Privacy Policy
PRIVACY POLICY LAST UPDATED: April 22, 2026
Justus K Attorneys Ltd is committed to protecting your privacy. This Privacy Policy explains how we collect, use and disclose personal data when you visit our website or otherwise interact with us.
Data Controller
The controller of your personal data is:
Justus K Attorneys Ltd
2394908-3
Pohjoisesplanadi 19, 00100 Helsinki, Finland
For questions concerning this Privacy Policy or the processing of personal data, you may contact us at:
Email: justus.konkkola@justusk.fi
Telephone: +358 50 541 0231
Personal Data We Collect
We collect and process personal data that is necessary for the operation of our legal practice and for communicating with website users and contacts. Such personal data may include identification and contact details, such as your name, email address, telephone number, employer and professional position. We may also process client due diligence and background information required under applicable legislation, including anti‑money laundering law. In addition, we process personal data contained in correspondence, documents and other materials related to legal assignments, as well as technical and usage data related to website use, such as IP addresses, browser type, device information and usage patterns. Any other information that you voluntarily provide to us may also be processed.
Sources of Personal Data
We primarily collect personal data directly from you when you contact us, engage our services, communicate with us or visit our website. We may also receive personal data from public sources, such as public registers, as well as from counterparties, authorities or other third parties acting on your behalf in connection with legal matters.
Purpose of Processing
We process personal data for the purpose of providing legal services, managing and developing client relationships and handling assignments in accordance with applicable laws and professional obligations. Personal data is also processed to comply with legal and regulatory requirements, to communicate with clients, contacts and other stakeholders and, where permitted, to send newsletters, invitations or other informational or marketing communications. In addition, we process personal data to maintain, secure and develop our website and IT systems, as well as for recruitment purposes where applicable.
Legal Basis for Processing
When we process your personal data for the purposes stated in this privacy notice, we process your data either with your consent or to fulfill our legitimate interests related to our business relationship. Certain processing may also be based on compliance with our statutory obligations as a law firm.
Transfer of Client Register Data
Primarily, we do not disclose your personal data to a third party. If the legislation or an official obligation on us requires the disclosure of data, we will examine the request on a case-by-case basis to assess the legality of the transfer of data. In certain situations, we may also transfer your data to a third party or another data controller if we have separately agreed on that with you.
We have entered into agreements with certain service providers who, as part of the service they offer, can process your personal data on our behalf. In these situations, we have made appropriate agreements with service providers and have thus ensured the appropriate processing of personal data also in these situations.
As a rule, personal data is not transferred outside the EU or the EEA. If data is transferred outside the EU or the EEA, the transfer is carried out in accordance with data protection legislation and within the limits set by it.
General principles of personal data protection
We use various technical and organizational methods and protection measures to ensure adequate information security. Only those members of our staff who have to process your personal data for the aforementioned purposes have access to your personal data.
Data Retention
Personal data is retained only for as long as it is necessary for the purposes for which it was collected and processed, or as required by applicable law, regulatory obligations or professional duties. We store your personal data as long as it is necessary for our operations and as we are required by the legislation and the instructions of the Finnish Bar Association. Storage times may vary between different types of data.
Your Rights
Subject to applicable law, you have the right to receive information about the processing of your personal data and the right to access your personal data. You have the right to request the rectification of inaccurate or incomplete personal data and, in certain circumstances, the right to request the erasure of personal data. You may also have the right to restrict or object to the processing of your personal data, as well as the right to data portability where processing is based on consent or contract. Where processing is based on consent, you have the right to withdraw your consent at any time.
You have the right to lodge a complaint with the competent supervisory authority if you believe that your personal data has been processed in violation of applicable data protection legislation. In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be published on this page and will take effect upon publication.
