4.
On what legal basis do we use your personal data?
In some countries we are required to inform you of the legal basis permitting us to collect and handle your personal data and so we have set out the main legal grounds that KWM relies on. In general, we need the above-mentioned personal data because it is necessary in KWM’s legitimate interests to provide its services to/otherwise engage with you and to develop its business, including the business of its associated entities, but only in circumstances where these interests are not outweighed by the need to protect your privacy.
Alternatively, it may be necessary for KWM to collect and use personal data to perform a contract with you or your organisation. For example, your instruction to us may contain personal data of staff, customers and/or other third parties. Without this information, we cannot enter into the contract.
Otherwise, it may be the case that we rely on the ‘legal obligations’ ground, i.e. it is necessary for KWM to collect certain personal data to comply with legal requirements placed on us. For example, in order to comply with anti-money laundering laws, we need to obtain the identity of relevant individuals and conduct certain background checks on them (which could also include sensitive information such as political allegiances or criminal convictions etc.) when we onboard new clients.
If KWM cannot lawfully handle personal data on the above or other permitted grounds under data protection laws or where it is mandatory in a particular country that we operate in, we may need to get your express consent to be able to do so. This might be the case where KWM collects information that the data protection laws of certain countries consider to be inherently sensitive. For example, where you tell us about your dietary requirements so that we can cater to your specific health or religious requirements, or where you ask us to make adjustments to accommodate your disability etc. Please note that you may withdraw consent at any time after you have given it. This would not affect the lawfulness of KWM’s prior use of that data. In certain situations, however, withdrawing consent might impact KWM’s ability to provide services to/otherwise engage with you.