Jus Mundi’s ambition is to make international law and arbitration more transparent and accessible around the world. Transparency and accessibility are at the heart of our approach, as are the respect for confidentiality and the protection of our user’s personal data while using our website www.jusmundi.com and services.
As an addition to our Terms of Use and Terms of Subscription, this Privacy Charter contains all the information regarding our personal data protection policy, as well as the rights inherent to your personal data.
1. Definitions
“Jus Mundi” or “we” – a simplified joint-stock company incorporated under French law, registered with the Paris Company Register under the number 834 491 474. Jus Mundi’s head office is located at 10 rue de Penthièvre 75008 Paris, France.
“User” or “you” – any and all natural persons using our website and our services, acting on his/her own behalf or on behalf their company, including our subscribers and persons who are partaking in our Free Trial. For clarity, this definition extends to any and all persons who visit and/or use our Website.
“Website” – our Website, accessible at www.jusmundi.com, mirror site(s), and related websites (e.g. the Jus Mundi blog).
2. Who is Controlling the Processing of the Data we Collect?
Controller refers to the natural or legal person who, alone or jointly, collects personal data and determines the purposes and means of the data processing. Jus Mundi controls the processing of your personal data, which is collected in the course of you navigating our Website and using our services.
If the personal data processed concerns third parties, you undertake to obtain the prior consent of the third party concerned and to further inform him/her of the existence and content of the present Charter, particularly of the rights he/she has regarding his/her personal data in accordance with Article 8 of this Charter.
3. What is the Law on Processing Personal Data?
We collect and process personal data only on a legal basis, in accordance with the EU Regulation (EU) 2016/679 on the General Data Protection (“GDPR”).
In accordance with the GDPR, we collect and process personal data as follows:
- With your consent to process your data for specific purposes;
- To execute a contract to which you are a party;
- In meeting our legitimate interest in informing the public, by re-using information from the public domain and offering our services; and
- In the course of complying with our legal obligations.
The processing of personal data is thus carried out for the following purposes:
- Proper execution of the subscriptions that you have voluntarily taken out;
- Pursuit of our legitimate interest; and
- Compliance with our legal obligations.
4. What Personal Data is Processed by Jus Mundi, How do we Collect it, and for What Purpose?
A. Data Processing regarding any and all Visitors to our Website
When you visit our Website at www.jusmundi.com and use our services, by default your web browser sends us a set of information that we collect automatically. This information includes:
- Your IP address;
- Information on the device you are using (e.g. computer, smartphone, etc.), as well as information on your operating system, such as the type and version (e.g. Windows, Mac, Android, etc.);
- The Internet browser you used, as well as its version and language;
- The time of your visit;
- The pages you visited on our Website;
- Your location; and
- The website that redirected you to our Website.
This information is analysed and used to measure the audience of our Website. It is also essential for improving the user experience (e.g., site accessibility, data security, personalisation, etc.).
The information is automatically collected and stored by our hosting provider, OVH Cloud, in compliance with its Personal Data Protection Policy, which can be consulted at the following address: https://www.ovh.com/fr/files/2018-06/plaquette-gdpr-web-Final-French.pdf. It is archived after 12 months and destroyed five years after it has been archived.
The purpose of identifying your location is to best process your requests and questions via our online chat. We collect data regarding your location only to know your time zone, which allows us to provide the fastest possible response to your requests and questions. The information is automatically collected and stored by our provider in compliance with the GDPR.
We also collect your personal data when you voluntarily contact us through the various channels present on our Website, including the contact form, the request for a demonstration, and the request for a subscription or a Free Trial, etc. This data allows us to process your request and to answer you as soon as possible. The information thus collected is archived and kept until you exercise your right to erasure and/or object, and for a maximum of three years.
B. Processing the data of our customers, prospects, and Jus Mundi account holders
1. Customers and Account holders’ management
By default, your researches on Jus Mundi are completely anonymous such that no one can know them. This anonymised data is recorded and analysed for improvement of our services. You can opt out of this anonymization to benefit from some of the personalization features associated with your individual account. In this case, we will replace the anonymization of your research data with a secure encryption of this data.
Regarding the processing of customer data and data of Jus Mundi account holders, you agree to voluntarily provide us with the following information during the creation of your account:
- First and last name;
- Your professional or personal contact information (e-mail address and phone number);
- Your nationality;
- Your profession;
- The location of your profession;
- The name and size of your organization;
- Your credentials;
- Your banking information and chosen payment method; and
- Information about the beneficiaries of your subscription, including their first name, last name and the professional e-mail address.
The above information allows us to process your request and to ensure the proper execution of your contract.
Your subscription provides for a limited number of simultaneous users and IP addresses authorized to use Jus Mundi’s paid features. The authorized users (i.e. your beneficiaries) are granted a personal and non-transferable license for the duration of the subscription. As mentioned at paragraph A of the Article 4 above, your IP address and the IP addresses of your authorised beneficiaries are automatically communicated to Jus Mundi. Jus Mundi may therefore use such IP addresses to ensure that your account is not exploited by unauthorised third parties who have not subscribed to our services.
Regarding your beneficiaries’ personal data, you undertake to obtain their prior consent to collect their personal data and to inform them of the existence and content of this Charter, particularly their rights to their data in accordance with Article 8 of this Charter.
Depending on your selected payment method, your payment information is transferred to a secure payment service provider under the conditions set out in Article 5 of this Charter.
The aforementioned information is archived and kept for a period of five years from the termination of your contract with Jus Mundi. In order to comply with our accounting obligations, supporting documents (purchase orders, invoices, etc.) are kept for a period of ten years.
2. Commercial purposes
We may use your personal data, which you voluntarily provided us with in the course of creating your account and/or taking out a subscription, for commercial purposes. This information is obtained either directly from you when creating your account or taking out our subscription, or during our communication (e.g. telephone, e-mail, etc.), when you request a service, such as a subscription, a Free Trial or a demonstration.
With respect to prospects, we may collect your data through information publicly available on your website or your Linkedin profile for commercial purposes. You may object to the processing of such data for commercial purposes at any time, in accordance with the paragraph G of the Article 8 below. Your personal data will be kept for 3 years after your last solicitation for exchange. We collect and process your personal data in accordance with our legitimate interest in offering you our content and services.
C. Data processing as referenced in courts decisions and arbitral awards
The surnames and addresses of parties or witnesses appearing in court decisions can be pseudonymized.
If your personal data in the decisions accessible on our Website have not been pseudonymized, you may request their pseudonymization as set out at Article 10 of this Charter.
D. Data processing regarding judges, arbitrators and lawyers
Jus Mundi aims to facilitate access to international law and arbitration, and to further provide Users with the means to effectively conduct international legal research. To do so, we offer to filter a search by international arbitrators/judges, lawyers/counsels or law firms, allowing users to obtain a set of personal information in the desired areas. We also offer our clients tools such as Arbitrators Analytics and Conflict Checker, which displays an aggregation of data concerning the persons (e.g. list of cases to which they have been a party, the type of case, role, etc.).
We collect and process personal data to meet our legitimate interest in informing the public. In accordance with Article 14.5 of the GDPR, prior consultation of every lawyer, judge or arbitrator would render impossible or seriously impair the achievement of our data processing. Therefore, we undertake to protect data subjects’ rights and freedoms and legitimate interests by publishing this Charter, wherein we provide information on how we process personal data.
Data subjects impacted by our data processing function (i.e. lawyers, judges or arbitrators) may request the pseudonymisation of their data, under the conditions set out at Article 10 of this Charter. However, Jus Mundi reserves the right to deny such a request.
5. Is your Personal Data transferred to Third Parties, in France or Abroad?
The personal data that we process as set out in Article 4 above is collected and processed solely for our own purposes and are not, under any circumstances, sold to third parties.
The personal data is transferred only to service providers with whom we collaborate to carry out our day-to-day business and with whom we have concluded a personal data processing contract. These service providers are located in France and abroad (both within and outside the EU). In terms of service providers located outside the EU, we have duly verified that their policies ensure an effective and efficient level of confidentiality and protection of personal data during transfers.
6. Our Cookies Policy
We use cookies and trackers in order to measure the audience of our Website and for the sole purpose of continuously improving the user experience (e.g. site accessibility, data security, personalization, etc.)
Cookies are temporary text files stored directly on your device (e.g. on your computer or smartphone). They allow us to collect various information, including technical information, information relating to your browser (search engine, connection time, pages visited, etc.), or information relating to your browsing preferences.
The data collected and processed by us in this way will not, under any circumstances, be sold to third parties or processed for advertising purposes. It is kept for a period of 13 months.
7. Measures taken to Secure your Personal Data
Jus Mundi takes all necessary security measures to ensure the confidentiality and protection of your personal data during processing.
Your research is secured. It is encrypted before being transferred to our servers, thanks to the HTTPS-TLS 1.2 encryption protocol and the AES 256 encryption algorithm. Our servers are secured and hosted in Gravelines, France, by our provider OVH Cloud which complies with international personal data security standards. Your login details are highly secured. Your passwords are hashed, which means that they are encrypted by an algorithm that will propose an irreversible fingerprint. It will then be impossible to decrypt it.
Finally, Jus Mundi has implemented a series of technical and organizational measures to ensure this security. Only a limited and defined number of people have access to your data and for the rest, this data is randomized or deleted.
8. What Rights do you have to your Personal Data?
In accordance with the GDPR, you have rights to the data that we automatically collect from you when you use our Website and services.
These rights include:
- Right of access to your personal data;
- Right to rectification of your personal data;
- Right to erasure (‘right to be forgotten) of your personal data;
- Right to restriction of processing;
- Right to withdraw the consent;
- Right to data portability;
- Right to object; and
- Right of referral to the CNIL or legal action.
A. Right of access to your personal data (Article 15 of GDPR)
You may contact us in order to find out what personal data is processed by Jus Mundi and to check its content.
We will provide you with a copy of all of your personal data that is processed. Specifically, we will provide you with the following information:
- Categories of personal data collected;
- Purposes of using your personal data;
- Categories of recipients who were able to access such data;
- Envisaged period for which the personal data will be stored; and
- Possible transfer of your data to a third (non-EU) country or to an international organisation.
B. Right to rectification of your personal data (Article 16 of GDPR)
You may request the rectification of inaccurate, incomplete or obsolete personal data.
C. Right to erasure (‘right to be forgotten) of your personal data (Article 17 of GDPR)
You can request the erasure of your personal data without undue delay if one of the following grounds applies:
- the personal data is no longer necessary in relation to the purposes for which they were initially collected or processed;
- you withdraw your consent to the processing of your personal data;
- your personal data have been unlawfully processed (e.g. publication of pirated data);
- your data was collected when you were a minor;
- your personal data have to be erased for compliance with a legal obligation;
- your object to the processing of your personal data has no overriding legitimate grounds for us not to comply with this request.
D. Right to restriction of processing (Article 18 of GDPR)
You may request the restriction of processing of your personal data if one of the following grounds applies:
- you contest the accuracy of certain data during the verification of the data;
- the processing of personal data is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
- when, even if we no longer need to process your personal data, the data is necessary for the establishment, exercise or defence of legal claims; or
- when you have exercised your right to object to us processing your personal data, pending our verification of legitimate grounds authorizing us to continue processing your personal data.
E. Right to withdraw the consent (Article 7 of GDPR)
Where the processing of data is based on your prior consent, you may withdraw your consent at any time without giving any reason.
F. Right to data portability (Article 20 of GDPR)
You can receive your personal data (which you have voluntarily transmitted to us) in a structured and machine-readable format, for your personal use or in order to pass it on to a third party.
G. Right to object (Article 21 of GDPR)
Subject to a legitimate reason relating to the particular nature of your situation, you may object to the processing of your personal data on the basis of necessity for the performance of a task carried out in the public interest or in pursuit of a legitimate interest.
We may deny your objection if we can prove that there are compelling legitimate grounds for processing your data which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
This prior justification is not opposable to you when the right to object relates to the marketing purposes.
H. Right of referral to the CNIL or legal action (Article 12 of GDPR)
In the event of a dispute relating to the processing of your personal data, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or file a claim to the competent court.
9. How to exercise your rights
You may exercise your rights as set forth in Article 8 above, or ask any questions you may have regarding this Charter, by emailing us at the following e-mail address: contact@jusmundi.com. In accordance with Article 12 of the GDPR, we will respond to your request as soon as possible and no later than one month of receipt of the request.
Any request to exercise your rights to your personal data must be accompanied by a valid document proving your identity, otherwise your request will not be processed.
10. How to Request the Pseudonymisation of a Court Decision
The surnames and addresses of parties or witnesses appearing in the decisions of French courts may be pseudonymised. You can send us your request for pseudonymisation by completing the following form: https://jusmundi.typeform.com/to/u4ItTX. We undertake to process your request as soon as possible.
As provided for in paragraph D of the Article 4 of this Charter, this pseudonymisation does not apply to professionals (i.e. magistrates or members of courts, arbitrators, secretaries and assistants, court officials, experts and lawyers). You may however submit your request by completing the following form: https://jusmundi.typeform.com/to/u4ItTX. When processing each pseudonymisation request, we strive to balance the public nature of a court decision and the rights and freedoms of the persons concerned. If the decision is published by a public institution, we may redirect you to that institution.
Your request must be accompanied by a valid document proving your identity or, if the request is made on behalf of a third party, proving the identity of the third party involved.
11. Privacy Charter Updates
In order to comply with changes in the law, technology or Jus Mundi’s business, this Privacy Charter may be modified at any time. Any modification will be subject to information on the Website by means of an information banner placed for a period of thirty (30) days before the entry into force. The use of our Website and services at a date later than the date of the update(s) constitutes your acceptance of our changes to the Privacy Charter. If you do not accept the changes, you can contact us on contact@jusmundi.com.
12. Entry into Force
The present Charter have entered into force on 23 April 2020 for new users, and on 23 May 2020 for users who already had an account before that date.
