Last updated: September 2026

What personal information do we process?

The information we process depends on how you contact us and the nature of your inquiry.

Among other things, we can treat:

• name and contact information,

• personal identification number and coordination number,

• information provided through our website, email, telephone, or other means of communication,

• information needed to assess, administer, or carry out a legal assignment,

• payment and billing information,

• technical information about how our website is used.

As part of our legal work, we may also need to process sensitive personal data and information regarding criminal offenses when necessary to safeguard our clients’ legal interests.

Social Security Number

Personal identification numbers and coordination numbers are personal data that require special protection.

We process personal identification numbers only when there is a legitimate need for secure identification or when the processing is otherwise clearly justified in light of the purpose or some other compelling reason.

Personal identification numbers are handled with care and are not disclosed unnecessarily.

IMY states that, as a general rule, consent is required for the processing of personal identification numbers, but that they may also be processed without consent when the processing is clearly justified, for example, by the need for secure identification. The Swedish Data Protection Authority

Contact form on the website

When you contact us using the form on our website, we process the information you provide.

The information is sent to the law firm Sweger & Boström KB via email so that we can receive, evaluate, and respond to your inquiry.

Please provide only the personal information necessary for us to process your request.

If we request your personal identification number, it should only be provided when necessary for secure identification or to enable us to process your request.

Submitting a form does not automatically mean that a client relationship has been established or that the law firm Sweger & Boström KB has accepted an assignment.

Why do we process personal data?

We process personal data for purposes that include:

• receive and respond to inquiries,

• conduct checks for disqualification and conflicts of interest,

• identify clients,

• determine whether we can take on an assignment,

• enter into and perform agreements for legal services,

• carry out and manage legal assignments,

• communicate with clients, counterparties, courts, and other relevant parties,

• handle invoicing and financial administration,

• comply with legal obligations and the rules of professional conduct for attorneys,

• pursue legal claims,

• maintain security on our website,

• analyze how the website is used and improve its functionality.

Legal Basis

Depending on the situation, our processing of personal data may be based on, among other things:

• that the processing is necessary for entering into or fulfilling a contract,

• legal obligation,

• legitimate interest,

• that the processing is necessary to establish, assert, or defend legal claims,

• or consent when required.

The applicable legal basis depends on the type of processing and the purpose involved.

How long do we retain personal data?

We retain personal data only for as long as is necessary for the purpose for which the data is processed, or for as long as we are required to retain it by law, in accordance with the rules of professional conduct for attorneys, or under other applicable regulations.

For personal data processed in connection with a client engagement, specific record-keeping requirements for the legal profession may apply.

In September 2026, the Swedish Bar Association adopted new guidelines on the application of the GDPR in the practice of law, which address, among other things, information and documentation requirements when processing personal data. The Swedish Bar Association

Who has access to the personal data?

Personal data may, when necessary, be disclosed to or processed by, for example:

• courts and government agencies,

• counterparties and their representatives,

• experts and other individuals involved in a case,

• banks and other entities involved in financial management,

• our providers of IT, email, web, and document management services.

Vendors who process personal data on our behalf may only process such data in accordance with our instructions and applicable data protection regulations.

Website and External Services

Our website was built using Squarespace.

We also use, among other things:

• Squarespace Analytics

• Google Analytics

• Weglot for website translation

These services may process technical information about visitors to the website.

Cookies

Our website uses cookies.

Some cookies are necessary for the website to function. In addition, we use analytics cookies from providers such as Squarespace and Google Analytics to understand how the website is used and to improve it.

Non-essential cookies are restricted until you have given your consent via our cookie banner.

Squarespace supports allowing visitors to accept or reject non-essential cookies. When Google Analytics is used through Squarespace's official integration, the consent choice can be communicated to Google via Google's Consent Mode. Squarespace Help

According to Squarespace, Weglot uses essential cookies to make the translation feature work. These are therefore not affected by the blocking of non-essential cookies. Squarespace Help

You can choose to accept or reject non-essential cookies using the cookie banner on the website.

Links to Instagram and other external websites

Our website may contain links to external websites and social media platforms, such as Instagram.

When you leave our website and visit an external service, that service’s own terms and conditions and privacy policy apply. The law firm Sweger & Boström KB is not responsible for how external websites process personal data.

Your Rights

Under certain conditions, you have the right, in accordance with the General Data Protection Regulation, to:

• get information about how we process your personal data,

• access your personal information,

• have incorrect information corrected,

• request deletion,

• request that the processing be restricted,

• object to certain processing,

• withdraw consent that has been given,

• obtain certain information in a structured, machine-readable format.

These rights are not absolute. Our obligations under the law, the rules of professional conduct for attorneys, and attorney-client privilege may, in certain situations, limit our ability to, for example, disclose or delete information.

To exercise your rights, you can contact us at:

kontakt@sblaw.se

Safety

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or other unauthorized processing.

Changes to the Privacy Policy

We may update this privacy policy. The most recent version is always available on our website.