Last updated: 23 October 2026

1. Who we are

Ascendance AB (org. no. 559584-9364), Ringvägen 153, Stockholm, Sweden, operates Ascend Law and is the controller for the personal data described in this policy. Contact us about privacy at webmaster@ascendlaw.se.

2. What personal data we process

• When you contact us: name, email address, phone number, company, role and anything you include in your message.
• When you become a client, or represent one: identity and contact details, identity documents and ownership information needed for client identification, information about other parties needed for conflict checks, information about the matter, and billing details.
• When you visit the website: technical data such as IP address, browser and device type, and the choices you make in the cookie banner.

3. Why we process it and on what legal basis

We process personal data for the following purposes, each with the legal basis under the GDPR shown:

• Responding to enquiries and arranging consultations – legitimate interest (Art. 6(1)(f)).
• Checking for conflicts of interest before taking on a matter – legitimate interest (Art. 6(1)(f)).
• Identifying clients and preventing money laundering, where the law requires it – legal obligation (Art. 6(1)(c)), including the Swedish Anti-Money Laundering Act (2017:630).
• Providing our services and managing the client relationship – contract (Art. 6(1)(b)), or legitimate interest where you represent a client.
• Invoicing and bookkeeping – legal obligation (Art. 6(1)(c)) under the Swedish Accounting Act (1999:1078).
• Running and securing the website – legitimate interest (Art. 6(1)(f)).
• Optional cookies, such as the website translator – consent (Art. 6(1)(a)).

4. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for:

• Enquiries that do not lead to an engagement: deleted 12 months after our last contact.
• Client and matter files, including conflict-check records: 10 years after the matter ends, in line with the general limitation period for claims.
• Client identification records, including copies of identity documents: 5 years after the business relationship ends. This applies whether we collected them under the Swedish Anti-Money Laundering Act or under our own policy. We keep them longer only if a supervisory authority requires it, and for no more than 10 years in total.
• Accounting records: 7 years after the end of the calendar year in which the financial year ended, as the Swedish Bookkeeping Act requires.

When a retention period ends, we delete or anonymise the data.

5. How we protect it

We protect personal data with technical and organisational measures suited to the risk. Only the people working on a matter can access its files. Our systems use multi-factor authentication and encrypted connections, and we store files with providers in the EU/EEA that encrypt data at rest. If a personal data breach occurs, we report it to the Swedish Authority for Privacy Protection (IMY) and, where required, to the people affected.

6. Who we share it with

We do not sell personal data. We share it only where needed:

• IT, hosting and email providers that process data on our behalf under data processing agreements;
• Corporate Service Sweden and PPWR Sweden, our group companies, when you engage them;
• counterparties, courts, authorities or other advisers, when needed to carry out a matter on a client's instructions;
• authorities, when the law requires it.

7. Transfers outside the EU/EEA

We aim to keep personal data within the EU/EEA. If a provider processes it outside the EU/EEA, the transfer is covered by an adequacy decision or the European Commission's standard contractual clauses.

8. Cookies

The website uses cookies that are necessary for it to work. With your consent, it also uses a third-party website translator, which may collect data about your activity. We do not use cookies for advertising. You can change your choices at any time under "Privacy settings" at the bottom of every page.

9. Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw any consent you have given. Some rights are limited where we must keep data by law or to protect a client's confidential information. Write to webmaster@ascendlaw.se to use your rights. You can also complain to the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

10. Changes

We update this policy when our processing changes. The current version is always on this page.