Privacy policy

This privacy policy (hereinafter referred to as the ‘Policy’) describes how Loeven Law Firm (hereinafter referred to as ‘Loeven’) processes personal data in our case handling, KYC procedures, and recruitment.

‘Personal data’ includes any form of information about an identifiable individual, such as the person’s name, email address, CPR number, address, as well as information about the person’s physical, mental, economic, cultural, or social conditions. Information about legal entities is not covered by the definition of ‘personal data.’

The relevant personal data protection rules that currently apply to our processing of personal data are set forth in the General Data Protection Regulation (Regulation No. 2016/679 of April 27, 2016) and the Danish Data Protection Act (Act No. 502 of May 23, 2018).

The legal entity responsible for the processing of the personal data we receive is:

Loeven Advokatpartnerselskab
Company Registration Number: 37 34 96 74 Frederiksgade 19, 3.
1265 Copenhagen K

Telephone number: +45 70605026

If you have any questions regarding our processing of personal data and your rights, please feel free to contact attorney Michael Lund Nørgaard at telephone +45 24930268 or email
When contacting us, please provide sufficient information, including your full name and email address, so that we can process your inquiry, identify you, and respond to your request. We will respond to your inquiry as soon as possible.

‘Processing’ of personal data covers any activity performed on personal data, including collection, recording, organization, storage, adaptation, alteration, retrieval, use, or disclosure.

For the purpose of providing our services to our clients, Loeven collects, processes, and stores various types of personal data about you, including contact information such as name, position, email, telephone, and address. We collect information directly from you or from third parties, such as our clients or public authorities or databases.
Job applications will receive a response with an invitation to an interview or a rejection. If we do not have any available positions but wish to keep the application, we will request your consent to store your application.

The legal basis for our processing of personal data is the Danish Data Protection Act, Section 6(1), in accordance with Regulation 679/2016, Article 6(1)(b). This applies if you, as a client, are an individual, as the processing is necessary to enter into or fulfill the agreement for legal assistance with our client. In other cases, including if you are employed by our client, a counterparty, or another person relevant to the case, the legal basis for processing is the Danish Data Protection Act Section 6(1), in accordance with Regulation 679/2016, Article 6(1)(f), where the legitimate interest is to advise, enforce, or defend our client’s interests.

If we need to register in public authority databases (e.g.,,, or or provide assistance to you in connection with a transaction, we may need to process several of your personal data, including your Civil Registration Number (‘CPR number’), in order to identify you. The basis for processing CPR numbers is Loeven’s obligation to comply with anti-money laundering, registration, and/or company law regulations, in accordance with the Danish Data Protection Act Section 11(2)(1), in conjunction with Regulation 679/2016 Article 87, and for the purpose of establishing, enforcing, or defending legal claims, in accordance with the Danish Data Protection Section 11(2)(4), in conjunction with Section 7(1), and Regulation 679/2016, Article 87.

In the processing of criminal cases, we process information regarding criminal judgments and offenses. The basis for processing information about criminal matters is that it is necessary for the exercise of a legitimate interest, and that this interest clearly outweighs the interest of the data subject, in accordance with the Danish Data Protection Act Section 8(3), second paragraph, in conjunction with Regulation 679/2016, Article 10.

In specific cases, Loeven processes sensitive personal data about you, such as health information or information about trade union membership. We will only process such information if and to the extent necessary for establishing, enforcing, or defending legal claims, in accordance with Regulation 679/2016, Article 6(1)(a) and (e), and Regulation 679/2016, Article 9(2)(a) and (f).

We treat your personal data confidentially in accordance with applicable professional ethical rules.

In our case processing, we will exchange your information with counterparties and courts. We will also exchange your information with public authorities if we have obtained your information for the purpose of sharing it with public authorities, for example, when registering changes in companies or handling complaint cases.

We keep your information for as long as necessary to fulfill the purpose for which your personal data was collected. Afterwards, the information will be deleted. As a general rule, case files are kept for 5 years from the completion of the task.

If we reject your job application, we will simultaneously delete your personal information. If we do not notify you of a rejection immediately, your application will be kept for a maximum of 6 months, after which it will be deleted.

We use Visma e-conomic A/S for handling our invoices, DocuSign Inc. for handling electronic contract agreements, Microsoft Ireland Operations, Ltd., and Creditro A/S for handling our client due diligence processes and obligations under anti-money laundering legislation, and Unik Hosting for electronic document management. A list of our data processors can be requested from us by contacting the above-mentioned contact person.

As data subject, you have the right to request access to the personal information we process about you, including its source, purposes of processing, and recipients, to the extent they are disclosed.

You have the right to object to our processing of your personal information, as well as the right to request rectification or erasure of your personal information if it is incorrect, incomplete, or irrelevant.

The exercise of your rights may be limited by legislation or for the protection of essential private interests if they are deemed to outweigh your interests.

To the extent you have provided consent for the processing of your personal information, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of the processing based on consent before its withdrawal. Upon withdrawal, the processing of your personal information will cease, and your personal information will be deleted unless there is a legitimate basis for continued retention, such as for documentation purposes.

You can read more about your rights here:

If you disagree or are dissatisfied with the way Loeven handles your personal information, you are welcome to contact us. You can also file a complaint with the Danish Data Protection Agency, which is the authority responsible for supervising data protection in Denmark:

Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Phone: +45 33193200

We reserve the right to amend the policy due to significant changes in legislation, new technical solutions, new or improved features, or for the purpose of improving the website.

The policy was updated on June 20, 2023.