This policy explains the data protection practices of Leman in connection with our client services. We respect your right to privacy, and we will keep your personal information secure and process it in accordance with EU and Irish data protection law.
How we use Personal Information
For our Clients and Related Individuals
If you are a client (prospective, current or former) of Leman, we will collect and process your personal data as part of our services. If you are an officer, shareholder, employee or partner of one of our corporate clients, or a family member of an individual client, then we might also collect and process your personal data as part of our services to the client. The data we hold will include any personal data provided to us by the client during the engagement and may include your name, contact information, a copy of your passport or other ID, bank account information for payments, and details about the matter in which the client has engaged us to represent them. We will only process your data in order to provide our legal or consulting services to our client. Our legal bases for this processing are that it is necessary to perform our contractual obligations to the client, and is in our legitimate interest in the administration and operation of our firm. We will retain your data for a period of  years because we believe we have a legal responsibility to retain client files for this period.
For people whose information is relevant to our legal services to our clients
If your personal information is relevant to the services we provide to our clients, we might also collect and process your personal information. For example, if we are representing a client in litigation we will likely collect or receive personal information regarding plaintiffs/defendants, notice parties, solicitors, barristers, witnesses and service providers. We will only process your data in order to provide our legal or consulting services to our client. Our legal basis for this processing is that it is in our legitimate interest in the administration and operation of our firm. We will retain your data for a period of  years because we believe we have a legal responsibility to retain client files for this period.
Who we share your Personal Information with
- Our employees and contractors who need to access personal information to provide legal services;
- Our IT, cloud and e-mail service providers
- Other third parties necessary to provide our client services
Where Leman discloses personal information to third parties we ensure that we have an appropriate agreement in place that protect your personal information and complies with our data protection obligations. In certain circumstances Leman may have a legal obligation to share your personal information with law enforcement officials or regulatory authorities.
Transfers of data outside the European Economic Area (EEA)
When instructed by a client, we sometimes transfer personal information to third parties outside the EEA such as foreign law firms, clients and affiliates of clients. For such transfer we put in place the safeguard of entering into the European Commission approved Standard Contractual Clauses or another approved safeguard.
Automated decision making and profiling
We do not use any personal information for the purpose of automated decision making or profiling.
Under EU and Irish data protection law you have the following rights:
Access, Rectification or Erasure: You have the right of access to personal information we hold about you in our records. You are also entitled to have your personal data corrected if it is inaccurate or erased if we do not have a legitimate reason for retaining your data.
To be Informed: you have the right to be informed how your personal information is being processed
To Restrict Processing: you have the right to restrict the processing of your personal information where you are contesting the accuracy of that information, you have objected to processing (as described below), or where the processing is unlawful,
To Data Portability: for personal information which you have provided to a controller, where processing was based on your consent, or where processing is done by automated means, you have the right to be able to move your data from one IT system to another in a safe and secure way.
To Object: where your personal information is being processed based on the legitimate interests of a data controller, you have the right to object to that processing.
To Withdraw Consent: if a data controller is relying on your consent for the processing of your personal information, you have the right to withdraw your consent at any time.
To request any of these actions, please contact our privacy officer by e-mail at firstname.lastname@example.org, by phone at 01 639 3000, or by post to Leman, 8-34 Percy Place, Dublin 4. If you believe we are processing your personal information improperly, please let us know. You can also file a complaint with the Irish Data Protection Commissioner. For information on how to file a complaint, go to the Data Protection Commissioner’s website at www.dataprotection.ie.