As part of our daily business activities, Gorrissen Federspiel will process the personal data of clients, their employees, suppliers, counterparties, witnesses, business associates and partners as well as other individuals involved in our business operations.
Gorrissen Federspiel will process your personal data for the purpose of managing contractual relationships, communicating regarding services provided and maintaining Gorrissen Federspiel’s relationship with you and/or the company you work for.
To fulfil our contractual obligations to you or the company you work for. Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our contractual obligations to you:
Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing our relationship with you, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
Gorrissen Federspiel has obtained your personal data primarily from emails and other correspondence exchanged between us.
Gorrissen Federspiel will not usually share your personal data with third parties. See ‘Data processors’ for further details.
Gorrissen Federspiel will retain your personal data to fulfil our contractual obligations to you or the company you work for, or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain such data. Generally, we retain your personal data for up to five years after the end of the contractual relationship, unless a longer retention period is required to establish, exercise or defend legal claims.
In connection with your communication and interaction with us, whether you are a client, a prospective client or an employee of a client or prospective client, Gorrissen Federspiel will process your personal data for the purpose of managing Gorrissen Federspiel’s relationship with you and/or the company you work for as well as assessing and ensuring client satisfaction.
To fulfil our contractual obligations to you or the company you work for. Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our contractual obligations to you or the company you work for (e.g. to provide the agreed legal services to you or the company you work for):
Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing our relationship with you, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
Gorrissen Federspiel has obtained your personal data primarily from emails and other correspondence exchanged between us or provided to us by our client.
Gorrissen Federspiel will not usually share your personal data with third parties. However, with respect to client satisfaction, we share client information with analytics firms on a limited basis.
Gorrissen Federspiel will retain your personal data for as long as the relationship with you or our client continues, and thereafter for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.
In connection with the administration of whistleblower schemes, Gorrissen Federspiel will carry out an initial assessment of all reports received on behalf of the client. Gorrissen Federspiel will determine whether a report falls within the scope of the specific whistleblower scheme or whether it should be rejected.
To fulfil contractual obligations. Gorrissen Federspiel will process personal data to fulfil our contractual obligations to the client regarding the administration of the client’s whistleblower scheme.
Gorrissen Federspiel will process the following personal data for the purposes set out above:
To fulfil legal obligations. Gorrissen Federspiel will process personal data to fulfil our legal obligations under section 22 of the Danish Whistleblower Act as part of our partial administration of whistleblower schemes.
Gorrissen Federspiel will process the following personal data for the purposes set out above:
A whistleblower may also choose to remain anonymous. In such cases, Gorrissen Federspiel will only process the information included in the report by the whistleblower.
Gorrissen Federspiel receives personal data directly from the whistleblower via the client’s own whistleblower portal when the actual report is submitted.
If Gorrissen Federspiel determines that a report is within the scope, Gorrissen Federspiel will grant the client’s internal whistleblower unit access to the relevant information on the whistleblower portal. Gorrissen Federspiel does not usually share personal data with other third parties, unless it is required to fulfil a legal obligation.
All personal data processed in connection with Gorrissen Federspiel’s partial administration of clients’ whistleblower schemes is retained on a whistleblower portal provided by an IT service provider.
The client has a contractual relationship with the IT service provider and manages Gorrissen Federspiel’s access rights to the whistleblower portal. Gorrissen Federspiel does not retain personal data in its own IT infrastructure in connection with the partial administration of clients’ whistleblower schemes.
Gorrissen Federspiel’s processing of personal data will cease once the initial screening of an individual report is complete. Either because the report is passed on to the client’s internal whistleblower unit for further processing, or because the report is rejected as being out of scope and closed immediately afterwards.
The client’s whistleblower portal automatically deletes reports at intervals set by the client once matters have been completed.
In connection with the hosting of events, courses and seminars (hereinafter “events”), Gorrissen Federspiel will process your personal data for the purpose of managing your participation in the event and raising awareness of Gorrissen Federspiel’s role as host, including for marketing purposes.
Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing the event, raising awareness and for marketing purposes, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
We may process specific information about you, which will require your consent, such as a photo or video of you. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.
Gorrissen Federspiel has obtained your personal data primarily from the information you provided to us when you registered for the event. We may also have obtained further information about you in connection with the hosting of the event. Further photos/video may be taken of you during the event. In that case, you will be informed of this when you receive the invitation to the event.
Gorrissen Federspiel will not usually share your personal data with third parties. However, your personal data may be processed by marketing service providers and co-organisers of courses, seminars and events.
If you are a speaker at one of our events, we may publish your photo, name, job title and the purpose of your presentation when posting or writing about our events. If you are attending an event, we may share photos or videos featuring you on social media managed by Gorrissen Federspiel, showcasing moments from the event.
Unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period, Gorrissen Federspiel will retain your personal data for the purposes set out above for six months after the event has taken place. If a certificate of participation has been issued, it will be retained for two years from the end of the event.
When you visit Gorrissen Federspiel as an external visitor, we will process your personal data for the purpose of managing your visit, providing a professional welcome and keeping track of which external visitors are on our premises.
Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you:
Where we obtain personal data
Gorrissen Federspiel will collect your personal data directly from you when you register as a visitor in our registration system, Pro Reception.
Retention of personal data
Gorrissen Federspiel will retain your personal data for 90 days, after which it is anonymised in the registration system, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.
Third parties with whom we share personal data
Gorrissen Federspiel does not usually share your personal data with other third parties, unless it is required for security reasons.
When providing legal advice on the bankruptcy, restructuring or liquidation of a company, Gorrissen Federspiel will process personal data relating to you if you are connected to the relevant company. Gorrissen Federspiel will process your personal data for the purpose of carrying out our duties as a trustee, liquidator or restructuring administrator.
Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you:
To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Bankruptcy Act (Konkursloven):
Gorrissen Federspiel will process the following personal data for the purposes set out above:
We may process specific information about you, which will require your consent. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.
In most cases, we will collect your personal data from the bankruptcy estate, the company or from other parties involved in bankruptcy, liquidation or restructuring. In some cases, we will collect personal data directly from you, where relevant to the matter.
We will share your personal data with public authorities or their representatives, the Danish courts, third-party legal advisers or other parties entitled to receive such personal data under Danish law as part of bankruptcy, liquidation or restructuring proceedings.
Gorrissen Federspiel will retain your personal data for 15 years after the conclusion of the matter, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.
For the purpose of providing debt collection services to our clients, Gorrissen Federspiel will process personal data about you as a debtor.
Legitimate interest. Gorrissen Federspiel will process your personal data, as a debtor, for the purpose of providing debt collection services to our clients, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
To establish and/or enforce legal claims. Gorrissen Federspiel will process your personal data, as a debtor, for the purpose of providing debt collection services to our clients to establish and/or enforce legal claims.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
In most cases, we will collect your personal data from our client, who will inform us of your outstanding debt, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings in the Enforcement Court or by phone.
As part of our debt collection procedure, Gorrissen Federspiel will share your personal data with the Danish courts and our clients. Gorrissen Federspiel will not usually share your personal data with other third parties.
Gorrissen Federspiel will retain your personal data for five years following payment of any outstanding amounts, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period. If our client’s claim has been established by a court judgment or any other enforceable measure, Gorrissen Federspiel will retain your personal data for up to 15 years or for a longer period if required to enforce the claim in accordance with the limitation periods set out in applicable legislation.
For the purpose of providing legal advice relating to labour and employment law matters, including general advice, dispute resolution and due diligence assessments in connection with potential mergers and acquisitions, Gorrissen Federspiel will process personal data about you as an employee, former employee, private individual, manager or director of a company if the relevant matter concerns you or if you are otherwise involved in a matter in relation to which our client seeks our advice.
The legal basis for the processing of your personal data depends on the subject matter of the relevant matter.
Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
To establish and/or enforce or defend against legal claims. Gorrissen Federspiel will process your personal data to establish and/or exercise or defend against legal claims relating to employment law, including, e.g. claims under the Danish Non-Discrimination Act and the Danish Equal Treatment Act.
Gorrissen Federspiel will process the following personal data for the purposes set out above:
We may process specific information about you, which will require your consent. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.
In most cases, we will collect your personal data from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone.
As part of our legal advice, Gorrissen Federspiel will share your personal data with our client, counterparties (e.g. your own legal adviser), the Danish courts, the Danish Board of Equal Treatment and the Danish Labour Court. Gorrissen Federspiel will not usually share your personal data with other third parties.
Gorrissen Federspiel will retain your personal data for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data. As a general rule, Gorrissen Federspiel will retain your personal data relating to a specific employment law matter for up to 15 years after the matter has been concluded.
For the purpose of Gorrissen Federspiel’s legal advice in a range of specialist areas, including general commercial and corporate law, business transfers, tax law and the purchase and sale of real estate, Gorrissen Federspiel will process personal data relating to you as our client, business owner, member of the board of directors or counterparty, or if you are otherwise a party to the matter.
Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Registration of Property Act, the Danish Companies Act and the Danish Anti-Money Laundering Act.
Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our legal obligations:
To establish and/or enforce legal claims. Gorrissen Federspiel will process your personal data for the purpose of providing legal advice to our client, including establishing and/or enforcing legal claims.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
In most cases, we will collect your personal data from our client, who will provide information about you and how to contact you. In most cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone, counterparties, public authorities, e.g. the Danish Tax Agency and the Danish Business Authority, and external advisers.
As part of our legal advisory services, Gorrissen Federspiel may share your personal data with the Danish courts, the Danish Business Authority, the Danish Financial Supervisory Authority, banks, external legal advisers and our clients. Gorrissen Federspiel will not usually share your personal data with other third parties, unless it is part of the agreed case management.
Gorrissen Federspiel will retain your personal data for as long as the relationship with you continues, and thereafter for as long as it is necessary for us to retain your personal data for legitimate purposes and where Gorrissen Federspiel is required by applicable law to retain the personal data, e.g. under the Danish Anti-Money Laundering Act. Generally, Gorrissen Federspiel will retain your personal data relating to legal advice for up to 15 years after the matter has been concluded.
As part of the assistance, we provide to our clients in relation to private matters, including wills, prenuptial agreements, estates of deceased people and real estate transactions, Gorrissen Federspiel will process personal data relating to our clients and other individuals who are parties to or otherwise involved in the relevant matter.
To fulfil our contractual obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling the agreement we have entered into with you to provide legal advice in matters relating to wills, prenuptial agreements, estates of deceased persons and real estate transactions.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Inheritance Act and the Danish Registration of Property Act.
Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our legal obligations:
In most cases, we will collect your personal data from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone.
For the purpose of providing legal advice, Gorrissen Federspiel will share your personal data with the Danish courts and our client. Gorrissen Federspiel will not usually share your personal data with other third parties.
Gorrissen Federspiel will retain your personal data for as long as it is necessary to fulfil the agreement we have entered into with you. Gorrissen Federspiel will generally retain your personal data for 15 years after the matter has been concluded or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.
Gorrissen Federspiel will process personal data relating to you, parties, witnesses and other individuals for the purpose of providing legal advice in relation to disputes or legal proceedings, including arbitration cases or other disputes, to protect our client’s interests in the matter and to establish, defend or enforce our client’s legal claims.
Legitimate interest. Gorrissen Federspiel will process personal data relating to you, parties, witnesses and other individuals involved in legal proceedings, arbitration or other disputes, on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides the rights and interests of you or other parties to the case.
Gorrissen Federspiel will process the following personal data about individuals involved in the matter, including you, for the purposes set out above:
To establish and/or enforce legal claims. Gorrissen Federspiel will process personal data about individuals involved in the matter, including you, in its capacity as legal adviser to our client, for the purpose of providing legal advice to our clients to establish and/or enforce legal claims.
Gorrissen Federspiel will process the following personal data about individuals involved in the matter, including you, for the purposes set out above:
In most cases, we will collect personal data about individuals involved in the matter, including you, from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from individuals involved in the matter, including you, e.g. information provided at meetings, via email or by phone. We will also collect data from public records and from other parties relevant to the matter.
Personal data relating to the individuals involved in the matter, including you, may be shared with our client, the Danish and international courts, arbitrators and arbitration institutions, intermediaries, witnesses, other relevant parties and the Appeals Permission Board (Procesbevillingsnævnet). Gorrissen Federspiel will not usually share personal data about individuals involved in a matter, including you, with other third parties.
Gorrissen Federspiel will generally retain personal data about individuals involved in a matter, including you, for 15 years after the matter has been concluded or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.
In connection with the establishment, operation and closure of virtual data rooms for the purposes of due diligence assistance, insolvency proceedings or disputes, Gorrissen Federspiel will process personal data relating to users of the data room to ensure secure access, document management and compliance with our legal obligations.
Legitimate interest. Gorrissen Federspiel will process your personal data for the purpose of administrating data rooms. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.
Gorrissen Federspiel will process the following personal data about you for the purposes set out above:
Gorrissen Federspiel will collect personal data directly from you as a user or from the company you represent.
Gorrissen Federspiel will not usually share your personal data with third parties.
Gorrissen Federspiel will retain your personal data for as long as the virtual data room remains active and for up to one year after the data room is closed, unless Gorrissen Federspiel is required by applicable law to retain the personal data for a longer period.
Gorrissen Federspiel will process your identity information when you deposit trust funds in our general client bank account with one of our banks. Gorrissen Federspiel is required to obtain your identity information, verify it and make it available to the relevant financial institution in accordance with the Danish Anti-Money Laundering Act (section 38 b). The purpose is to prevent money laundering and terrorist financing and to enable the relevant financial institution to conduct its customer due diligence procedure and identify you as the owner of the deposited funds.
To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations under the provisions on general client bank accounts in the Danish Anti-Money Laundering Act.
Gorrissen Federspiel will process the following personal data for the purposes set out above:
Where we obtain personal data
Gorrissen Federspiel will collect personal data from you as our client and user of the general client bank account. Personal data obtained in connection with the use of the general client bank account will only be used for this purpose, unless otherwise agreed with you.
Third parties with whom we share personal data
Pursuant to the Danish Anti-Money Laundering Act, Gorrissen Federspiel is required to share ID documentation and CPR number with the bank to which money is paid in relation to your client relationship with Gorrissen Federspiel. This will be made prior to or in connection with the payment. The financial institution will process your personal data to fulfil its obligations under the Danish Anti-Money Laundering Act to implement the required customer due diligence procedures.
Gorrissen Federspiel will retain your personal data for a period of one (1) year after the end of your client/matter relationship with Gorrissen Federspiel, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.
As financial institutions are independent data controllers, please refer to each financial institution’s privacy notice for further information about how they process your personal data.
Where Gorrissen Federspiel’s legal advice falls within the scope of the Danish Anti-Money Laundering Act (the Danish Act on Measures to Prevent Money Laundering and Financing of Terrorism), we are required to obtain, record and retain specific personal data about our clients, including owners, beneficial owners and senior management.
You can find further information about how we process personal data in connection with legal advice subject to anti-money laundering obligations here:
As part of your interaction with us, Gorrissen Federspiel will process other personal data while providing legal assistance. Should Gorrissen Federspiel be obliged to inform you about the processing of such other personal data, you will receive separate information regarding this.
Gorrissen Federspiel is the data controller for the personal data we process about you. Here you can see our identity and contact information:
Gorrissen Federspiel Advokatpartnerselskab
CVR: 38052497
Axel Towers
Axeltorv 2
1609 Copenhagen V
+45 33 41 41 41
contact@gorrissenfederspiel.com
Your personal data will be treated as confidential by those who have access to it, and the data will only be processed in accordance with the purposes set out in this privacy policy.
Gorrissen Federspiel uses third-party IT service providers, including for the support and security of our systems. IT service providers will have access to and may process your personal data in accordance with our instructions and in compliance with applicable data protection legislation.
Generally, Gorrissen Federspiel will process your data within the European Union (EU) and the European Economic Area (EEA) or in countries that have an adequate level of data protection.
Should Gorrissen Federspiel share your personal data with our IT service providers, clients and/or counterparties established outside the EU/EEA, the processing of your personal data will be subject to, inter alia, the European Commission’s standard contractual clauses.
You may request a copy of the agreement covering the transfer of personal data by sending us an email at privacy@gorrissenfederspiel.com.
When we process your personal data, you have the following rights:
Right of access
You have the right to request access to your personal data and to request certain information regarding the processing activities we carry out.
Right to rectification
You have the right to have inaccurate personal data rectified and to have incomplete personal data completed.
Right to erasure
You have the right to request the erasure of your personal data.
Right to restricted processing
Furthermore, you also have the right to restrict the processing of your personal data, so that the personal data cannot be processed in any way other than being retained.
Right to data portability
You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format for your own use, as well as the right to transfer your personal data to another data controller.
Right to object
In certain circumstances, you have the right to object to the lawful processing of your personal data, e.g. in the case of direct marketing.
Right to withdraw consent
If our processing of your personal data is based on your consent, you may withdraw that consent at any time. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal. Withdrawal of consent takes effect only from the time you notify us of this.
If you have any questions regarding Gorrissen Federspiel’s processing of your personal data or wish to exercise your rights, please contact us at privacy@gorrissenfederspiel.com.
Further information about your rights is available in the Danish Data Protection Agency’s guidelines on the rights of data subjects at www.datatilsynet.dk.
There will be situations in which Gorrissen Federspiel will be unable to comply with your request to exercise your rights. Under data protection regulations, Gorrissen Federspiel may refuse a request to exercise your rights if doing so would infringe upon the rights and/or freedoms of others, or if compelling private interests override your interest in accessing the data.
Similarly, a request for the erasure of personal data may be refused, e.g., if Gorrissen Federspiel’s processing of the personal data is required to comply with a legal obligation.
If you wish to lodge a complaint regarding Gorrissen Federspiel’s processing of your personal data, we encourage you to contact Gorrissen Federspiel’s internal compliance department at privacy@gorrissenfederspiel.com.
You may also contact the Danish Data Protection Agency:
The Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby, Denmark
T: +45 33 19 32 00
E: dt@datatilsynet.dk
Last updated March 2026
Gorrissen Federspiel is ISO 27001 certified. ISO 27001 is a globally recognised standard that supports the identification and management of security risks. The standard is based on a systematic, risk-based approach to protecting information and sets high standards for company processes and technological solutions.
ISO 27001 certificate