Privacy Policy

Last updated: 17.09.2026

This Privacy Policy explains how Finestlaw processes the personal data of its clients and website visitors. We process personal data in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection requirements.

1. Data Controller

The controller of personal data is:

Henkan palvelut Tmi / Finestlaw
Business ID: 2925444-2
Email: info@finestlaw.eu

Finestlaw provides legal services to clients in Estonia and Finland and delivers services digitally.

2. What Personal Data Do We Process?

Depending on the use of our services, we may process the following data:

  • name and contact details;
  • email address and telephone number;
  • the client’s description of their legal matter;
  • documents and other materials needed to provide legal services;
  • data relating to contracts, invoicing and payments;
  • data provided in the course of communications;
  • technical data relating to website use, such as an IP address and information about the device or browser.

Documents that a client provides to us about their legal situation may also contain special categories of personal data. We process such data only where this is necessary to provide legal services and there is a legal basis for doing so.

3. How Do We Collect Personal Data?

We may obtain personal data:

  • directly from the client;
  • through the website contact form;
  • by email or other electronic communications;
  • from documents provided by the client;
  • in the course of the client relationship or the provision of legal services;
  • from technical data collected automatically through website use.

4. Purposes of Processing Personal Data

We process personal data primarily to:

  • respond to enquiries and requests to be contacted;
  • assess the nature of the client’s legal matter and provide an initial legal assessment;
  • provide legal services;
  • prepare and perform contracts;
  • communicate with the client;
  • prepare invoices and arrange payments;
  • comply with legal obligations;
  • protect our rights and interests in potential disputes;
  • ensure the security and operation of the website.

5. Legal Basis for Processing Personal Data

Depending on the purpose of processing, the legal basis may be:

  • entering into or performing a contract;
  • compliance with a legal obligation;
  • the controller’s legitimate interest;
  • the individual’s consent;
  • another legal basis provided for in the GDPR.

When processing special categories of personal data, we follow the conditions set out in Article 9 of the GDPR.

6. Providing Documents and Legal Information

When a client provides Finestlaw with documents or other information to obtain legal services, the client is responsible for ensuring that they have the right to provide those data.

The client should provide only the personal data and documents necessary to resolve their legal matter.

An enquiry sent through the website does not automatically establish a client relationship or a contract for the provision of legal services.

7. Disclosure of Personal Data to Third Parties

We do not sell or disclose personal data to third parties for marketing purposes.

Personal data may be disclosed to service providers, or service providers may be used to process the data, where this is necessary to organise Finestlaw’s activities. Examples include:

  • IT and website service providers;
  • email and communications service providers;
  • document and signature services;
  • accounting and payment service providers;
  • other trusted service providers whose services are necessary to deliver our services.

Such service providers may process personal data only for the agreed purpose and in accordance with applicable data protection requirements.

Personal data may also be disclosed where this is required by law or is necessary to establish, exercise or defend legal claims.

8. Transfers of Personal Data Outside the European Economic Area

If we use a service provider whose activities involve transferring personal data outside the European Economic Area, we apply the appropriate safeguards provided for in the GDPR.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purpose for which they were collected, or for longer where required by law.

Documents relating to the client relationship and legal services may be retained for longer where this is necessary to comply with legal obligations or to establish, exercise or defend potential legal claims.

After the retention period ends, the data are deleted or altered so that the individual can no longer be identified.

10. Rights of the Data Subject

Under the GDPR, individuals have, among others, the right to:

  • receive information about the processing of their personal data;
  • request access to their personal data;
  • request the rectification of inaccurate data;
  • request the erasure of data under certain conditions;
  • request the restriction of processing under certain conditions;
  • object to the processing of personal data under certain conditions;
  • receive the data they have provided in a structured, machine-readable format under certain conditions;
  • withdraw consent where processing is based on consent.

To exercise your rights, you may contact: info@finestlaw.eu

Requests will be answered within the period prescribed by applicable law.

11. Making a Complaint

If an individual believes that their personal data have been processed unlawfully, they have the right to lodge a complaint with the competent data protection supervisory authority.

In Estonia, the competent supervisory authority is Andmekaitse Inspektsioon (the Estonian Data Protection Inspectorate).

In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

12. Cookies

The Finestlaw website may use cookies and similar technologies to ensure that the website functions, improve the user experience and, where necessary, analyse website use.

Where the website uses analytics or marketing cookies, we request the user’s consent to the extent required by applicable law.

Users can change their cookie preferences using the options available on the website.

13. Website Security

We implement reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, absolute security cannot be guaranteed for data transmitted over the internet.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, the services we use or applicable law.

The current version is published on the Finestlaw website and indicates the date of the latest update.

15. Contact

For questions about privacy and the processing of personal data, please contact us:

Finestlaw
Henkan palvelut Tmi
Business ID: 2925444-2
Email: info@finestlaw.eu