Privacy Policy – Application of GDPR to Personal Injury Claims Processing
Introduction
Justera places great importance on protecting the privacy of clients and other involved parties. In the context of representing interests in personal injury cases, we process personal data, including special and sensitive information. This privacy policy has been established in accordance with the General Data Protection Regulation (GDPR) and aims to handle personal data transparently and carefully.
Scope of this policy
This policy applies to all processing of personal data within Justera, with special attention to:
- Personal injury case files of clients;
- Correspondence with insurers, medical professionals, and other involved parties;
- Data processing for legal proceedings, damage calculations, and medical assessments.
Responsible party and contact details
Justera is responsible for the processing of personal data as described in this policy.
Contact details:
Name: Jessica Overtoom
Address: Beukenlaan 23 101D, 1701 DA Heerhugowaard
Email: j.overtoom@justise.nl
Phone: 072-8080262
Legal bases for data processing
Justera processes personal data exclusively on the basis of one or more of the following legal grounds:
- Execution of the agreement with the client;
- Compliance with a legal obligation;
- Legitimate interest (such as claiming damages);
- Consent of the data subject (e.g., for medical information).
Categories of personal data
Depending on the nature of the personal injury case, Justera processes the following data, among others:
- General information: name, address, phone number, email, date of birth;
- Medical data: medical files, treatment reports, psychological assessments (only with consent);
- Financial data: income information, damage calculations, claims;
- Legal information: legal documents, liability claims, expert reports.
Purposes of processing
Personal data is processed for the purpose of:
- Representing clients’ interests in personal injury cases;
- Establishing liability and recovering damages;
- Conducting legal proceedings;
- Providing reports to clients;
- Complying with administrative and legal obligations (such as file creation).
Sharing data with third parties
Personal data is only shared with third parties when necessary for the execution of the agreement or to comply with legal obligations.
These may include:
- Medical advisors;
- Insurers and opposing parties;
- Bailiffs, lawyers, and courts;
- External experts or claims adjusters;
- Accountants or tax advisors.
Justera enters into data processing agreements with external processors in accordance with Article 28 GDPR.
Data security
Justera implements appropriate technical and organizational measures to protect personal data against loss or unlawful processing. Examples of these measures include:
- Encrypted storage and transmission of files;
- Limited access to files based on functions and roles (need-to-know basis);
- Regular review of access rights;
- Training and awareness of employees regarding privacy protection.
Retention periods
Files and personal data are retained by Justera as long as necessary for handling the personal injury case and in accordance with statutory retention periods. As a rule, Justera maintains a retention period of 10 years, unless a longer period is required.
Rights of data subjects
Clients and data subjects have the following rights:
- Right of access;
- Right to rectification;
- Right to erasure (to the extent legally permitted);
- Right to restriction of processing;
- Right to data portability;
- Right to object.
Requests to exercise these rights can be directed to the privacy contact person via j.overtoom@justise.nl
Supervision and complaints
Justera maintains internal oversight on compliance with this policy. Complaints about the processing of personal data can be submitted to the internal privacy officer via [email address] or directly to the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl.
Changes to this policy
Justera reserves the right to modify this privacy policy. In case of substantial changes, this will be actively communicated to clients via email, mail, or through our website.
Established on May 1, 2025.
On behalf of Justera,
Jessica Overtoom – Director