Privacy and Cookies Policy
1. PRIVACY AND COOKIES POLICY
Any personal data we collect or cookies we use will only be used in accordance with all applicable laws (including from 25 May 2018 the EU GDPR with respect to data and other laws and regulations applicable in the United Kingdom), and with this Policy. TALI may change this Policy at any time.
2. WHO IS TALI?
TALI as used in this Policy refers to Transatlantic Law International Limited, a UK limited liability company engaged in the provision of international legal services to its clients, including the services of its Principals, its Labor Law Plus™ division or any other division or service of TALI, and those provided by any of the independent law firms or legal service providers (whether law firms, individual lawyers or other providers, any being a ‘TALI provider’) in the Transatlantic Law Network, or otherwise, and which is retained by TALI for and is engaged in the delivery of TALI client services.
3. WHY DO WE COLLECT PERSONAL DATA?
TALI needs to process personal data for the following principal purposes:
- From TALI clients and their owners, officers, employees, contractors, representatives and those of their affiliates and business partners, in order to provide TALI services, as well as from third parties involved in TALI client assignments (e.g., with which clients enter into contractual relationships or have disputes);
- From and with TALI firms and other TALI providers that work with TALI, in order to generate and manage client work and to pay them;
- From other suppliers, potential suppliers and other business contacts in order to collaborate, evaluate and negotiate the purchase of goods and services needed to support TALI’s services for its clients; and
- From potential clients and potential collaborators in order to expand TALI’s business and resources.
4. WHAT TYPES OF DATA DOES TALI PROCESS?
TALI is a provider of legal and business related advisory services that are used by clients working in their trade, business, craft or profession, and its services are not directed at or provided to individual consumers.
TALI only processes personal data of individuals in their professional capacity or connected with the business services that TALI provides. TALI does not process private email addresses or any other non-professional information as such.
TALI collects data necessary for its work which may include:
- Contact details such as email, phone numbers, job title;
- Data regarding legal issues such as rights of signature, powers of attorney, contracts including employment or consultancy contracts;
- Professional interests, background and qualifications; or
- Other information on the identity, professional background and qualifications of TALI clients, personnel and TALI providers necessary to assist TALI in evaluating and performing its work as a legal service provider.
TALI may occasionally be granted access by clients to certain special categories of data collected by clients and included within clients’ files for purposes of providing legal advice to our clients on legal issues regarding individuals such as employees or other third persons.
5. WHAT IS THE LEGAL BASIS FOR TALI’s PERSONAL DATA PROCESSING?
For the processing of personal data, TALI relies on the following bases:
- Necessity for performance of the contract: TALI inevitably needs to process personal data in order to provide the services that TALI clients may be interested in or have requested and TALI has agreed to provide. This is the main legal basis for our data processing. TALI does not process client-related data for any other purpose than providing TALI services and will not process it for any longer than necessary for that purpose (or required by applicable laws and applicable professional rules).
- Necessity for compliance with legal obligations: TALI needs to process and retain data (e.g. client ID and transaction data) obtained in the course of our work and professional relationships in order to comply with applicable laws and professional rules.
- Necessity for the purposes of the legitimate interests of TALI’s business. Specifically we have an interest in:
- managing our business and providing and supervising our services including but not limited to allocating work to the most suitable professionals;
- providing proper billing information and ensuring payments are correctly made;
- growing our business by undertaking marketing and promotions to organisations that may be interested in our services (or in becoming a member of or affiliated with our professional group); and
- ensuring we are in a position to investigate and respond to any future legal claims, or future requests from regulators, insurers, clients or our counsel in connection with TALI services.
When processing data for these purposes, TALI takes account of the interests and fundamental rights and freedoms of the data subjects.
Due to that fact that this data is always from a professional context (work email, work telephone, contractual information etc.) and/or obtained from sources where it is voluntarily offered by the data subjects (websites, conferences, webinars, professional networking) the impact on privacy is minimal and our use is within what data subjects would reasonably expect.
We are open and transparent about our data use and maintain appropriate safeguards (e.g., security measures in line with industry and professional standards, and respect for the exercise of user rights).
Accordingly we have concluded that our legitimate interests are not overridden by the relevant interests, rights and freedoms of the data subjects and that they therefore provide a proper legal basis for our processing. All statutory rights of data subjects continue to apply (see Section 9 below).
Consent: TALI may ask you for your consent for certain activities in which case we will set out the required information at the time. This could relate to participation in a seminar, or receipt of newsletters for example. This basis is not required for most of our data processing activities.
However, some cookies are necessary for the correct use of our website and you may not be able to use all features of our website if all cookies are disabled.
When you visit our website(s) our servers may record your IP address together with the date, time and duration of your visit for statistical purposes.
7. HOW LONG DOES TALI KEEP DATA?
TALI only retains data as long as necessary:
- for the purpose for which it was collected, i.e. to provide our services, manage relations with our clients, professional collaborators, suppliers etc.
- to comply with our legal and professional obligations.
- for the purposes of our legitimate interests.
In relation to client and client service related data, TALI will retain all records for at least six years from the provision of service or last contact, or any other period set by applicable limitation acts for the bringing of legal claims in relation to TALI services, whichever is longer.
TALI providers may apply different retention periods in accordance with local legal and professional rules where they are located. Clients may ask for return or deletion of records, also subject to limitations set by applicable legal and professional rules.
TALI supplier data is reviewed periodically as to whether it remains necessary for TALI’s business.
Data used for marketing purposes is reviewed annually and updated as required.
We delete as much data as possible when asked to do by data subjects but in many cases provision of services and compliance with legal obligations will require us to retain that data or certain parts of that data. If we are requested to stop processing data for direct marketing purposes then we will always do so (it nevertheless being understood that some information may remain on our files for other purposes where legal and professional obligations require this as set out in this Policy).
8. WHO RECEIVES TALI DATA?
TALI professionals and TALI providers can access data relevant to their responsibilities and tasks which is needed in order for them to fulfill their tasks and/or to provide our services.
- TALI and TALI providers: in order to provide services to TALI clients and to make proposals for new work. Where data is required in connection with a legal assignment handled or coordinated by a TALI provider, the necessary data may be transferred internationally to them, including outside the EU. You can see a list of locations where TALI providers are principally located here (www.transatlanticlaw.com/locations). This list may be updated periodically.
- TALI Principals: in order to provide services to TALI clients and to make proposals for new work
- Suppliers: we work with independent contractors who assist us with accounting, billing, case management, document management, seminars or newsletters, marketing activities and other professional activities to be expected of a legal services provider.
- Data processors: we use external data processors for purposes including email, website and document hosting, storage and backup, email marketing, data analytics (e.g. website behavior). Agreements or terms of service with all such data processors apply that require that they process data in accordance with all applicable laws. If any of them export personal data outside the EU then we make all reasonable efforts to enable these transfers to happen in a way that ensures that data is handled in accordance with similar standards to those applicable in the EU. which include: the EU-US Privacy Shield for transfers to business partners in the US. If we use tailored agreements for data transfer (e.g. model contract clauses) then you may be entitled to view a copy upon request to the address given below.
If any court, public authority, police force or regulator requested data from TALI, then we would normally comply with such request without having to notify you or other affected individuals.
9. WHAT ARE YOUR OTHER RIGHTS?
In accordance with applicable laws, including the GDPR, you have additional rights in relation to data that TALI processes about you, i.e.:
(a) to ask for access to it;
(b) to ask for errors in it to be corrected;
(c) to ask for it to be erased (the "right to be forgotten");
(d) if not erased, then to ask us to restrict its processing;
(e) to object to its processing for specific purposes; or
(f) to ask for a copy to take to another service provider.
Some rights may be restricted where legal and professional obligations require this. Where we process any data based on consent that you have given in the past, then you are always allowed to withdraw your consent at any time (though the processing that took place before such withdrawal will still be legal). The main ways to do this are by contacting us at the above address or to email@example.com.
TALI is always willing to help resolve any issues or doubts you may have in relation to the processing of your data. If you believe that your rights have not been respected at any time then you also have a right to complain to the relevant Supervisory or Data Protection Authority in your country to ask them for a resolution.
11. HOW CAN YOU CONTACT TALI?
Transatlantic Law International Limited
42 Brook Street
London W1K 5DB
All email messages sent to and from TALI may be monitored to ensure compliance with our policies and applicable rules and to run our business in a professional manner.
©Transatlantic Law International Limited, 2018, all rights reserved.
Last updated: January 1, 2018