Effective from 27 September 2026
We at Asianajotoimisto Waly & Rinne Oy are committed to complying with the data protection laws applicable to our operations. In this privacy notice, we describe our practices for processing personal data.
1. Controller and contact person
Asianajotoimisto Waly & Rinne Oy (Business ID 3392282-9)
Porkkalankatu 7
00180 HELSINKI
FINLAND
Contact person / data protection officer:
Asianajotoimisto Waly & Rinne Oy
Sami Waly
Tel. +358 29 3500 300
Email: sami.waly@wrlaki.fi
2. Personal data register
Asianajotoimisto Waly & Rinne Oy maintains a client and marketing register.
3. Data collected and how it is processed
Asianajotoimisto Waly & Rinne Oy collects data in order to organise, plan and carry out assignments and to allocate measures to each assignment. The client register is also used to identify possible conflicts of interest when accepting an assignment. The client register is also used for planning, developing and marketing the controller’s business.
Personal data is collected from the information you provide, from data generated when you visit our website, and from information available from public sources.
You are not required to provide us with your personal data, but in that case we will not be able to handle your matter.
Our client register contains the names and contact details, personal identity codes, contact person details of corporate clients, measures taken, billing details, assignment title and the opposing parties of the firm’s current and former clients, as well as of potential clients and others who have contacted us.
Consents to and prohibitions of direct marketing are also recorded in the register.
4. Legal basis for processing personal data
The legal bases for our processing of personal data are:
– your consent for us to collect data concerning you (consent)
– an agreement you enter into with us concerning an assignment (contract)
– compliance with our statutory obligations
5. Disclosure of data
We disclose personal data as follows:
1. When it is necessary for handling the assignment and has been agreed with our client (for example, disclosure of data to the court handling your matter, to the legal aid office handling your legal aid, or to the insurance company handling your insurance benefit)
2. As a company, we also purchase services from other companies, such as IT and accounting services. In these situations, disclosing data to our partners may be necessary to organise our services appropriately. Appropriate data processing and compliance with data protection laws have been agreed with our service providers.
3. When it is necessary to exercise our rights (for example, collection of our receivables) or when required by law
We never sell your data.
We aim not to transfer personal data outside the European Union or the European Economic Area. However, this may sometimes be necessary to provide our services, for example in order to use certain software. If personal data is transferred outside the European Union or the European Economic Area, we ensure an adequate level of protection for personal data, among other things by agreeing on matters related to the processing of personal data as required by data protection legislation, such as by using standard contractual clauses approved by the European Commission.
6. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device when you visit the website.
Cookies that are necessary for the website to function are always used. Other cookies, such as marketing cookies, are only used with your consent. You can give, change or withdraw your consent at any time via the cookie banner on the website.
We use Google Ads to target advertising to people who are interested in our services (remarketing). Google Ads cookies are only placed if you have accepted marketing cookies. The service is provided by Google Ireland Limited. You can find more information about Google’s privacy practices on Google’s website.
You can find more detailed information about the cookies used on the website, their purposes and retention periods in our Cookie Policy.
7. Principles of register security
Access to the data is restricted to persons who need the data and who are bound by confidentiality.
8. Your rights as a data subject
You have the right to:
– receive information about the processing of your personal data
– access your data
– have your data rectified
– have your data erased and be forgotten
– restrict the processing of your data
– transfer your data from one system to another
– object to the processing of your data
– not be subject to automated decision-making.
9. Data retention period
Your personal data is retained only for as long as is necessary to carry out the activities described here.
With regard to data concerning assignments, we follow the industry’s code of conduct on the retention of documents.
10. Updates
This privacy notice was last updated on 27 September 2026.