Privacy statement

Ekelmans Advocaten N.V. respects your privacy and ensures that the personal information we receive is treated confidentially. Ekelmans Advocaten is responsible for the careful processing of your personal data in accordance with the General Data Protection Regulation (GDPR).

Purposes of the data processing

Ekelmans Advocaten is the controller within the meaning of the GDPR. Personal data is any data that can provide information about an identifiable natural person. Ekelmans Advocaten ensures the lawful, proper and transparent processing of your data.

Ekelmans Advocaten only processes your personal data for the purposes set out below and will not process your data beyond what is necessary for those purposes:

• provision of legal services;
• compliance with legal obligations and obligations imposed by the Netherlands Bar Association (NOvA);
• prevention and combating of fraud and abuse;
• handling of complaints and questions;
• contacting relevant parties;
• provision of information;
• acquisition and marketing activities;
• improvement of the website and the provision of services;
• recruitment and selection;
• administration regarding internal and hired-in personnel;
• absenteeism and rehabilitation support.

Basis of the data processing

In principle, Ekelmans Advocaten will process your data because this is necessary for the performance of the agreement (such as the legal services agreement or the employment contract, including the conclusion of that agreement or contract), for the establishment, exercise or defence of legal claims, or in accordance with permission granted by you. Any permission granted may be withdrawn at any time.

Ekelmans Advocaten can also be obliged to process your data on the basis of a statutory obligation, for example, to be able to demonstrate that it complies with the rules of the GDPR or with its employer obligations.

Furthermore, Ekelmans Advocaten can process data on the basis of its legitimate interest or that of a third party, such as recruitment, direct marketing or improving the user-friendliness of the website.

Whose personal data are processed?

Ekelmans Advocaten processes personal data of:

• clients of Ekelmans Advocaten and other parties involved to the extent this is necessary for the provision of legal services;
• recipients of newsletters and commercial emails from Ekelmans Advocaten;
• visitors to the Ekelmans Advocaten website;
• participants in webinars, courses and meetings arranged by Ekelmans Advocaten;
• personal data obtained through social media;
• internal and hired-in personnel and job applicants.

Sharing data with third parties

Ekelmans Advocaten can share your data with third parties who process your data under its responsibility. These parties are called processors and can be engaged by Ekelmans Advocaten, for example, for ICT management in the context of data security. Ekelmans Advocaten enters into processor agreements with these third parties. The processor agreements stipulate that your personal data will not be processed by the processor for any purpose other than the performance of the processor agreement with Ekelmans Advocaten.

Furthermore, Ekelmans Advocaten can share your data with the competent authorities in accordance with a legal obligation, or in the event of fraud or abuse.

Who has access to your data?

The employees of Ekelmans Advocaten and the third parties they employ as processors will have access to your data, provided this is necessary for the performance of their duties. All parties have a duty to maintain confidentiality under the GDPR.

Know where your data are

Ekelmans Advocaten and its processors will keep a record of when and to whom they provide what information. You may request this information from Ekelmans Advocaten at any time.

Data retention period

Ekelmans Advocaten will not retain your data for longer than is necessary for the aforementioned purposes or for a legitimate interest of Ekelmans Advocaten. Your data will be deleted after the expiry of the retention period.

Data security

Ekelmans Advocaten takes physical (organisational) as well as digital (technical) measures to protect your data against loss, destruction or damage, and against the unauthorised and unlawful processing of your data.

The Ekelmans Advocaten website uses a secure connection (‘https://’). Information is encrypted so that only the sender and the receiver can read it. The web pages where you enter your data are secured by means of the SSL certificate. This ensures that this information cannot be read by third parties.

Ekelmans Advocaten will report any loss, theft or abuse of personal data to you as soon as possible if it is obliged to do so. Ekelmans Advocaten will render every assistance in the investigation by the Dutch Data Protection Authority relating to such security incidents or data breaches.

Cookies

Ekelmans Advocaten uses cookies on its website. These are small text files that are sent to your computer, tablet or smartphone through the internet page to make electronic communication easier and faster.

Information about enabling, disabling and deleting cookies can be found in your browser’s Help function. Click for the cookie statement.

Your privacy rights

You are entitled to:

• access your data;
• rectification (changes or additions) or deletion (removal) of your data;
• limitation of the relevant processing;
• object to the processing and use of your data;
• data portability, i.e. the right to receive your data for personal use or re-use, or for transfer to another organisation;
• All this, if and insofar as the restrictions ensuing from the GDPR (Article 23) do not prevent this.

If you want to know what personal data Ekelmans Advocaten processes, you can submit an access request. Are your data incorrect, incomplete or irrelevant? Then, you can submit an additional request to have the data changed or supplemented.

In addition, the data can be deleted at your request, to the extent this does not impede the performance of the current agreement with Ekelmans Advocaten or any other legitimate interest of Ekelmans Advocaten, and insofar this is not impeded by any legal obligation. After your personal data has been deleted from Ekelmans Advocaten active databases, the backups will be retained for five years. These backups will be archived, and Ekelmans Advocaten will no longer rely on them.

You can exercise all your rights via the email address info@ekelmansadvocaten.com Ekelmans Advocaten will respond to your request within four weeks. If you request access and this is not subject to any restrictions, Ekelmans Advocaten will send you an overview of your data.

You can always unsubscribe from commercial emails and newsletters.

You are also entitled to lodge a complaint with the Dutch supervisory authority, the Data Protection Authority in the event of improper data processing. See for the contact details: www.autoriteitpersoonsgegevens.nl.

Changes to privacy statement

Ekelmans Advocaten reserves the right to change this privacy statement. Ekelmans Advocaten therefore recommends that you consult this privacy statement regularly. This privacy statement was last updated on 25 May 2018.