In accordance with applicable data protection legislation, Pallas UK must identify a lawful basis for processing your personal data which may vary according to the type of personal data processed and the individual to whom it relates. The following bases, singly or in combination, apply.
- Performance of a contract with you (where applicable):
Pallas UK is entitled to process the personal data it requires in order to fulfil its obligations under its contract with you. This will be the relevant legal basis if you are an individual client or supplier or other individual with a direct contractual relationship with Pallas UK.
- Legitimate interests of Pallas UK or a third-party:
Pallas UK may process some of your personal data on the basis that it is in its legitimate interests and/or the legitimate interests of a third-party to do so. This will primarily concern the processing of personal data that is necessary to provide legal advice and services to our clients. Pallas UK’s legitimate business interest in such instances is the proper performance of its function as an authorised and regulated provider of legal services. Pallas UK’s clients’ also have a legitimate interest (and more general right in law) in obtaining legal advice and services.
Pallas UK’s broad interest in the provision of legal services as a basis for processing your personal data, and our clients’ corollary interest in the receipt of such services, can be broken down into more discreet categories which may include, but are not limited, to:
- the interest in contacting individuals relevant to Pallas UK’s work and our clients’ matters, which may involve the use of your personal data;
- the interest in reviewing documents and correspondence that have been disclosed to Pallas UK, Pallas UK clients and third-parties which may contain your personal data;
- the interest in reviewing and analysing all evidence available to Pallas UK and its clients, which may contain your personal data;
- the interest in adducing legal arguments, creating documents and correspondence, which may contain your personal data;
- the interest in disclosing documents and correspondence, which may contain your personal data, to various parties in the furtherance of Pallas UK’s clients’ objectives;
- the interest in instructing third-parties on behalf of Pallas UK clients;
- the interest in receiving payment from Pallas UK clients and third-parties and to facilitate payments to and from Pallas UK clients and third-parties; and
- in order to allow for all of the above, the secure management and storage of your personal data, within our IT environment and hard-copy filing systems.
Pallas UK may also process your personal data on the basis that it is necessary for its legitimate business interests in the effective management and running of Pallas UK which may include, but is not limited to: engaging suppliers and supplier personnel; ensuring that its systems and premises are secure and running efficiently; for regulatory and legislative compliance, and related auditing and reporting; for insurance purposes; for recruitment/hiring purposes; for marketing purposes; and to facilitate, make and receive payments.
Pallas UK does not consider that the processing of your personal data, on the basis that it is within Pallas UK’s legitimate interests (whatever such interests might be), is unwarranted because of any prejudicial effect on your rights and freedoms or your legitimate interests.
- Compliance with a legal obligation to which Pallas UK is subject:
In certain circumstances, Pallas UK must process your personal data in order to comply with its legal obligations. This might include, but is not limited to, personal data required: for tax and accounting purposes; for conflict checking purposes as required by the law and Pallas UK’s regulators; and for Pallas UK to fulfil its compliance and other obligations under relevant legislation/regulation.
More information relating to legal bases for processing personal data can be found on the Information Commissioner’s website (see details below) or by contacting us.Special category and criminal records personal data
If Pallas UK processes your criminal records personal data or special category personal data relating to your racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, health data, biometric data or sexual orientation, we will obtain your explicit consent to those activities unless this is not required by law (because, for example, it is processed for the purpose of exercising or defending legal claims) or the information is required to protect your health in an emergency. Where we are processing personal data based on your consent, you have the right to withdraw that consent at any time.