Privacy statement
Justena Law is responsible for the processing of personal data described in this statement. Justena Law is the sole proprietorship of A. Azhar, established in Utrecht and registered with the Netherlands Chamber of Commerce under number 97998958. Postal address: Kwikstaartlaan 42, 3704 GS Zeist, the Netherlands. E-mail: info@justenalaw.nl. Telephone and WhatsApp: +31 6 11 61 02 90.
1. Whose data we process and why
Website visitors. When you visit justenalaw.nl, our hosting provider Wix processes technical data such as your IP address, your browser and the pages you open, to deliver and secure the website. Cookies other than those strictly necessary are placed only with your consent. You give or refuse that consent in the cookie banner. You can withdraw it at any time by deleting this site’s cookies and site data in your browser, after which the banner appears again.
People who contact us. When you write, call, send a WhatsApp message or use the contact form, we process your name, contact details and the description of your question to answer you and to assess whether we can help. The legal basis is the steps you ask us to take before a possible engagement (article 6(1)(b) GDPR).
Clients. To handle a matter we process identification and contact details, the facts and documents of the matter, financial data for fees and invoicing, and correspondence. The legal basis is the performance of the engagement (article 6(1)(b) GDPR) and, for our accounts and for client due diligence where the law requires it (article 11 of our general terms), our legal obligations (article 6(1)(c) GDPR).
Other people in a file. A matter often contains data about others, such as an employer, a civil servant, a landlord or family members. We process those data only as far as the matter requires, on the basis of our client’s legitimate interest in legal advice and in enforcing their rights (article 6(1)(f) GDPR).
2. Sensitive data
A legal matter can involve data about health, criminal convictions and offences, or other special categories. We process such data only where necessary to establish, exercise or defend a legal claim (article 9(2)(f) GDPR and article 32(d) of the Dutch GDPR Implementation Act, UAVG) or with your explicit consent. We do not need your citizen service number (BSN). Where it appears on a document you send, please black it out unless the document must be submitted to an authority in full; we do not use the number ourselves (article 46 UAVG).
3. Who receives data
We share data with third parties only as far as your matter or our work requires: the authority, court or counterparty involved, an attorney or expert we engage with your agreement, and translators. Service providers process data on our behalf, among them Wix (website and contact form) and Google (e-mail). If you contact us through WhatsApp, WhatsApp (Meta Platforms Ireland Ltd.) also processes your data under its own privacy policy. Where a provider processes data outside the European Economic Area, it does so on the basis of an adequacy decision of the European Commission or standard contractual clauses (articles 45 and 46 GDPR). We do not sell personal data.
4. How long we keep data
Enquiries that do not lead to an engagement: four weeks after the last contact.
Client files: at least five years after the matter is closed, as stated in article 13 of our general terms, and longer where a statutory period or the nature of the matter requires it.
Financial records: seven years, as required by article 52 of the General State Taxes Act (Algemene wet inzake rijksbelastingen).
5. Security
We take appropriate technical and organisational measures to protect personal data (article 32 GDPR), including encrypted connections and access restricted to Justena Law.
6. Your rights
You may ask for access to your data, correction, deletion, restriction of processing and data portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time. Write to info@justenalaw.nl; we answer within one month (article 12(3) GDPR). The rights of people other than our client may be limited where necessary to protect our client’s rights (article 41 UAVG). You may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Changes
Changes to this statement are published on this page. Version 1, October 2026.
