Close search

HomePrivacy Notice

Privacy Notice

As part of our daily business activities, Gorrissen Federspiel will process the personal data of clients, their employees, suppliers, counterparties, witnesses, business associates and partners as well as other individuals involved in our business operations.

Processing of your personal data

Further information on when, how and for what purpose Gorrissen Federspiel will process your personal data can be found below. The personal data we process about you depends on your relationship with us (e.g. whether you are a client, a witness in a litigation matter, a business partner, etc.). Please select the category below that best describes your relationship with Gorrissen Federspiel.

Suppliers and other business partners

Gorrissen Federspiel will process your personal data for the purpose of managing contractual relationships, communicating regarding services provided and maintaining Gorrissen Federspiel’s relationship with you and/or the company you work for.

Legal basis

To fulfil our contractual obligations to you or the company you work for. Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our contractual obligations to you:

  • Name
  • Contact details, including email address and telephone number
  • Title
  • Place of work

Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing our relationship with you, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address and phone number
  • Title
  • Place of work

Where we obtain personal data

Gorrissen Federspiel has obtained your personal data primarily from emails and other correspondence exchanged between us.

Third parties with whom we share personal data

Gorrissen Federspiel will not usually share your personal data with third parties. See ‘Data processors’ for further details.

Retention of personal data

Gorrissen Federspiel will retain your personal data to fulfil our contractual obligations to you or the company you work for, or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain such data. Generally, we retain your personal data for up to five years after the end of the contractual relationship, unless a longer retention period is required to establish, exercise or defend legal claims.

Clients and prospective clients

In connection with your communication and interaction with us, whether you are a client, a prospective client or an employee of a client or prospective client, Gorrissen Federspiel will process your personal data for the purpose of managing Gorrissen Federspiel’s relationship with you and/or the company you work for as well as assessing and ensuring client satisfaction.

Legal basis

To fulfil our contractual obligations to you or the company you work for. Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our contractual obligations to you or the company you work for (e.g. to provide the agreed legal services to you or the company you work for):

  • Name
  • Contact details, including email address, telephone number and address
  • Title
  • Place of work

Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing our relationship with you, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address, phone number and address
  • Title
  • Place of work
  • Your relationship with us (alumni and relationship rating)
  • Contact preference, including whether you have provided your consent to marketing, your preferred method of contact and your content preferences
  • Interests (work-related only)

Where we obtain personal data

Gorrissen Federspiel has obtained your personal data primarily from emails and other correspondence exchanged between us or provided to us by our client.

Third parties with whom we share personal data

Gorrissen Federspiel will not usually share your personal data with third parties. However, with respect to client satisfaction, we share client information with analytics firms on a limited basis.

Retention of personal data

Gorrissen Federspiel will retain your personal data for as long as the relationship with you or our client continues, and thereafter for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.

Partial administration of whistleblower schemes

In connection with the administration of whistleblower schemes, Gorrissen Federspiel will carry out an initial assessment of all reports received on behalf of the client. Gorrissen Federspiel will determine whether a report falls within the scope of the specific whistleblower scheme or whether it should be rejected.

  • Out-of-scope reports: If a report does not fall within the scope of the whistleblower scheme, Gorrissen Federspiel will inform the whistleblower and advise the whistleblower of relevant alternative points of contact, such as an HR department or a trade union representative.
  • In‑scope reports: If a report falls within the scope of the whistleblower scheme, Gorrissen Federspiel will grant the client’s internal whistleblower unit access to the relevant matter via the client’s own whistleblower portal.

Legal basis

To fulfil contractual obligations. Gorrissen Federspiel will process personal data to fulfil our contractual obligations to the client regarding the administration of the client’s whistleblower scheme.

Gorrissen Federspiel will process the following personal data for the purposes set out above:

  • Name of the whistleblower
  • Whistleblower’s contact details (email address, phone number and address)
  • Whistleblower’s workplace, position/title
  • Information about individuals involved in the report
  • Names and contact details of individuals within the client’s internal whistleblower unit

To fulfil legal obligations. Gorrissen Federspiel will process personal data to fulfil our legal obligations under section 22 of the Danish Whistleblower Act as part of our partial administration of whistleblower schemes.

Gorrissen Federspiel will process the following personal data for the purposes set out above:

  • Name of the whistleblower
  • Whistleblower’s contact details (email address, phone number and address)
  • Whistleblower’s workplace, position/title
  • Information about individuals involved in the report, including any attachments that may contain confidential and sensitive information and/or information about criminal offenses.
  • Names and contact details of individuals within the client’s internal whistleblower unit

A whistleblower may also choose to remain anonymous. In such cases, Gorrissen Federspiel will only process the information included in the report by the whistleblower.

Where we obtain personal data

Gorrissen Federspiel receives personal data directly from the whistleblower via the client’s own whistleblower portal when the actual report is submitted.

Third parties with whom we share personal data

If Gorrissen Federspiel determines that a report is within the scope, Gorrissen Federspiel will grant the client’s internal whistleblower unit access to the relevant information on the whistleblower portal. Gorrissen Federspiel does not usually share personal data with other third parties, unless it is required to fulfil a legal obligation.

Retention of personal data

All personal data processed in connection with Gorrissen Federspiel’s partial administration of clients’ whistleblower schemes is retained on a whistleblower portal provided by an IT service provider.

The client has a contractual relationship with the IT service provider and manages Gorrissen Federspiel’s access rights to the whistleblower portal. Gorrissen Federspiel does not retain personal data in its own IT infrastructure in connection with the partial administration of clients’ whistleblower schemes.

Gorrissen Federspiel’s processing of personal data will cease once the initial screening of an individual report is complete. Either because the report is passed on to the client’s internal whistleblower unit for further processing, or because the report is rejected as being out of scope and closed immediately afterwards.

The client’s whistleblower portal automatically deletes reports at intervals set by the client once matters have been completed.

Participation in events, courses and seminars

In connection with the hosting of events, courses and seminars (hereinafter “events”), Gorrissen Federspiel will process your personal data for the purpose of managing your participation in the event and raising awareness of Gorrissen Federspiel’s role as host, including for marketing purposes.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data on the basis of our legitimate interest in managing the event, raising awareness and for marketing purposes, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address, phone number and address
  • Title
  • Place of work
  • Certificate of participation
  • Photo/video (where we assess that a photo or video of you may be used without your consent)

We may process specific information about you, which will require your consent, such as a photo or video of you. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.

Where we obtain personal data

Gorrissen Federspiel has obtained your personal data primarily from the information you provided to us when you registered for the event. We may also have obtained further information about you in connection with the hosting of the event. Further photos/video may be taken of you during the event. In that case, you will be informed of this when you receive the invitation to the event.

Third parties with whom we share personal data

Gorrissen Federspiel will not usually share your personal data with third parties. However, your personal data may be processed by marketing service providers and co-organisers of courses, seminars and events.

If you are a speaker at one of our events, we may publish your photo, name, job title and the purpose of your presentation when posting or writing about our events. If you are attending an event, we may share photos or videos featuring you on social media managed by Gorrissen Federspiel, showcasing moments from the event.

Retention of personal data

Unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period, Gorrissen Federspiel will retain your personal data for the purposes set out above for six months after the event has taken place. If a certificate of participation has been issued, it will be retained for two years from the end of the event.

External visitors, builders, etc.

When you visit Gorrissen Federspiel as an external visitor, we will process your personal data for the purpose of managing your visit, providing a professional welcome and keeping track of which external visitors are on our premises.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you:

  • Name
  • Contact details
  • Place of work
  • Time of the visit

Where we obtain personal data
Gorrissen Federspiel will collect your personal data directly from you when you register as a visitor in our registration system, Pro Reception.

Retention of personal data
Gorrissen Federspiel will retain your personal data for 90 days, after which it is anonymised in the registration system, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.

Third parties with whom we share personal data
Gorrissen Federspiel does not usually share your personal data with other third parties, unless it is required for security reasons.

Bankruptcy, restructuring and liquidation

When providing legal advice on the bankruptcy, restructuring or liquidation of a company, Gorrissen Federspiel will process personal data relating to you if you are connected to the relevant company. Gorrissen Federspiel will process your personal data for the purpose of carrying out our duties as a trustee, liquidator or restructuring administrator.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you:

  • Name
  • Contact details, including email address and telephone number
  • Title
  • Place of work
  • Account no.
  • Salary information
  • HR-related information
  • Other personal data held by the bankruptcy estate or the company.

To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Bankruptcy Act (Konkursloven):

Gorrissen Federspiel will process the following personal data for the purposes set out above:

  • Name
  • Contact details, including email address and telephone number
  • Title
  • Place of work
  • Salary information
  • HR-related information
  • Other personal data held by the bankruptcy estate or the company.

We may process specific information about you, which will require your consent. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.

Where we obtain personal data

In most cases, we will collect your personal data from the bankruptcy estate, the company or from other parties involved in bankruptcy, liquidation or restructuring. In some cases, we will collect personal data directly from you, where relevant to the matter.

Third parties with whom we share personal data

We will share your personal data with public authorities or their representatives, the Danish courts, third-party legal advisers or other parties entitled to receive such personal data under Danish law as part of bankruptcy, liquidation or restructuring proceedings.

Retention of personal data

Gorrissen Federspiel will retain your personal data for 15 years after the conclusion of the matter, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.

Debt collection

For the purpose of providing debt collection services to our clients, Gorrissen Federspiel will process personal data about you as a debtor.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data, as a debtor, for the purpose of providing debt collection services to our clients, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address and telephone number
  • Title
  • Place of work
  • Information on income and assets
  • Other personal data held by the creditors
  • Other personal data relevant to assessing the circumstances relating to your debt (excluding sensitive personal data)

To establish and/or enforce legal claims. Gorrissen Federspiel will process your personal data, as a debtor, for the purpose of providing debt collection services to our clients to establish and/or enforce legal claims.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Any specific category of personal data (sensitive personal data) of relevance to assess the circumstances relating to your debt, such as your health conditions.

Third parties with whom we share personal data

In most cases, we will collect your personal data from our client, who will inform us of your outstanding debt, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings in the Enforcement Court or by phone.

Third parties with whom we share personal data

As part of our debt collection procedure, Gorrissen Federspiel will share your personal data with the Danish courts and our clients. Gorrissen Federspiel will not usually share your personal data with other third parties.

Retention of personal data

Gorrissen Federspiel will retain your personal data for five years following payment of any outstanding amounts, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period. If our client’s claim has been established by a court judgment or any other enforceable measure, Gorrissen Federspiel will retain your personal data for up to 15 years or for a longer period if required to enforce the claim in accordance with the limitation periods set out in applicable legislation.

Labour and employment law

For the purpose of providing legal advice relating to labour and employment law matters, including general advice, dispute resolution and due diligence assessments in connection with potential mergers and acquisitions, Gorrissen Federspiel will process personal data about you as an employee, former employee, private individual, manager or director of a company if the relevant matter concerns you or if you are otherwise involved in a matter in relation to which our client seeks our advice.

Legal basis

The legal basis for the processing of your personal data depends on the subject matter of the relevant matter.

Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including home address, email address and telephone number
  • Job title and tasks
  • Age
  • Gender
  • Professional background and education
  • Duration of employment
  • Terms of employment, including salary and bonus payments and information on stock programs and warrant schemes
  • Performance reviews
  • Warnings
  • Notes on behaviour
  • Information regarding absence
  • Any other category of personal data (sensitive data) not classified as special categories of relevance to the assessment of the circumstances of the matter

To establish and/or enforce or defend against legal claims. Gorrissen Federspiel will process your personal data to establish and/or exercise or defend against legal claims relating to employment law, including, e.g. claims under the Danish Non-Discrimination Act and the Danish Equal Treatment Act.

Gorrissen Federspiel will process the following personal data for the purposes set out above:

  • Criminal convictions
  • Health data
  • Union membership
  • Race
  • Skin colour
  • Religion or faith
  • Social, national or ethnic origin
  • Sexual orientation
  • Political conviction
  • Pregnancy
  • Handicap
  • Other personal data of relevance to the assessment of the circumstances of the matter.

We may process specific information about you, which will require your consent. In such cases, we will ask for your explicit consent, and the processing will be based on your consent. Therefore, it is not covered by this privacy notice.

Where we obtain personal data

In most cases, we will collect your personal data from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone.

Third parties with whom we share personal data

As part of our legal advice, Gorrissen Federspiel will share your personal data with our client, counterparties (e.g. your own legal adviser), the Danish courts, the Danish Board of Equal Treatment and the Danish Labour Court. Gorrissen Federspiel will not usually share your personal data with other third parties.

Retention of personal data

Gorrissen Federspiel will retain your personal data for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data. As a general rule, Gorrissen Federspiel will retain your personal data relating to a specific employment law matter for up to 15 years after the matter has been concluded.

Legal advice

For the purpose of Gorrissen Federspiel’s legal advice in a range of specialist areas, including general commercial and corporate law, business transfers, tax law and the purchase and sale of real estate, Gorrissen Federspiel will process personal data relating to you as our client, business owner, member of the board of directors or counterparty, or if you are otherwise a party to the matter.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Date of birth
  • Contact details, including email address, address and telephone number
  • Salary information
  • Financial matters
  • Other general information from correspondence with the client

To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Registration of Property Act, the Danish Companies Act and the Danish Anti-Money Laundering Act.

Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our legal obligations:

  • CPR no.
  • Copy of passport
  • Place of residence
  • Residence status

To establish and/or enforce legal claims. Gorrissen Federspiel will process your personal data for the purpose of providing legal advice to our client, including establishing and/or enforcing legal claims.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Any personal data relevant to establishing and/or enforcing legal claims, which may include special categories of personal data (sensitive data), including health data.

Where we obtain personal data

In most cases, we will collect your personal data from our client, who will provide information about you and how to contact you. In most cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone, counterparties, public authorities, e.g. the Danish Tax Agency and the Danish Business Authority, and external advisers.

Third parties with whom we share personal data

As part of our legal advisory services, Gorrissen Federspiel may share your personal data with the Danish courts, the Danish Business Authority, the Danish Financial Supervisory Authority, banks, external legal advisers and our clients. Gorrissen Federspiel will not usually share your personal data with other third parties, unless it is part of the agreed case management.

Retention of personal data

Gorrissen Federspiel will retain your personal data for as long as the relationship with you continues, and thereafter for as long as it is necessary for us to retain your personal data for legitimate purposes and where Gorrissen Federspiel is required by applicable law to retain the personal data, e.g. under the Danish Anti-Money Laundering Act. Generally, Gorrissen Federspiel will retain your personal data relating to legal advice for up to 15 years after the matter has been concluded.

Private matters

As part of the assistance, we provide to our clients in relation to private matters, including wills, prenuptial agreements, estates of deceased people and real estate transactions, Gorrissen Federspiel will process personal data relating to our clients and other individuals who are parties to or otherwise involved in the relevant matter.

Legal basis

To fulfil our contractual obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling the agreement we have entered into with you to provide legal advice in matters relating to wills, prenuptial agreements, estates of deceased persons and real estate transactions.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address, address and telephone number
  • Information about assets
  • Information about family life
  • Birth certificate
  • Death certificate

Legitimate interest. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address, address and telephone number
  • Information about assets
  • Information about family life
  • Birth certificate
  • Death certificate

To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations, including our obligations under the Danish Inheritance Act and the Danish Registration of Property Act.

Gorrissen Federspiel will process the following personal data about you for the purpose of fulfilling our legal obligations:

  • Name
  • Contact information (e-mail, address and phone number)
  • CPR no.

Where we obtain personal data

In most cases, we will collect your personal data from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from you, e.g. information you provide at meetings, via email or by phone.

Third parties with whom we share personal data

For the purpose of providing legal advice, Gorrissen Federspiel will share your personal data with the Danish courts and our client. Gorrissen Federspiel will not usually share your personal data with other third parties.

Retention of personal data

Gorrissen Federspiel will retain your personal data for as long as it is necessary to fulfil the agreement we have entered into with you. Gorrissen Federspiel will generally retain your personal data for 15 years after the matter has been concluded or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.

Disputes, litigation and arbitration

Gorrissen Federspiel will process personal data relating to you, parties, witnesses and other individuals for the purpose of providing legal advice in relation to disputes or legal proceedings, including arbitration cases or other disputes, to protect our client’s interests in the matter and to establish, defend or enforce our client’s legal claims.

Legal basis

Legitimate interest. Gorrissen Federspiel will process personal data relating to you, parties, witnesses and other individuals involved in legal proceedings, arbitration or other disputes, on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides the rights and interests of you or other parties to the case.

Gorrissen Federspiel will process the following personal data about individuals involved in the matter, including you, for the purposes set out above:

  • Name
  • Contact details, including email address and telephone number
  • Other information relevant to the matter, excluding special categories of personal data (see below for the legal basis for processing special categories of personal data)

To establish and/or enforce legal claims. Gorrissen Federspiel will process personal data about individuals involved in the matter, including you, in its capacity as legal adviser to our client, for the purpose of providing legal advice to our clients to establish and/or enforce legal claims.

Gorrissen Federspiel will process the following personal data about individuals involved in the matter, including you, for the purposes set out above:

  • Any other personal data relevant to establishing and/or enforcing legal claims, including special categories of personal data (sensitive data), e.g. health data.

Where we obtain personal data

In most cases, we will collect personal data about individuals involved in the matter, including you, from our client, who will provide information about you, how to contact you and any other information relevant to the matter. In certain cases, we will collect personal data directly from individuals involved in the matter, including you, e.g. information provided at meetings, via email or by phone. We will also collect data from public records and from other parties relevant to the matter.

Third parties with whom we share personal data

Personal data relating to the individuals involved in the matter, including you, may be shared with our client, the Danish and international courts, arbitrators and arbitration institutions, intermediaries, witnesses, other relevant parties and the Appeals Permission Board (Procesbevillingsnævnet). Gorrissen Federspiel will not usually share personal data about individuals involved in a matter, including you, with other third parties.

Retention of personal data

Gorrissen Federspiel will generally retain personal data about individuals involved in a matter, including you, for 15 years after the matter has been concluded or for as long as it is necessary for us to retain your personal data for legitimate purposes, including where Gorrissen Federspiel is required by applicable law to retain the personal data.

Virtual data rooms

In connection with the establishment, operation and closure of virtual data rooms for the purposes of due diligence assistance, insolvency proceedings or disputes, Gorrissen Federspiel will process personal data relating to users of the data room to ensure secure access, document management and compliance with our legal obligations.

Legal basis

Legitimate interest. Gorrissen Federspiel will process your personal data for the purpose of administrating data rooms. Gorrissen Federspiel will process your personal data for the purposes set out above on the basis of our legitimate interest, where it is considered that Gorrissen Federspiel’s legitimate interest in processing the personal data overrides your rights and interests.

Gorrissen Federspiel will process the following personal data about you for the purposes set out above:

  • Name
  • Contact details, including email address and telephone number
  • Company
  • Title
  • Login details and access rights
  • Information about your use of the data room, including details of your visits such as pages and documents you open (this includes traffic data, location data and other communication data)
  • IP address

Where we obtain personal data

Gorrissen Federspiel will collect personal data directly from you as a user or from the company you represent.

Third parties with whom we share personal data

Gorrissen Federspiel will not usually share your personal data with third parties.

Retention of personal data

Gorrissen Federspiel will retain your personal data for as long as the virtual data room remains active and for up to one year after the data room is closed, unless Gorrissen Federspiel is required by applicable law to retain the personal data for a longer period.

Use of general client bank account

Gorrissen Federspiel will process your identity information when you deposit trust funds in our general client bank account with one of our banks. Gorrissen Federspiel is required to obtain your identity information, verify it and make it available to the relevant financial institution in accordance with the Danish Anti-Money Laundering Act (section 38 b). The purpose is to prevent money laundering and terrorist financing and to enable the relevant financial institution to conduct its customer due diligence procedure and identify you as the owner of the deposited funds.

Legal basis

To fulfil legal obligations. Gorrissen Federspiel will process your personal data for the purpose of fulfilling our legal obligations under the provisions on general client bank accounts in the Danish Anti-Money Laundering Act.

Gorrissen Federspiel will process the following personal data for the purposes set out above:

  • Name
  • ID documentation, e.g. copy of passport, driving license or MitID
  • CPR no. (or other national identification number)

Where we obtain personal data
Gorrissen Federspiel will collect personal data from you as our client and user of the general client bank account. Personal data obtained in connection with the use of the general client bank account will only be used for this purpose, unless otherwise agreed with you.

Third parties with whom we share personal data
Pursuant to the Danish Anti-Money Laundering Act, Gorrissen Federspiel is required to share ID documentation and CPR number with the bank to which money is paid in relation to your client relationship with Gorrissen Federspiel. This will be made prior to or in connection with the payment. The financial institution will process your personal data to fulfil its obligations under the Danish Anti-Money Laundering Act to implement the required customer due diligence procedures.

Retention of personal data

Gorrissen Federspiel will retain your personal data for a period of one (1) year after the end of your client/matter relationship with Gorrissen Federspiel, unless Gorrissen Federspiel is required by applicable law to retain your personal data for a longer period.

As financial institutions are independent data controllers, please refer to each financial institution’s privacy notice for further information about how they process your personal data.

Anti-money laundering obligations

Where Gorrissen Federspiel’s legal advice falls within the scope of the Danish Anti-Money Laundering Act (the Danish Act on Measures to Prevent Money Laundering and Financing of Terrorism), we are required to obtain, record and retain specific personal data about our clients, including owners, beneficial owners and senior management.

You can find further information about how we process personal data in connection with legal advice subject to anti-money laundering obligations here:

Other personal data

As part of your interaction with us, Gorrissen Federspiel will process other personal data while providing legal assistance. Should Gorrissen Federspiel be obliged to inform you about the processing of such other personal data, you will receive separate information regarding this.

Data Controller

Gorrissen Federspiel is the data controller for the personal data we process about you. Here you can see our identity and contact information:

Gorrissen Federspiel Advokatpartnerselskab
CVR: 38052497
Axel Towers
Axeltorv 2
1609 Copenhagen V
+45 33 41 41 41
contact@gorrissenfederspiel.com

Confidentiality

Your personal data will be treated as confidential by those who have access to it, and the data will only be processed in accordance with the purposes set out in this privacy policy.

Data processors

Gorrissen Federspiel uses third-party IT service providers, including for the support and security of our systems. IT service providers will have access to and may process your personal data in accordance with our instructions and in compliance with applicable data protection legislation.

Transfer of personal data to third countries outside the EU/EEA

Generally, Gorrissen Federspiel will process your data within the European Union (EU) and the European Economic Area (EEA) or in countries that have an adequate level of data protection.

Should Gorrissen Federspiel share your personal data with our IT service providers, clients and/or counterparties established outside the EU/EEA, the processing of your personal data will be subject to, inter alia, the European Commission’s standard contractual clauses.

You may request a copy of the agreement covering the transfer of personal data by sending us an email at privacy@gorrissenfederspiel.com.

Your rights

When we process your personal data, you have the following rights:

Right of access
You have the right to request access to your personal data and to request certain information regarding the processing activities we carry out.

Right to rectification
You have the right to have inaccurate personal data rectified and to have incomplete personal data completed.

Right to erasure
You have the right to request the erasure of your personal data.

Right to restricted processing
Furthermore, you also have the right to restrict the processing of your personal data, so that the personal data cannot be processed in any way other than being retained.

Right to data portability
You have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format for your own use, as well as the right to transfer your personal data to another data controller.

Right to object
In certain circumstances, you have the right to object to the lawful processing of your personal data, e.g. in the case of direct marketing.

Right to withdraw consent
If our processing of your personal data is based on your consent, you may withdraw that consent at any time. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal. Withdrawal of consent takes effect only from the time you notify us of this.

If you have any questions regarding Gorrissen Federspiel’s processing of your personal data or wish to exercise your rights, please contact us at privacy@gorrissenfederspiel.com.

Further information about your rights is available in the Danish Data Protection Agency’s guidelines on the rights of data subjects at www.datatilsynet.dk.

Exceptions to your rights

There will be situations in which Gorrissen Federspiel will be unable to comply with your request to exercise your rights. Under data protection regulations, Gorrissen Federspiel may refuse a request to exercise your rights if doing so would infringe upon the rights and/or freedoms of others, or if compelling private interests override your interest in accessing the data.

Similarly, a request for the erasure of personal data may be refused, e.g., if Gorrissen Federspiel’s processing of the personal data is required to comply with a legal obligation.

Complaint

If you wish to lodge a complaint regarding Gorrissen Federspiel’s processing of your personal data, we encourage you to contact Gorrissen Federspiel’s internal compliance department at privacy@gorrissenfederspiel.com.

You may also contact the Danish Data Protection Agency:

The Danish Data Protection Agency

Carl Jacobsens Vej 35
2500 Valby, Denmark
T: +45 33 19 32 00
E: dt@datatilsynet.dk

 

Last updated March 2026

ISO 27001 certified

Gorrissen Federspiel is ISO 27001 certified. ISO 27001 is a globally recognised standard that supports the identification and management of security risks. The standard is based on a systematic, risk-based approach to protecting information and sets high standards for company processes and technological solutions.

ISO 27001 certificate
iso-27-eps-eng-cropped