Privacy statement (EN)
Privacy Statement – Bronsgeest Deur Advocaten N.V.
- Introduction
Bronsgeest Deur Advocaten N.V. is an independent law firm based in Amsterdam. We strive to provide the best legal services in a personal, dedicated and transparent manner. We process personal data in the context of our services. We also process personal data when you visit our website (www.bd-advocaten.nl). This privacy statement informs you about how we handle your personal data, what data we collect, why and how we process it, how we secure it, and what rights you have with regard to your personal data.
Bronsgeest Deur Advocaten N.V. acts as the controller for the processing of your personal data as referred to in the General Data Protection Regulation (GDPR). For privacy-related questions, please contact us using the contact details below:
Bronsgeest Deur Advocaten N.V.
Address: IJdok 29, 1013 MM Amsterdam
Email: p.nabben@bd-advocaten.nl
This Privacy Statement explains:
- What personal data we process;
- On what basis and for what purposes we process your personal data;
- To whom we disclose your personal data;
- How long we retain your personal data;
- How we protect your personal data;
- What your privacy rights are;
- How you can submit a privacy complaint;
- How we deal with changes to this Privacy Statement.
2. What personal data do we process?
We process various categories of personal data from (contact persons of) our clients, suppliers, job applicants and other parties involved, depending on the nature of the services and interaction with our firm.
Personal data of (potential) clients:
- Data for the handling of cases or the settlement of disputes, including personal data of the other party and third parties relevant to the case, such as name, address, telephone number, email, etc.;
- Data for calculating and recording fees and expenses, such as bank account numbers;
- Data from public sources, such as the Trade Register, the Chamber of Commerce and the Land Registry;
- Data necessary to comply with laws and regulations, such as the Money Laundering and Terrorist Financing (Prevention) Act (WWFT), for example identification data and data from an identity document.
Personal data of suppliers:
- Name and address details (name, address, telephone number, email address, etc.);
- Data relating to orders and the purchase of services;
- Data for calculating and recording payments and expenses, such as bank account numbers;
- Data necessary for compliance with laws and regulations, such as a certificate of good conduct or data relating to identity documents.
Personal data of job applicants:
- Name and address details (name, address, email, telephone number);
- CV, cover letter, work experience, education and references;
- Data about the position for which you are applying;
- Bank account number and travel expenses (if relevant);
- Data concerning nationality and date of birth.
Personal data of third parties:
- Name and address details and other contact information of third parties that appear in our files, such as counterparties, referrers, other lawyers and advisors, and visitors to our website;
- Information relating to your visit to www.bd-advocaten.nl, such as browsing behaviour, IP address and cookie settings.
Information collected via our newsletter or invitations:
- Email address, name, job title and company name;
- Information about opening the newsletter or invitation, such as the time, location and operating system used.
3. On what basis and for what purposes do we process your personal data?
We process your personal data on the basis of one or more of the following legal grounds:
- Necessary for the performance of a contract: We process your personal data in order to provide the services you have requested from us, such as legal assistance or payment processing.
- Necessary for compliance with a legal obligation: We process personal data if this is required by law or regulation, such as the obligation to verify identity data in the context of the WWFT (Money Laundering and Terrorist Financing Prevention Act).
- Necessary for the representation of legitimate interests: In certain cases, we process personal data on the basis of our legitimate interest, for example to improve our services or optimise our administrative processes.
- With your consent: When we process personal data on the basis of your consent, we will ask for your consent in advance. You always have the right to withdraw your consent.
Purposes of the processing of personal data:
- Providing legal services, including client identification, performing a conflict of interest check and complying with the rules of conduct for lawyers;
- Handling complaints and disputes relating to our services;
- Maintaining contact with clients and other parties involved, including communication about marketing, relationship management and business development (such as invitations to events, newsletters and other communications);
- Processing job applications and managing applicant data;
- Placing orders and purchasing services;
- Carrying out internal checks and complying with legal obligations (e.g. for tax purposes);
Providing access to our office and ensuring business security.
4.How long do we retain your personal data?
We do not disclose your personal data to third parties unless this is necessary for the purposes described in this privacy statement, when this is required by law or when you have given your consent.
Third parties to whom we may disclose your personal data:
- Employees of Bronsgeest Deur Advocaten;
- Suppliers such as software suppliers, translation agencies, courier services, bailiffs, and our newsletter distributor;
- Counterparties, other lawyers, notaries, accountants or advisors in the context of our services;
- Government institutions such as courts or supervisory authorities, if required by law;
- Other parties with whom we are required to share data on the basis of legislation or regulations.
Transfer of personal data outside the EU: In some cases, it may be necessary to transfer personal data to recipients outside the European Economic Area (EEA). In such cases, we ensure that the transfer of personal data complies with applicable legislation and that appropriate safeguards are in place to ensure an adequate level of protection, for example by entering into standard contractual clauses approved by the European Commission.
- How long do we retain your personal data?
We do not retain your personal data for longer than is necessary for the purposes for which it was collected. Specifically, we apply the following retention periods:
- Files of cases handled: These are retained in accordance with the Archiving Manual of the Dutch Bar Association for a minimum of 5 and a maximum of 20 years.
- Accounting data: Data relating to tax obligations are retained for 7 years.
- Visitor registration: Visitor data are retained for 6 months.
- Job applicant data: Data is retained for 4 weeks after the application procedure. With permission, this data may be retained for up to 1 year for future vacancies.
- Complaints: Data relating to complaints is retained until the complaint has been dealt with and the legal proceedings have been completed, for a maximum of 2 years.
6. Security of personal data
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and other risks. Our employees only have access to personal data when this is necessary for their work and are obliged to guarantee confidentiality.
- What are your privacy rights?
As a data subject, you have various rights with regard to the processing of your personal data:
- Right of access: You can request access to the personal data we process about you.
- Right to rectification: You can request that incorrect or incomplete personal data be corrected.
- Right to erasure (right to be forgotten): You can request the deletion of your personal data, unless we are obliged to retain it.
- Right to object: You can object to the processing of your personal data or restrict its processing.
- Right to withdraw consent: If we process your personal data on the basis of consent, you can withdraw this consent at any time.
- Right to data portability: You can receive your personal data in a structured, commonly used and machine-readable format and transfer it to another party.
To exercise your rights, please contact us using the contact details above.
8.Where can you go with complaints?
If you have a complaint about the processing of your personal data, please contact us first. If we cannot resolve the issue together, you can submit a complaint to the Data Protection Authority (http://www.autoriteitpersoonsgegevens.nl/).
9. Can we make changes to this Privacy Statement?
Bronsgeest Deur Advocaten reserves the right to change this Privacy Statement. We will publish the most recent version of the Privacy Statement on our website. In the event of substantial changes, we will endeavour to inform you immediately.
10. Cookie statement
Our website uses cookies to improve your experience and collect statistical data via Google Analytics. Cookies help us understand how the website is used. You can manage cookies via your browser settings.
More information about cookies and how to delete them can be found in our Cookie Statement on the website.
If you have any questions, please feel free to contact us on 020-3053333.