Privacy Policy

1. Data Controller and Contact Person

Justus Law Oy (3286330-2), trading under the business name Costa Juridica

Jassi Saurio
Tel.: 044 766 1206
E-mail: jassi.saurio@costajuridica.fi

2. Purpose and Legal Basis of Processing Personal Data

Costa Juridica processes the personal data of its clients for the following purposes:

to manage assignments and client relationships,
to identify and know the client,
to check for potential conflicts of interest,
for business planning and development, and
for marketing purposes.

The legal basis for processing personal data depends on the purpose and may be:

the engagement of a agreement with the client,
compliance with legal obligations, or
the legitimate interests of the data controller.

3. Categories of Personal Data Processed

The personal data processed may include the following:

basic personal information (name, personal ID number, date of birth, contact details),
title or position within an organization,
political influence held by the individual,
information about opposing parties and their representatives,
documents and information provided by the data subject or obtained to manage the assignment,
additional information provided by the data subject related to the assignment,
actions taken,
title of the assignment, and
consents or objections to direct marketing.

4. Sources of Personal Data

Personal data primarily comes from the client or their representative. Clients may also submit data via the contact form on our website or by participating in events organized by Costa Juridica. Personal data may also be collected from opposing parties, their representatives, public registers, or authorities.

5. Recipients of Personal Data

Personal data may be disclosed to third parties if necessary for handling the assignment and agreed with the client. Disclosure may also be required by law. Examples include sharing information with the court handling the matter, the opposing party, or an insurance company.

Costa Juridica uses third-party service providers for certain functions, such as IT and accounting services. In such cases, transferring personal data to the service provider may be necessary to provide our services properly. Data processing by our service providers is governed by applicable data protection laws.

6. Transfers of Personal Data Outside the EU/EEA

Personal data is primarily processed and stored within the EU/EEA.

If data is processed by a service provider located outside the EU/EEA in a country without an Adequacy Decision from the European Commission, appropriate EU GDPR transfer mechanisms will be agreed with the service provider.

7. Rights of the Data Subject

Individuals whose data Costa Juridica processes as a data controller have the following rights, depending on the processing situation:

Right of access to personal data
Right to correct inaccurate data
Right to delete personal data
Right to restrict processing
Right to object to processing
Right to data portability

The processing of personal data does not include automated decision-making or profiling as defined in the EU General Data Protection Regulation (GDPR).

If you have contacted Costa Juridica regarding the protection of personal data and are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority.

8. Retention Period

Your personal data will be retained only as long as necessary to carry out the activities described in this privacy notice. After that, data will be deleted or archived in accordance with data protection legislation.