Privacy and Data Protection Policy
Lee and Li, Attorneys at Law
We, Lee and Li, Attorneys at Law, a law firm in Taiwan (hereinafter referred to as “we” or “Lee and Li”), respect and are committed to protecting your privacy and personal data. In this Privacy and Data Protection Policy (the “Policy”), we explain the details of how we will handle your personal data if you are our client, our potential client, an attorney or a professional whom we are or may be working with, or one who requests to receive our publications, participate in the events that we host or co-host, or receive other marketing information, etc. Please read this Policy carefully. (If you are a job candidate or our employee, you will be notified of the relevant information separately in due course.)
1.Who We Are:
Lee and Li, Attorneys at Law, is a law firm with its head office located at 8F, No. 555, Section 4, Zhongxiao East Road, Taipei City, Taiwan. We provide legal services to clients worldwide. With regard to the processing of your personal data we are controller in the sense of Art. 4 No. 7 of the General Data Protection Regulation (GDPR)
2.What Personal Data We Collect and Process:
We collect and process the following personal data:
-Identification Data: We collect and process your first name, last name, title, and gender. We may collect and process your signature and photos if required for our provision of the legal services to you or your company/organization.
-Contact Details: We collect and process your e-mail addresses, telephone numbers, mobile numbers, fax numbers, and postal addresses.
-Professional/Employment Data: We collect and process the information on the companies and/or organizations that you have worked or are working with, including information on your positions, your departments/divisions, and/or your job duties/functions.
-Payment Information: We collect and process the bank account details of you and/or your company/organization (with your personal data included, if any) in order to receive payments from you and/or your company/organization or in order to complete the transactions with which you and/or your company/organization require us to assist.
-Know-Your-Customer (KYC) Data (Anti-Money Laundering Requirements): Under certain circumstances, we are required to perform certain KYC obligations if you are our client and collect certain data of you. Such data includes personal data concerning your employment, occupation, investment, position, date of birth, identification documents, contact information, resident status, and signatures, and your or your relatives' affiliation with political organization, state-owned enterprise, or government or any other data required pursuant to the applicable laws.
-Public Information/Information from Third Parties: We may collect and process your personal data which we obtain from public sources or a third party database (paid or free).
-Other Personal Data Regarding Your Legal Matter: Depending on the legal services that you require from us, we may collect and process additional personal data of you and/or any other individuals (for example, your counterparty), that you or a third party provides us with or you instruct us to collect or search independently, which we are not able to provide a complete list here. With regard to sensitive information, such as medical and criminal records, we will only collect and process such data if it is vital to our performance of our contract with you and/or your company/organization and will obtain the required consent from you, if any, at such time pursuant to the applicable laws and regulations.
3.For What Purposes the Personal Data is Processed and the Legal Grounds for Such Processing:
We process your personal data for the following purposes based on the following legal grounds:
-To provide legal services: If you or your company/organization is our client, we will process your personal data for the purpose of providing legal services to you or your company/organization based on our contract with you or your company/organization. To receive payments from you, we will need to process your payment data, such as bank account details and disclose the same to relevant third parties, such as our bank (Art. 6 para. 1 lit. b) GDPR).
-Obtaining from/sharing data with other law firms: At times, we will be retained by or retain another law firm/professional intermediary in order to provide the required legal services to you or your company/organization. In such cases, we will obtain the relevant personal data from or share such data with the law firm/professional intermediary and process such data for the purpose of performing the required services, and such data processing will also be based on the service contract that we may enter into with either the law firm/professional intermediary or you or your company/organization (Art. 6 para. 1 lit b) GDPR).
-Transfer of data to third parties: We may also need to transfer your personal data to a third party or government agency, depending on the services that you require from us. To assist you with transactions, we may need to process your payment data (for example, bank account details) and disclose the same to third parties, such as our bank (Art. 6 para. 1 lit. b) GDPR).
-To manage your files and perform our internal administrative work: To facilitate our provision of services to you, we will establish and maintain files for you or your company/organization with your relevant personal data being stored in such files. We will process the relevant data for our client management purposes. These activities are conducted because they are necessary for our performance of the contract with you or your company/organization (Art. 6 para. 1 lit. f) GDPR), for our and our clients’ legitimate interests in providing our services to you more easily (Art. 6 para. 1 lit. f) GDPR), or for our compliance with the relevant laws and regulations (Art. 6 para. 1 lit. c) GDPR).
-To send you legal updates, event invitations, other marketing information, and our greetings: With your consent and at your instruction, we will send you updates, developments, reports on status of the relevant laws and regulations or legal services, invitations to events that we host or co-host, other marketing information and our greetings(Art. 6 para. 1 lit. a) GDPR).
-To host or co-host events: If you register for an event that we host or co-host, we will use your personal data for the purpose of organizing and holding the event, which is in our legitimate interest (Art. 6 para. 1 lit. f) GDPR).
We may process your personal data through traditional manual methods. We may also use computers and IT systems to process your personal data. Please note that we are not involved in any automated decision-making operation, such as profiling.
5.How Your Personal Data is Collected:
We may collect your personal data directly from you in the course of our interaction with you. We may also conduct independent search (either from public sources, web search engines such as Google, or other third party databases, such as Bloomberg or Reuters) on your personal data if it is required for our client management, our provision of legal services to you or your company/organization, or fulfillment of our legal obligations. It may also be possible that we receive your contact information from a referrer of our services, which we will let you know when we contact you.
6.To Whom We Will Disclose Your Personal Data:
Depending on the services that you require, we may need to disclose your personal data to a government agency, the prosecutors' office, the court, other third-party service provider, or the counter-party of your transaction. With regard to third-party service providers, for example, we may disclose your personal data to a courier/postal office (for delivery of documentation), translation agency (for translation), a local newspaper publisher (for you or your company/organization to make any legally required public announcement) and so on. If you participate in an event that we host or co-host, we may need to share your personal data with the event service provider or our co-host.
7.Transfer of Data Out of Taiwan
In principle, we will not transfer your personal data to a territory outside of Taiwan, unless you instruct or require us to do so or it is necessary for us to handle your legal matters, in which case,you will be notified accordingly. In most cases, the recipients will be the law firms/professional intermediaries that are providing services to you or your company/organization, your bank or other relevant banks that will process your payments/instructions, or your counter-parties located outside of Taiwan.
8.How Long We Will Keep Your Personal Data
We will store and keep your personal data as long as it is needed in order for us to provide services to you or your company/organization based on the scope of Lee and Li's engagement by you or your company/organization. For receiving legal updates, event invitations and other marketing information, we will store your personal data until you withdraw your consent for receiving such information.
9.Your Rights as A Data Subject
Under the applicable laws and regulations, you have the following rights as a data subject:
-Right to access:You have the right to access your personal data processed by Lee and Li in order to check or view such personal data. You also have the right to request a copy of such personal data.
-Right to rectify: If any of your personal data that we are processing is inaccurate or incomplete, you may request to rectify it or make supplements.
-Right to delete: You may have your personal data erased/deleted from Lee and Li's data base if the processing is no longer necessary for the purposes pursued by Lee and Li, or if, among other things, your personal data is being unlawfully processed. We may not need to act on your request if the processing of your personal data is necessary for the establishment, exercise or defense of a relevant legal claim or if we have any other statutory grounds to refuse to do so.
-Right to data portability: Under certain circumstances, pursuant to the applicable laws and regulations, you may have the right to receive your persona data in a structured, commonly used and machine-readable format and have these personal data directly transmitted from Lee and Li to a third party, where technically feasible.
- Right to object: You may object, on grounds relating to your particular situation, at any time to the processing of your personal data for direct marketing purposes, or for other unauthorized or illegitimate purposes.
-Right to withdraw consent: If we process your personal data for a purpose of which the legal ground is your consent, you may withdraw your consent at any time by notifying us.
-Right to lodge a complaint: If you deem that your rights under the applicable laws or regulations have been infringed, you have the right to lodge a complaint with the competent authority.
10.Consequences of Not Providing Personal Data to Us
If you engage our legal services or request to receive our legal updates, event invitations and other marketing information, but refuse to provide us with your personal data, such as your identification or contact information, we will not be able to perform the required services/actions, or the performance will not be in a timely manner. If we are required to obtain your personal data in order to fulfill our legal obligations, and you refuse to provide such information to us, we may not be able to accept your engagement of our services.
11.Amendments to This Policy
Lee and Li will update this Policy from time to time on Lee and Li's web site where you can regularly inform yourself about such changes. If you gave your consent to this, Lee and Li will also inform you by e-mail in the event of any material change to this Policy.
12.Contact Us
If you would like to exercise your rights as a data subject, or if you have any questions or suggestions about the Policy, please contact the attorney in charge of your legal matter at Lee and Li, or write to the following e-mail/postal address:
E-mail Address:attorneys@leeandli.com
Postal Address: 8F, No. 555, Sec. 4, Zhongxiao E. Rd., Taipei 11072, Taiwan, R.O.C.
We will respond to your request as soon as possible within the statutory period applicable to us.