This Privacy Notice (“Notice”) describes how Adesokan & Ajayi collects and uses your Personal Data in accordance with the applicable data protection and privacy legislation. It tells you what Personal Data we collect, why we need it, how we use it, and what protections are in place to keep it secure.
“We,” “us,” and “our” mean Adesokan & Ajayi LP.
“Adesokan & Ajayi Personnel” means Adesokan & Ajayi prospective, present and past partners, employees, consultants and agency staff, and people connected to such persons.
“Personal Data” means information about individuals (including you), and from which such individuals could be identified.
“You” means individuals whose Personal Data we process including, but not limited to Adesokan & Ajayi clients, Adesokan & Ajayi client personnel, counter-parties, counter-party personnel, other solicitors/advisors, witnesses, suppliers, supplier personnel, job applicants, and individuals to whom we send marketing communications. “You” does not include Adesokan & Ajayi Personnel.
Adesokan & Ajayi is the Data Controller in relation to your Personal Data and is committed to protecting the privacy rights of individuals, including your rights.
Adesokan & Ajayi is not required under the GDPR to appoint a Data Protection Officer and, following a detailed analysis, does not consider it appropriate to do so on a voluntary basis. It has, however, established a Data Protection Committee (DPC), which is responsible for overseeing Adesokan & Ajayi compliance with the applicable laws and any other applicable data protection legislation and regulation. In addition, our Compliance Officer for Legal Practice (COLP) oversees compliance with our professional responsibilities and with legislative requirements.
The DPC can be contacted at info@aalp-law.com or at 67c Kofo Abayomi street, Victoria Island, Lagos.
In some circumstances, we may obtain your Personal Data from you directly including through your use of this website or a job application but, more typically, we will obtain your Personal Data from a third-party source. For example, we may collect information from our clients/our clients’ personnel, agents and advisors, other law firms/advisors which represent you, the company for whom you work, other organisations/persons with whom you have dealings, government agencies, credit reporting agencies, recruitment agencies, information or service providers, and publicly available records.
If you provide information to us about someone else (such as one of your associates, directors or employees, or someone with whom you have business dealings) you must ensure that you are entitled to disclose that information to us and that, without our taking any further steps, we may process that information in accordance with this Notice.
We collect and use different types of Personal Data about you which will vary in type and detail depending on the circumstances and purpose of processing. Please consider the following illustrative and non-exhaustive examples:
We need to collect and use your Personal Data for a number of reasons, the primary purpose being to provide legal advice and services to our clients, and which may involve the use of your Personal Data in the following (non-exhaustive) ways:
We may also process your Personal Data for effective business management purposes which may involve the use of your Personal Data in the following (non-exhaustive) ways:
Under the applicable laws, Adesokan & Ajayi must identify a lawful basis for processing your Personal Data which may vary according to the type of Personal Data processed and the individual to whom it relates.
– Performance of a contract with you (where applicable):
Adesokan & Ajayi is entitled to process the Personal Data it requires in order to fulfil its obligations under its contract with you. This will be the relevant legal basis if you are an individual client or supplier/other individual with a direct contractual relationship with Adesokan & Ajayi.
– Legitimate interests of Adesokan & Ajayi or a third-party:
We process some of your Personal Data on the basis that it is in our legitimate interests and/or the legitimate interests of a third-party to do so. This will primarily concern the processing of Personal Data that is necessary to provide legal advice and services to our clients. Adesokan & Ajayi’s legitimate business interest in such instances is the proper performance of its function as an authorised and regulated provider of legal services. Adesokan & Ajayi’s clients also have a legitimate interest (and a more general right in law) in obtaining legal advice and services.
Adesokan & Ajayi’s broad interest in the provision of legal services as a basis for processing your Personal Data, and our clients’ corollary interest in the receipt of such services, can be broken down into more discreet categories which may include, but are not limited, to:
Adesokan & Ajayi may also process your Personal Data on the basis that it is necessary for its legitimate business interests in the effective management and running of Adesokan & Ajayi which may include, but is not limited to: engaging suppliers and supplier personnel; ensuring that its systems and premises are secure and running efficiently; for regulatory and legislative compliance, and related auditing and reporting; for insurance purposes; for recruitment/hiring purposes; for marketing purposes; and to facilitate, make, and receive payments.
Adesokan & Ajayi does not consider that the processing of your Personal Data, on the basis that it is within Adesokan & Ajayi’s legitimate interests (whatever such interests might be), is unwarranted because of any prejudicial effect on your rights and freedoms or your legitimate interests.
– Compliance with a legal obligation to which Adesokan & Ajayi is subject:
In certain circumstances, Adesokan & Ajayi must process your Personal Data in order to comply with its legal obligations. This might include, but is not limited to, Personal Data required: for tax and accounting purposes; for conflict checking purposes as required by the common law and Adesokan & Ajayi’s regulators; and for Adesokan & Ajayi to fulfil its compliance and other obligations under relevant legislation/regulation.
If Adesokan & Ajayi processes your criminal records Personal Data or special category Personal Data relating to your racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, health data, biometric data, or sexual orientation, we will obtain your explicit consent to those activities unless this is not required by law (because, for example, it is processed for the purpose of exercising or defending legal claims) or the information is required to protect your health in an emergency. Where we are processing Personal Data based on your consent, you have the right to withdraw that consent at any time.
We may use your contact details to send you marketing materials provided we are permitted to do so by law. You always have the right to unsubscribe from any marketing. You can do so by clicking on the relevant link in the next email we send you, or by contacting the DPC using the details provided.
We may disclose your Personal Data to third-parties (outside of Adesokan & Ajayi and Adesokan & Ajayi Personnel) if, but only when, we have a legal basis to do. Such recipients include but are not limited to: co-counsel, other solicitors/barristers/experts/foreign law firms whom we instruct on your behalf; Adesokan & Ajayi insurance brokers and underwriters; Adesokan & Ajayi bank, auditors, and accountants; Adesokan & Ajayi outsourced IT providers and other suppliers; tax authorities; our regulators and regulatory authorities; the other side/other parties on any given matter (lay and solicitor).
We have security arrangements in place to guard against unauthorised access, improper use, alteration, destruction, or accidental loss of your Personal Data. We take appropriate organisational and technical security measures and have rules and procedures in place to ensure that any Personal Data we hold is not accessed by anyone unauthorised to access it. We have in place, and abide by, a specific information security policy about the security standards used to protect your Personal Data.
In accordance with this Notice and the provisions of the applicable laws, we may transfer your Personal Data to organisations located in “third countries). In addition to the security arrangements mentioned above in relation to our engagement of third-party organisations, where such transfers are required we will ensure that your Personal Data is adequately protected, for example, by using a contract for the transfer which contains specific data protection provisions (“Model Clauses”) that have been adopted by the European Commission or a relevant data protection authority.
It is our policy to retain your Personal Data for the length of time required for the specific purposes for which it is processed by Adesokan & Ajayi and which are set out in this Notice. However, we may be obliged to keep your Personal Data for a longer period, for example, where required by our legal and regulatory obligations or in order to ensure we have effective back-up systems. In such cases, we will ensure that your Personal Data will continue to be treated in accordance with this Notice, restrict access to any archived Personal Data, and ensure that all Personal Data is held securely and kept confidential.
Applicable laws generally affords individuals a right to access their Personal Data, to object to the processing of their Personal Data, to rectify, to erase, to restrict, and to port their Personal Data. Please consult those laws.
If you are unhappy with the information provided in this Notice or have concerns about the way in which Adesokan & Ajayi processes your Personal Data, you may in the first instance contact the DPC.
