

Name, title, address, telephone number, email address and, where applicable, personal identity number regarding representatives of legal entities, as well as payment and invoicing information.

Applicants, interns and consultants

Name, title, address, personal identity number, age, email address, CV, cover letter, information about education, certificates and grades, work experience, interests, photos, and other data that you or your employer provide to us in connection with an application.

In connection with a recruitment process, we may also process personal data about you if you are listed as a reference or other contact person.

Participants and invitees to seminars and training courses, as well as recipients of marketing

Name, title, address, telephone number, email address, organizational affiliation, photo of external speakers, and other information that you provide to us in connection with a registration, such as dietary preferences.

3. Purposes of the processing

We process your personal data for various purposes. Below, the main purposes for which we may process your personal data are described.

Customers

– Prepare and administer our assignment requests.

– Fulfil our obligations towards you as a customer.

– Communicate within the scope of the assignment.

– Manage and administer time reporting and invoicing.

– Carry out checks such as customer due diligence or conflict of interest checks and otherwise fulfill our obligations under the law (e.g. the Anti-Money Laundering Act or the Accounting Act).

– Where applicable, to establish, exercise and defend ourselves against legal claims.

Suppliers and business partners

– Fulfil our obligations towards our suppliers and business partners.

– Communicate within the framework of the contractual relationship. 

– Manage and administer contracts, invoicing and payment.

– Where applicable, to establish, exercise and defend ourselves against legal claims.

Applicants, interns and consultants

– To administer the recruitment process and, based on factors such as experience, qualifications, grades, and references, evaluate whether we can offer you employment, an assignment, or an internship with us

– Regarding consultants, also to manage and administer assignment contracts with the consulting company.

– If you have given your consent, we will also process your data in order to contact you for future recruitment.

Participants and invitees to seminars and training courses, as well as recipients of marketing

– Plan, administer, invite to, and carry out seminars, training courses, and events.

– Market our events.

– Publish content on our social media.

– Maintain contact registers for business contacts.

– Enable feedback, respond to questions, and facilitate other communication.

– Provide information and direct marketing regarding our services.

– Serve as a basis for market and customer analyses, statistics, and business follow-up for the purpose of developing and improving our operations.

4. Legal basis

We rely on different legal bases depending on the purpose for which we process your data. The processing of your personal data is carried out on the following legal bases:

– Contract: The processing is necessary for us to be able to enter into or perform a contract with you,
for example to prepare, administer and carry out our assignments as well as handle invoicing, payments and other similar administration.

– Legal obligation: The processing is based on obligations under the law, for example to carry out customer due diligence checks in accordance with anti-money laundering legislation or to retain documentation in accordance with accounting regulations.

– Balancing of interests (legitimate interest): We process personal data when we have assessed that we have a legitimate interest in processing your personal data, for example to carry out conflict of interest checks and manage conflicts of interest regarding potential customers, administer recruitment processes, or to be able to send you offers about our services and seminars and maintain contact registers. You always have the right to object to processing based on a balancing of interests.

– Consent: In cases where no other legal basis is applicable, or where required by law, we obtain your consent before processing your personal data, for example, to retain your application for future recruitment needs or to collect dietary preferences (which are deleted after the event) in connection with an event. You always have the right to withdraw any consent given at any time.

5. Retention period and erasure of personal data

Your personal data is stored only for as long as there is a need to retain it in order to fulfill the purposes for which the data was collected in accordance with this Privacy Policy. If the personal data is no longer needed to fulfill the purposes for which it was collected, we will erase the data.

6. Disclosure of data

ProLegal may disclose your data to third parties, such as system providers, IT service providers, communication service providers, service provider partners, or a counterparty. We may also disclose your personal data to authorities such as the Swedish Tax Agency, the Swedish Enforcement Authority, courts, or other law enforcement authorities.

When entering into a contract with ProLegal, your data may be disclosed to credit reference agencies.

Personal data may also be disclosed by ProLegal if necessary to comply with applicable legal requirements or requests from authorities, to protect ProLegal’s legal interests, or to detect, prevent, or address fraud and other security or technical issues.

We take appropriate measures to ensure that your personal data is protected when it is shared with third parties.

7. Transfer to third countries

If ProLegal’s processing of your personal data involves the transfer of personal data to countries outside the EU/EEA, there is either a decision from the European Commission that the country ensures an adequate level of protection or appropriate measures in place to ensure that your rights are protected, for example through standard contractual clauses adopted by the European Commission.

8. Information security

The security of personal data is important to ProLegal. We have therefore implemented appropriate technical and organizational security measures necessary to protect your personal data against unauthorized access, alteration, and erasure, and we follow generally accepted standards and frameworks for such measures.

9. Cookies

Cookies are small text files consisting of letters and numbers that are sent from our web server and stored on your device (e.g. computer, mobile phone or tablet) when you visit our website. They are used to make the website function and to improve the user experience by saving information about your preferences and activities on the website.

För mer information om cookies se post- och telestyrelsens webbsida, pts.se.

At ProLegal, we use the following cookies:

– Sessionscookies (a temporary cookie that expires when you close your browser or device).

– Persistent cookies (cookies that remain on your computer until you delete them or they expire).

– First-party cookies (cookies set by the website you visit).

– Third-party cookies (cookies set by a third party’s website).

– Similar technologies (technologies that store information in your browser or on your device in a manner similar to cookies).

The cookies we use generally improve the services we offer. Some of our services require cookies to function properly, while others enhance the services for you. We use cookies to collect overall analytical information regarding your use of our services and to save functional settings such as language and other details. We also use cookies to be able to target relevant marketing to you.

You can change your cookie preferences at any time in any of the following ways:

– Through our consent manager, you can click on the cookie icon at the bottom left of the website and choose which types of cookies you consent to being used on our website. You can change your settings at any time by returning there.

– Through your browser, you can block all cookies, only accept first-party cookies, or delete cookies when you close the browser.

Please note that some of our services may not function if you block or delete cookies.

10. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. Any changes will be published here on our website and will take effect immediately upon publication.

This Privacy Policy was last updated on 1 July 2026.