(A) WHO WE ARE

The controller of your personal data is Konda Limited, 77 (gia 24) Windsor Terrace, Sliema, Malta, SLM1853. References in this privacy notice (the Notice) to “Konda”, “we” or “us” are references to Konda Limited.

(B) PERSONAL DATA WE PROCESS

Personal data we process about you includes:

• your name and contact details (for example name, address, phone number or email address), information about the company you work for, your position or title and your relationship to a person, and other basic information;
• identification and background information provided by you or collected as part of our on-boarding process;
• financial information, for example payment-related information;
• information provided to us by or on behalf of our clients or generated by us in the course or providing services to clients;
• information provided to us for the purposes of attending meetings, seminars and events;
• information in relation to materials and communications we send to you electronically, for example your use of marketing e-mails;
• any other information relating to you which you may provide to us.

We collect this information when you interact with us, for example when you communicate with our staff, sign up to receive information by e-mail, or participate at meeting, seminar or other event. We also collect or generate personal data in the course of providing legal services, and we may collect personal data from other sources for example to keep your information up to date using publically available sources.

(C) HOW WE PROCESS YOUR PERSONAL DATA

We process your personal data:

• to communicate with you;
• to carry out anti-money laundering, conflict and reputational checks;
• to provide and improve our services to you and our clients, including personal data of others provided to us or collected by us on behalf of our clients, for example processing identification and background information as part of our on-boarding, finance, administration and marketing processes;
• to administer our relationship with you and with our clients;
  to provide and improve our websites, including monitoring and evaluating its use (see sec. 4 below for additional information);
• to promote our services, including by sending publications, alerts, updates, event invitations etc.;
• to comply with our legal, regulatory and risk management obligations, including establishing, exercising or defending legal claims.

We process personal data for these purposes on the following basis: that it is necessary for us to perform a contract, such as engaging with an individual to provide legal or other services; for the establishment, exercise or defence of legal claims or proceedings; to comply with legal and regulatory obligations; for legitimate interests including the interests set out above; and/or based on consent. We use various technical and organisational measures to help protect your personal data from unauthorised access, use, disclosure, alteration or destruction.

(D) USE OF OUR WEBSITES; COMMUNICATION

We automatically collect and store for a limited time log data and device information when you access and use our website. That information includes, among other things, details about how you use our website, IP address, access dates and times, hardware and software information, device information and similar information. We process that data on the basis that it is required for us to operate, maintain and improve our websites

We may use your name and e-mail address(es) to send you publications, alerts, updates, event invitations and other information by e-mail, but will ask for consent first unless we have obtained your contact details from you in the context of our services and you have not opted out from receiving such marketing communications.

(E) WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with trusted third parties including:

• suppliers to whom we outsource certain support services such as translation and document
  review;
• IT service providers;
• third parties engaged in the course of the services we provide to clients, with their prior consent,
  for example other law firms and technology service providers such as data room services;
• auditors;

For the purposes set out in this Policy and where necessary, we may share personal data with courts, tribunals, regulatory authorities, government agencies and law enforcement agencies. We may also be required to disclose your personal data to comply with legal or regulatory requirements.

(F) COUNTRIES WE TRANSFER YOUR PERSONAL DATA TO

We may transfer your personal data to recipients abroad, including in countries that do not provide the  same level of protection as Maltese law. We will usually do so on the basis that such a transfer is necessary for the performance of an agreement with the data subject(s), for an agreement or performance of an agreement concluded in the interest of the data subject, or for the establishment, exercise or defence of legal claims.

(G) HOW WE RETAIN YOUR PERSONAL DATA

We retain your personal data for as long as it is necessary for the purposes for which the data is collected, and as long as we have a legitimate interest in keeping personal data, for example to enforce or defend claims or for archiving purposes and IT security. We also retain your personal data as long as it is subject to a legal retention obligation.

(H) YOUR RIGHTS

You are entitled to ask for details of the personal data we hold about you and how we process it and to receive a copy of your personal data. You may also have your data rectified or deleted, restrict our processing of that information, and object to the processing of your personal data. You may also choose to withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal data to the extent required or permitted by law. You may also lodge a complaint in relation to our processing of your personal data with a local supervisory authority, in Malta.