Privacy policy
Updated on 19 September 2025
Introduction
Why do we have a privacy policy?
Uneek AB, reg. no. 559491-1439, (“Uneek” or “we”) cares about your privacy. We process your personal data as part of our work. Your integrity is important to us, and we are committed to being transparent with the information we process about you and why. We have therefore prepared this privacy policy which describes our processing of your personal data in accordance with the EU regulation 2016/679 (“GDPR”) to guarantee an open and transparent processing of your personal data.
Who is responsible for your personal data?
Uneek AB, reg. no. 559491-1439, is responsible for the processing of your personal data.
Personal data processed within the framework of our client assignments
How do we collect your personal data?
We process personal data which has been submitted to us by (i) client, (ii) counterparty, (iii) legal representative of counterparty, (iv) other parties that has a connection to the matter, or (v) which has been collected from public records or other sources.
What personal data do we process about you?
We process the following categories of personal data about you who are a client of Uneek or in any other way are connected to an assignment performed by us or our lawyers:
(i) Clients
We process personal data relating to employees or contractors at legal entities and clients who are individuals. The data comprise of name, title, employer, personal identification number, contact information, matter designation, matter description, financial information, information regarding if the client or relatives of the client is a person in a politically exposed situation as well as name and profession/position of such a politically exposed individual and billing and payment information.
(ii) Counterparties
We process personal data relating to employees or contractors at legal entities and counterparties which are individuals. The personal data we process in this regard is name, title, employer, personal identification number and matter designation.
(iii) Other individuals
We process personal data about other individuals who are of relevance within the framework of our assignments. These individuals may be legal representatives of the counterparty, arbitrators, judges, consultants, witnesses, experts, employees of companies which are sold or acquired, parties of a contract or similar.
(iv) Special categories of personal data
Within the scope of our assignments, we may process personal data relating to special categories of personal data, which are necessary and relevant for the execution of the assignment. On occasional basis we process special categories of personal data which include racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information relating to health or sex life only if relevant for the assignment.
Why do we process your personal data?
We process your personal data to carry out our assignment and to communicate with counterparties and other individuals connected to the assignment.
We process your personal data for the following purposes to comply with legal obligation:
(a) to establish that there is no conflict of interests.
(b) in order to be able to observe the special rules concerning money laundering and terrorism.
We process your personal data for the following purposes for the performance of a contract:
(a) to manage and administrate billing and payment services.
(b) to manage and administrate our accounting.
(c) to manage and administrate clients’ receivable arising within the scope of an assignment.
We process your personal data for the following purposes on the basis of a balance of interest:
(a) to defend ourselves against legal claims regarding money laundering, terrorism and the EU Market Abuse Regulation.
(b) to defend ourselves against any legal claims.
(c) to make administration of our fee accounting possible.
(d) to communicate with you via mail, e-mail and phone.
(e) to administrate and book meetings.
(f) to provide effective and accurate documentation, administration and handling of the assignment.
Our legitimate interest is to exercise and protect our rights in case of legal claims and to administrate the relationship with you as our client/counterparty/other party within the scope of the assignment.
Providing your personal data is not a legal requirement, however it is required in order to enter into an agreement with us as a client. We will not be able to fulfil our agreement or carry out our commitments towards you if you do not provide us with your personal data.
Who has access to your personal data?
As a law firm we observe professional secrecy and confidentiality, and we only share your personal data in certain specific cases.
We share your personal data with counterparties within the assignment.
Your personal data will also be shared with parties that process personal data on our behalf, so called processors, such as suppliers of IT and systems that provide development and support for our systems and cloud services.
Your personal data will also, when applicable, be shared with the following parties which themselves are controllers of the processing of personal data:
(a) the client’s insurance provider, accountant or others according to the client’s instructions.
(b) providers of liability insurance to safeguard legal interests.
(d) representatives of counterparties within the scope of the assignment.
(e) if applicable, arbitration tribunal and court.
(f) authorities, if such a disclosure is prescribed by law, for example the Enforcement Authority.
(g) banks and debt collectors, for example regarding client funds and to safeguard legal interests.
(h) the police or the financial police, if such disclosure is prescribed by law.
How long will we process and store your personal data?
We process your personal data to carry out our assignment and to communicate with counterparties and other individuals connected to the assignment.
We process your personal data for the following purposes to comply with legal obligation:
(a) to establish that there is no conflict of interests.
(b) in order to be able to observe the special rules concerning money laundering and terrorism.
We process your personal data for the following purposes for the performance of a contract:
(a) to manage and administrate billing and payment services.
(b) to manage and administrate our accounting.
(c) to manage and administrate clients’ receivable arising within the scope of an assignment.
We process your personal data for the following purposes on the basis of a balance of interest:
(a) to defend ourselves against legal claims regarding money laundering, terrorism and the EU Market Abuse Regulation.
(b) to defend ourselves against any legal claims.
(c) to make administration of our fee accounting possible.
(d) to communicate with you via mail, e-mail and phone.
(e) to administrate and book meetings.
(f) to provide effective and accurate documentation, administration and handling of the assignment.
Our legitimate interest is to exercise and protect our rights in case of legal claims and to administrate the relationship with you as our client/counterparty/other party within the scope of the assignment.
Providing your personal data is not a legal requirement, however it is required in order to enter into an agreement with us as a client. We will not be able to fulfil our agreement or carry out our commitments towards you if you do not provide us with your personal data.
Personal data processed in connection with application for employment
What personal data do we process about you?
We process the personal data that you provide to us in your application. Such data includes name, personal identification number, address, phone number, e-mail address, image (if provided), education, education grades, work testimonial, professional experience and other information that you provide about yourself in your application. For some candidate categories we may perform tests. In these situations, we provide information about the processing of such personal data before initiating the test and ask for your consent to the processing.
Why do we process your personal data?
We base our processing on three legal grounds, namely (i) carrying out our obligations and exercising our rights in the field of employment, (ii) a balance of interests (where we balance our interest of using the information against your interest of privacy), and (iii) consent.
For the following purposes, we process personal data to carry out our obligations and exercising our/ your rights in the field of employment: If we were to become subject to claim according to the Swedish Discrimination Act, we process your personal data to exercise and protect our legal rights.
For the following purposes, we process personal data on the basis of a balance of interests:
(a) to assess and consider different candidates based on experience, qualifications and academic performance.
(b) to administrate invitations and bookings to interviews.
(c) to collect and review your resume, personal letter and degree certification.
(d) we assess that we have a legitimate interest to process your personal data in order for Uneek to be able to recruit new members of the staff to our company.
For the following purposes, we process your personal data on the basis of consent:
(a) to perform recruitment tests that are a part of the recruitment process.
(b) to save your information in a database for candidates for future employments that could suit you.
The provision of your personal data is not a statutory or contractual requirement. You are not obligated to provide the personal data. If you do not provide your personal data to us, we will not have the possibility to carry out our commitments towards you and perform the recruitment process.
Who has access to your personal data?
Your personal data will be shared with parties that process personal data on our behalf, so called processors, such as suppliers of IT and systems that provide development and support for our systems and cloud services. We do not share your personal data otherwise.
How long do we process and store your personal data?
To the extent that our processing is based on a balance of interests, we in general do not process your personal data after the recruitment process is over.
We need to process your personal data after you have participated in a recruitment process to protect our rights under the Swedish Discrimination Act. We therefore save the information in the application documents for two (2) years after the application process is over.
If you consent to the continued processing of your personal data for future recruitment opportunities, we will process your information for this purpose until you revoke your consent or the purpose expire.
Personal data relating to employees and contractors of our suppliers
What personal data do we process about you?
We collect personal data about you such as, name, phone number and e-mail from your employer, or when applicable, your contractor, in connection with the business relationship between us and your employer or contractor or which you have provided us with within the context of the business relationship.
Why do we process your personal data?
(i) If you are an employee or contractor of supplier
Your personal data as an employee or contractor of a supplier to us is processed in accordance with the agreement with the supplier for the purposes of invoice- and payment administration, deliveries, to enable communication between the parties as well as other administration needed within the contractual relationship. We process your personal data on the basis of a balance of interests. Our legitimate interest is to be able to administrate the contract and to fulfil our obligations towards our suppliers (your employer or contractor).
If applicable, we process personal data about you who are an employee or contractor of supplier for accounting purposes such as billing or payment of your services or products. This processing is based on a legal obligation according to the Swedish Annual Accounts Act.
(ii) If you are a sole trader:
If you provide us with your personal data as a sole trader we process your personal data as necessary to fulfil our agreement or to take measures that you have requested before entering into an agreement. We also process your personal data to administrate the agreement, to communicate with you as well as to order and use your company’s services.
Providing your personal data is not a legal or contractual requirement. You are not obligated to provide your personal data. If you do not provide us with your personal data, we will not be able to enter an agreement and thereafter fulfil our agreement and administrate the contractual relationship with you.
Who has access to your personal data?
Your personal data is shared with parties that process personal data on our behalf, so called processors:, such as suppliers of IT and systems that provide development and support for our systems and cloud services.
Your personal data is also shared with the following parties which themselves are controllers for the processing of your personal data:
(a) authorities, if such a disclosure is prescribed by law, for example the Enforcement Authority.
(b) banks and debt collectors.
How long do we process and store your personal data?
Personal data that we process for the purpose of fulfilling our agreement with you/the supplier to whom you are employee or contractor of is as a principal rule processed during the period of time it is necessary for us to administrate the contractual relationship, exercise our rights and fulfil our commitments towards you/the supplier to whom you are an employee or contractor of. If your employment or contract is terminated with the supplier or in relation to us, we will cease to process your personal data as soon as we have received such information from the supplier.
Any information relating to payment where processing is required according to the Swedish Annual Account Act is processed for seven (7) years in accordance with the Swedish Annual Account Act.
Inactive agreements containing your personal data are stored for a ten (10) year due to the period of limitation according to the Swedish statute of limitation.
Transfer of personal data to third countries
As a principle rule, we, our suppliers, and our partners only process your personal data within the EU/EEA. In cases where personal data is processed outside the EU/EEA, such processing is either based on a decision from the Commission establishing that the country in question ensures an adequate level of protection or appropriate safeguards that ensure that your rights are protected.
Your rights
Right to withdraw your consent and object to the processing
You may at any time withdraw the consent you have given us, either as a whole or partly, with effect from the day of the withdrawal.
You may object to our processing of your personal data for marketing purposes. We will then cease to process your personal data. You also have the right to object to the processing of your personal data on the basis of a balance of interests.
Right to access
You are entitled to request information about which personal data we process about you and how the personal data is being processed. You also have the right to request a copy of the personal data we process about you.
Right to rectification
You have the right to without unnecessary delay get inaccurate information corrected and to get incomplete information completed by providing us with correct information.
Right to erasure (right to be forgotten) and limitation
You have the right to at any time request that your data is erased, for example if the processing is no longer relevant in relation to the purpose the information was collected for, or if you object to processing which is based on our legitimate interests. You may also request to have certain processing of your personal data restricted, for example if you object to the accuracy of the data.
Right to data portability
If you have given your consent to the processing or if the legal basis for processing is to fulfil an agreement with you, you have the right to obtain the personal data you have provided us with in a structured, commonly used and machine-readable format and have the right to transmit such to another controller or get our assistance to transmit the data to another controller when technically feasible.
Changes to this policy
Uneek is entitled to amend this policy at any time if it is necessary to fulfil the requirements according to applicable laws and regulations or if it is necessary due to changes in our operations.
In such a situation, we will provide information concerning the changes according to applicable law. Applicable information will be available in this privacy policy, on our website and/or provided in other appropriate ways.
Observance of GDPR
Do not hesitate to contact Uneek if you, for any reason, feel unhappy about our processing of your personal data. If you would still be of the opinion that your rights, according to GDPR, have not been satisfied you have the right to send a complaint to the Swedish Authority for Privacy Protection. You will find more I formation concerning this at www.imy.se.
Our contact details
If you would like to contact us concerning our processing of your personal data or if you have questions concerning this privacy policy, you are welcome to contact us contact@uneek.se.