In this privacy policy, I tell you which of your personal data I process and why I process these personal data.

 

If you have questions about this privacy policy, please contact:
 

Ruby Nefkens Legal

Attn. Ruby Nefkens
Vijzelstraat 68
1017 HL  Amsterdam
The Netherlands
 

Tel: 0031 6 43 36 80 63

Ruby@nefkenslegal.nl
Chamber of commerce no. 89617509

 

Introduction

In this privacy policy, I state the purposes of processing your personal data, the bases on which I process them, the retention period of your data, whether I transfer your personal data to third parties, and your rights relating to your personal data.

 

Purposes of data processing
I process your personal data for the following purposes:
 

• to perform services

• to send information, such as newsletters or invitations and details of other events I organise

• to fulfil my legal obligations
   

The personal data I process are used only for the above purposes and I do not process more personal data than necessary.

 

Bases for data processing
I may process your personal data on the grounds of:
 

• your consent

• preparing and performing an agreement with you

• a legal obligation that is imposed on me

• my legitimate interests.
   

Consent

If I process your personal data based on your consent, for example your consent to receive my newsletters, you can withdraw this consent at any time.

 

Preparing and performing an agreement with you

Processing your personal data is a necessary condition for entering into and performing an agreement with you. I can then provide my services only if you provide me with the necessary personal data.

 

Legal obligation

I may have a legal obligation to process your personal data, such as under tax legislation.

As I am regularly involved in dispute resolution and litigation, I may process not only your personal data, but also data from other parties, such as the opposing party. This is necessary for me to perform my work.

 

Legitimate interests

I have several legitimate interests based on which I process personal data:
 

• Client relationship management

• Optimising my website and how I provide my services

• Recruitment and selection
   

For example, I can send you information that I think is relevant to your case or your business.

I can use your personal data to evaluate and improve my services.

I create case files when I perform my work and I archive those files after the case is closed.

I can also process personal data when recruiting and selecting employees.

 

Retention period for personal data
I will not retain your personal data longer than is necessary for the purposes set out in this privacy policy.

If the basis for processing your personal data is consent, I will retain your personal data until you withdraw your consent.

I will not retain the personal data you provide to me for preparing and entering into an agreement with you for longer than ten years after the end of the last service I provide to you.

 

If I process personal data on the basis of a legal obligation, I apply the retention period specified in that law.

I retain case files and the personal data they contain for seven years.

If I obtain personal data through using cookies, I do not keep these data longer than is necessary for that purpose. The maximum period is two years.

I delete personal data from my backup systems as soon as possible after the expiry of the above retention periods.

 

Your personal data and third parties
I will not disclose your personal data to third parties unless:
 

• this transfer is necessary for me to provide my services

• this transfer is made to a processor with whom I have concluded a data processing agreement, ensuring that the processor provides adequate safeguards to protect these personal data

• a legal provision requires me to disclose personal data

• a court order requires me to disclose these data to a third party
   

I have engaged third parties for my accounting, archiving, ICT, file storage, my CRM system, website management and to send batch emails.

 

Cookies
I do not use marketing or tracking cookies on my website.

 

Social media / Social media cookie
A social media button on my website links to LinkedIn. You can use this button for information about me or to promote me or share information about me on LinkedIn. I am not responsible for LinkedIn’s privacy policy, as LinkedIn determines how this social media button works. If you use this social media button, LinkedIn sets a social media cookie so that it recognises you when you want to share something.
LinkedIn’s privacy policy changes regularly and you can read it on the LinkedIn website.

 

Your rights

You have the following rights when your personal data are processed:

 

Right of access
You have the right to access your personal data. At your request, I will provide you with a list of your personal data that I process, the basis for that processing, the retention periods, the organisational and technical measures I have taken, and whether I disclose your information to third parties.

 

Right to rectification
You have the right to ask me to rectify inaccurate or incomplete personal data about you. If necessary, I will rectify and complete your personal data.

 

Right to erasure
You have the right to ask me to erase your personal data. I can do this only if:
 

• your personal data are no longer needed for the purposes for which they were originally collected and processed

• you withdraw your consent and I have no other legal basis on which to process your personal data

• you object to processing and I have no legitimate grounds for processing

• I have unlawfully processed your personal data

• your personal data have to be erased to comply with a legal obligation to which I am subject
   

Right to restriction

You have the right to ask me to restrict the processing of your personal data if:
 

• you contest the accuracy of your personal data, for a period enabling me to verify the accuracy of your personal data

• the processing is unlawful and you oppose the erasure of your personal data and request restriction of processing instead

• I no longer need your personal data for the purpose of the processing but you need your personal data to establish, exercise or defend a legal claim

• you have objected to the processing of your personal data and I am considering whether my legitimate interests override yours
   

Right to object
You have the right to object to processing of your personal data in any of these situations:
 

• the processing is based on my legitimate interests

• I use your personal data for direct marketing

• I use your personal data for statistical, scientific or historical research purposes
   

I may refuse your request if I have compelling legitimate interests that override yours, or if the processing is done to establish, exercise or defend legal claims.

 

Right to data portability
You have the right to receive the personal data you have provided to me in a structured, commonly used and machine-readable format and to transfer those personal data to another party. At your request, I can transfer personal data for you, where technically feasible. The right to data portability can be exercised only if these two grounds are met:
 

• the processing is based on your consent or the performance of an agreement; and

• the processing is carried out by automated means
   

You may submit a request to me to exercise one or more of the above rights. Please send me your contact details with this request so that I can contact you about your request. I reserve the right to ask you to identify yourself. A reasonable fee may be charged in some cases for carrying out the request.

 

You can post or email your request to me using the postal or email address stated in this privacy policy. Please be as clear and precise as possible in your request. Always state which right you wish to exercise and on what grounds. I will inform you about the outcome of your request within one month. I will also notify you if it is not possible to comply with your request within one month.

 

If I cannot comply with your request, I will let you know why.

You always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe that your privacy rights have been violated.

 

However, please let me have the reason for your complaint first so that we can find a solution together.

 

Changes to privacy policy
Additions or amendments can be made to this privacy policy. The most recent version of my privacy policy is on my website.

 

Date: June 2023