MAGNA Lawyers Ltd., ID No. 541268-0149 (hereafter referred to as “MAGNA,” “the firm,” or “we”) is the data controller for the personal data collected and processed about individuals in connection with its operations and the services it provides to its clients.
MAGNA is based at Höfðabakki 9, 110 Reykjavík. The firm’s phone number is 571-5400, and the email address is logmenn [at] magna.is.
Personal data, as defined by the aforementioned laws, regulations, and policy, refers to any information about an identified or identifiable individual, meaning information that characterizes the individual in any way.
MAGNA collects and processes various types of personal data for the purpose of providing legal services to clients. Different types of data may be collected depending on the nature of the services provided, including whether it involves an individual using MAGNA’s services or an individual representing a legal entity in business dealings with MAGNA.
The following are examples of information processed about individuals who engage in business with MAGNA
The following are examples of information that MAGNA Lawyers processes about individuals who contact the firm:
The following are examples of information processed about individuals who represent a legal entity or are in contact with a legal entity in their dealings with MAGNA
Additionally to the aforementioned information, MAGNA may collect and process other data provided by clients or their representatives/contacts, as well as information necessary for the company’s operations. In some cases, information may be obtained from third parties, such as Creditinfo, the Skatturinn (Iceland Revenue and Customs), financial institutions, government bodies, and Registers Iceland.
Clients always have the option to provide personal information voluntarily. However, if information is not provided, it may, depending on the circumstances, affect MAGNA’s ability to offer advice and other services.
The processing of personal data held by the firm depends on the purpose for which the data was collected. MAGNA’s use of clients’ personal information is primarily for the following aims:
In case in which a client has given MAGNA consent to process personal information for a specific purpose, this consent is the basis for such processing, and the client has the right to withdraw their consent. However, such withdrawal does not affect the legality of the processing that has already taken place.
MAGNA staff members have access to clients’ data only to the extent required for fulfilling the firm’s contractual responsibilities. MAGNA’s service providers, who process personal information on the firm’s behalf, additionally have access to this data. These are primarily businesses that offer hosting and IT services, as well as banking and financial services. These service providers are bound by confidentiality.
MAGNA may be required to provide public authorities with access to personal information based on legal obligations, for example, to tax authorities, regulatory bodies, law enforcement, and courts.
MAGNA does not disclose personal information to third parties outside the European Economic Area unless approved by data protection laws and regulations, such as client consent.
MAGNA retains personal data securely and in compliance with applicable laws and regulations. Technical and organizational measures have been implemented to protect personal information, for example, through the data deletion, prevention of unauthorized access, alteration, or disclosure.
MAGNA retains information about clients and their representatives, or contacts, for a duration necessary to carry out the purpose for which it was collected. MAGNA generally does not keep case-related data, including personal information, for more than 10 years after the case has been concluded. Accounting records relating to MAGNA’s client services are retained in compliance with Act No. 145/1994 on Accounting, which requires accounting records to be kept for seven years from the end of the relevant fiscal year.
It is essential that personal data handled by MAGNA is accurate. As a result, any changes to clients’ personal information must be notified to the firm. Individuals have the right to correct incorrect personal information. Individuals have the right, depending on the purpose of the processing, to update inaccurate personal information, including providing supplementary information.
Requests for updates should be directed to the MAGNA data protection policy officer by mail or email, in accordance with Article 10 of this policy.
Individuals have certain rights regarding MAGNA’s processing of personal information. These include the right to:
The above mentioned rights may be subject to limitations under applicable laws and regulations. Clients who wish to receive more information or exercise these rights are advised to contact the MAGNA data protection policy officer, in accordance with Article 10 of this policy.
MAGNA has appointed a data protection policy officer to monitor compliance with the privacy policy. If any further questions or comments regarding this policy arise, please contact MAGNA using the details provided below. The officer will respond to inquiries as soon as possible.
MAGNA Lögmenn ehf.
Höfðabakki 9
110 Reykjavík
Unnur Ásta Bergsteinsdóttir (unnur [at] magna.is)
Phone (+354) 571-5400
Clients have the right to file a complaint with the competent supervisory authority, the Data Protection Authority, if they believe that MAGNA has not respected their rights in the handling of personal data.
MAGNA reserves the right to update the privacy policy in accordance with changes in data protection laws, regulations, or due to changes in firm’s personal information processing. Any changes to the policy will take effect after an updated version has been published on the firm’s website.
This privacy policy was established on November 15, 2021.
