Privacy notice — Lodline, counsel to creditors, boards and foreign investors — explains how Lodline collects and uses personal data in its work for creditors, boards and foreign investors in Sweden, covering the firm's website, correspondence and client relationships, the legal grounds relied on, who receives the data, and how those rights are exercised.
Who this concerns
This notice concerns anyone whose personal data Lodline processes in connection with its work: visitors to the firm's website, individuals who submit an enquiry or instruct the firm, directors and officers named in board-level matters, representatives of foreign investors dealing with a Swedish counterparty, and contacts at suppliers, courts or authorities who correspond with the firm. More on how each practice area is organised is set out under the firm's practice areas.
Where a client or contact is based outside Sweden, the same categories of data are collected, though the channel through which correspondence reaches the firm, and the location it is sent from, may differ. That does not change how the data is treated once it reaches Lodline.
What the law says
Personal data processed by Lodline is governed by the data protection framework applicable in Sweden as an EU member state, together with the professional rules that apply to how a law firm handles client information. Under Swedish law as it currently stands, processing must rest on an identifiable legal basis, such as the necessity of performing a contract, a legal obligation, or a legitimate interest weighed against the interests of the individual concerned.
The supervisory authority responsible for data protection in Sweden receives complaints from individuals who consider that their data has been processed unlawfully. That route remains open regardless of what this notice says, and it exists independently of any complaint an individual may raise directly with the firm.
How it works in practice
What personal data Lodline collects
Categories include contact and identification details submitted through the website or by email, correspondence exchanged in the course of an instruction, documents provided to support a matter, and, where relevant, information about a board mandate or the structure of a foreign investment. Data submitted by a third party, such as another party to a dispute, is processed only to the extent the matter requires.
Purposes and legal basis for processing
Data is processed to respond to an enquiry, to perform an engagement once instructed, to maintain the records a professional firm is expected to keep, and to run the website itself. Each purpose is matched to a legal basis: contractual necessity for client work, legitimate interest for enquiries that have not yet become an instruction, and legal obligation where retention or disclosure is required independently of the client relationship.
Who receives the data
Data is shared with people who need it to carry out the matter: colleagues within the same team, counsel instructed on the client's behalf, and service providers supporting the firm's operations, such as document hosting or case management. Lodline does not sell personal data and does not share it with unrelated third parties for their own marketing purposes.
International transfers
Where a client, an asset or a counterparty sits outside the European Economic Area, personal data connected with that matter may need to move with it. In that situation, Lodline relies on the safeguards recognised for such transfers, such as an adequacy finding or a contractual mechanism, before the data leaves the area it is normally processed in.
Cookies and website analytics
The website uses a limited set of cookies to operate and to measure how pages are used. What is set, for how long, and how consent is obtained is addressed in the site's separate cookie notice, which forms part of this privacy notice rather than a replacement for it.
How does Lodline use data submitted through a contact form?
Data submitted through a contact form is used to assess and respond to the enquiry. If the enquiry does not lead to an instruction, the information is kept only for as long as needed to answer it and to record that it was received, then deleted or anonymised in the ordinary course of the firm's records management.
Does Lodline share personal data with third parties?
Personal data is shared only where necessary to carry out the matter or run the firm's operations, such as with counsel instructed on the client's behalf or providers of case management and hosting services. Sharing for a third party's own purposes, including marketing, does not happen without a separate legal basis for that specific disclosure.
How can someone request access to or deletion of their data?
A request to see, correct or delete personal data held by Lodline is made through the contact channel given at the end of this notice. The request is assessed against the categories of data actually held and any retention obligation attached to the underlying matter before a response is given.
The numbers
Lodline does not apply a single retention period across all data. How long a record is kept depends on the purpose it was collected for and any retention obligation attached to the underlying matter, such as a client file connected to a dispute or a board mandate. Where no such obligation applies, data collected through an enquiry that did not proceed is kept only for as long as needed to answer it. A request concerning personal data is acknowledged and assessed within the timeframe that the applicable data protection rules require, rather than a fixed number of days set out here.
Where it usually goes wrong
This notice covers what Lodline itself does with personal data; it does not extend to a client's own systems, to a counterparty's records, or to a website reached through a link from lodline.com. A visitor sometimes assumes that submitting an enquiry creates a client relationship, and the confidentiality that comes with it: it does not, until the firm has confirmed the instruction. Equally, a request concerning personal data does not override a separate obligation, such as a duty to retain documents connected with an ongoing matter, and the two are addressed together rather than one simply cancelling the other.
What to do next
This notice answers what happens to personal data already in Lodline's hands. A question about a specific matter, rather than about data handling in general, is better put directly to the team than answered here in general terms. Anyone with a question about this notice, or about data connected with a particular instruction, can contact Lodline directly.