Privacy notice

Signature Legal Oy, a private limited liability company incorporated in Finland with Business ID 2313523-1, is
the controller of any personal data that we obtain about you.
If you have any questions regarding this notice or the processing of your personal data, you may contact us at info@signaturelegal.fi.

We collect personal data from you in the course of our business, including when you contact or request information from us (whether through the contact form on this website or otherwise), when you or your
organization engage us to provide services, or as a result of any relationship of you or your organization with any of our clients.

• basic information, such as name (including name prefix), employer, title/position and relationship to a
  person;
• contact information, such as postal address, email address and phone number(s);
• financial information, such as invoicing address, bank account and payment information; and
• identification information obtained as part of our engagement process, such as proof of identity.

We may collect personal data relating to our clients, representatives of our clients, counterparties, professional
advisers and other individuals with whom we interact in the course of our business.

We use your personal data for the purposes of:

• providing legal and related professional services under any contract we may have with you or your organization;
• compliance with our legal, regulatory or reporting obligations, including obligations relating to anti-money laundering, sanctions, accounting and auditing;
• business development and marketing, such as maintaining contact lists and communicating with you regarding our services that may be of interest to you; and
• management of any business relationship we may have with you or your organization, including invoicing, payment processing and collections.

We do not carry out automated decision-making, including profiling, that produces legal effects concerning
you or similarly significantly affects you.

We do not share your personal data with third parties except where necessary for the purposes described in this notice. In particular, we may share personal data:

• relating to any of our clients or its representatives to any accountants, financial advisors, law firms or other consultants involved in the relevant matter(s); and
• with our suppliers and service providers, including providers of IT systems as well as support and
  maintenance services for these systems.

All such third parties are required to handle personal data in accordance with applicable data protection laws.

If we transfer personal data outside the European Economic Area (EEA) such as transfers to cloud or technology service providers located outside the EEA, such transfers will take place only where:

• the destination country has been recognized by the European Commission as providing an adequate level of data protection (such as the United Kingdom); or
• appropriate safeguards are in place in accordance with applicable data protection laws.

We take appropriate technical and organizational security measures in accordance with our internal policies
and procedures to protect your personal data against any:

• unauthorized or unlawful processing; and
• accidental loss, destruction or damage.

We do not store your personal data for any longer period than is necessary to:

• fulfil the purpose for which we collected such data;
• comply with any of our legal, regulatory or reporting obligations; or
• assert or defend against any legal claim.

You have the right to request us to:

• update or correct any inaccurate personal data that we hold about you;
• complete any incomplete personal data that we hold about you; and
• cease our use of your personal data for direct marketing purposes.

You also have the right to object to our use of your personal data more generally.

You may also have the right, in certain circumstances, to request us to:

• provide you with a copy of any personal data that we hold about you;
• delete any personal data that we hold about you; and
• provide you with the personal data which you have provided to us in a commonly used machine readable format so that such data can be transmitted to a replacement service provider.

Where processing is based on your consent, you may withdraw your consent at any time.

You can exercise the above rights, where applicable, by contacting us at info@signaturelegal.fi. We may
request proof of identity in order to ensure that personal data is disclosed only to the relevant individual.

This document may be updated by us from time to time and this website will always reflect the current version.
This document was last updated in March 2026.