Last updated: June 2026
Privacy Notice
Introduction
This privacy notice describes how personal data is processed when you use ISKA, a court scheduling and resource management platform for European courts. ISKA is operated under the domain aresplan.com.
This notice is provided in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.
Data controller
The data controller for the ISKA platform is the natural person operating the service. The name aresplan.com is a domain name only; it does not refer to a registered company or trade name.
Contact the data controller by email at feedback@aresplan.com. A postal address is available on request by email.
Customer organisations
Courts and other organisations that use ISKA may act as independent data controllers for scheduling, roster, and case-related data they enter into the service. In those cases, the organisation's own privacy information applies to that processing, and ISKA processes data on the organisation's instructions as a processor where applicable.
Purposes and legal bases
We process personal data for the following purposes and on the following legal bases under Article 6 GDPR:
- Providing and operating the ISKA service, user accounts, and support — performance of a contract or steps prior to entering a contract (Art. 6(1)(b))
- Securing the platform, preventing abuse, and maintaining logs — legitimate interests in protecting the service (Art. 6(1)(f))
- Sending service-related communications — performance of a contract or legitimate interests (Art. 6(1)(b)/(f))
- Complying with legal obligations — legal obligation (Art. 6(1)(c))
- Optional marketing or analytics where used — consent, where required (Art. 6(1)(a))
Categories of personal data
Depending on how you use ISKA, we may process:
- Identity and contact data (name, email address, organisation)
- Account and authentication data (username, password hashes, MFA settings, session tokens)
- Professional data entered by your organisation (e.g. judge or prosecutor roster details, duties, blockers, bookings)
- Usage and technical data (IP address, browser type, device information, audit and access logs)
- Support and correspondence content
Sources of data
Personal data is collected directly from you when you register or contact us, from your organisation when it provisions your account, automatically when you use the service, and from infrastructure providers that deliver hosting and security functions.
Recipients and disclosures
We do not sell personal data. Data may be disclosed to:
- Infrastructure and hosting providers that help operate ISKA under data processing agreements
- Organisations that have invited you to use ISKA, within the scope of their deployment
- Professional advisers or authorities when required by law
- Other parties only with your consent or on another lawful basis
International transfers
We aim to process and store personal data within the European Economic Area. If data is transferred outside the EEA, we use appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision, as required by Chapter V GDPR.
Retention
We retain personal data only as long as necessary for the purposes described in this notice, to comply with legal obligations, or to establish, exercise, or defend legal claims.
Account data is kept while your account is active and for a limited period afterwards unless a longer retention period is required by law or contract with your organisation. Technical logs are retained for security and troubleshooting for a defined period and then deleted or anonymised.
Your rights
Under GDPR you have the right to access, rectify, erase, restrict processing, object to processing based on legitimate interests, and data portability where applicable. Where processing is based on consent, you may withdraw consent at any time.
To exercise your rights, contact feedback@aresplan.com. We respond within one month unless the request is complex. You also have the right to lodge a complaint with a supervisory authority.
Changes to this notice
We may update this privacy notice from time to time. Material changes will be published on this page with an updated date. If a registered company or trade name is established for the service, the data controller details in this notice will be updated accordingly.
Email: feedback@aresplan.com