Data Controller and Communication

The data controller for the processing of your personal data is Drijber en Partners BV, located at Hoofdstraat 26 (6881 TH) in Velp. Drijber en Partners processes personal data in order to offer services, to improve its service delivery, and to communicate personally with you as a data subject. For the evaluation of our services, we will—where applicable—engage a third party. As a data subject, you make the choice to participate and leave personal data for this purpose.
You can also sign up to receive communications from Drijber en Partners.

Purpose of Processing Personal Data

Drijber en Partners processes the personal data mentioned below exclusively for the following purposes:

• the execution of the agreement in which you have instructed us to provide legal services by our lawyers and/or to conduct (legal) proceedings. If you place a case with a lawyer, your contact details will be requested in any event;
• advisory, mediation, and referral services;
• invoicing for services rendered and the collection of fees;
• compliance with our legal and statutory obligations.
  An example is the Money Laundering and Terrorist Financing (Prevention) Act (Wwft), which in certain cases obliges lawyers to obtain and record specific information. This may involve requesting and storing
  a copy of an identity document (passport);
• maintaining correct (case) administration;
• maintaining contact with you. For instance, we keep your contact details in our client system, which may be used for purposes such as sending newsletters, updates, invitations to events and seminars, and providing information you have requested from us;
• marketing and communication activities;
  improving and securing this website;
• generating user statistics. The website’s user statistics allow us to gain insight into, among other things, the number of visitors, the duration of visits, which parts of the website are viewed, and click behavior. these are generic reports without information about individual persons. We use the information obtained, among other things,
  to improve our website; – recruitment and selection;
• other situations in which Drijber en Partners has a legitimate interest in processing your personal data.

Which personal data are processed?

Drijber en Partners processes the following (types or categories of) personal data in the context of its service delivery:

• (contact) details and other personal data of our client, our counterparty, or third parties, which are necessary for the handling of your case by a lawyer;
• (contact) details that you have (initially) provided to us verbally, including information on business cards;
• personal data obtained via or generated by our website and electronic newsletters. Drijber en Partners processes the aforementioned personal data because they were provided by you as a data subject on your own initiative, obtained in the context of service delivery, made known to us by third parties, including counterparties, or have become known through public sources.

Legal Basis for Processing Personal Data

Drijber en Partners processes the personal data mentioned above exclusively on the basis of one of the following grounds as referred to in Article 6 of the GDPR:

legal obligation;
performance of a contract;
consent obtained from the data subject(s);
legitimate interest. 

Sharing Personal Data with Third Parties

Drijber en Partners shares your personal data with third parties insofar as necessary for the provision of services, while observing the aforementioned purposes. This includes the temporary takeover of a practice by another lawyer, conducting (or commissioning) an expert investigation, or engaging another third party on behalf of and at the instruction of Drijber en Partners, such as an IT provider, as well as providing your personal data in connection with (legal) proceedings or correspondence with the counterparty. In addition, Drijber en Partners may provide personal data to a third party, such as a regulator or another body vested with public authority, insofar as there is a legal obligation to do so. A processing agreement is concluded with any third party that processes your personal data on behalf of and at the instruction of Drijber en Partners, whereby the third party is also bound to comply with the GDPR. Third parties engaged by Drijber en Partners who offer services as a data controller are themselves responsible for compliance with the GDPR for the (further) processing of your personal data. This includes accountants, notaries, or other third parties engaged for a second opinion or expert report.

Security of Personal Data

Drijber en Partners attaches great importance to the security and protection of your personal data and, taking into account the state of the art, ensures appropriate technical and organizational measures to guarantee a level of security appropriate to the risk. In the event that Drijber en Partners uses the services of third parties, such as an IT provider, Drijber en Partners will, in the context of protecting personal data, establish agreements regarding adequate security measures in a processing agreement.

Retention Period of Personal Data

Drijber en Partners does not store personal data that are processed for longer than is necessary for the aforementioned purposes of data processing or as required by laws and regulations.

Rights of Data Subjects

In principle, you have the right to access, correct, or have the personal data we process about you deleted. In addition, you have the right, in principle, to object to the processing of your data. In some cases, you can also ask Drijber en Partners to restrict the processing of your personal data or to transfer your data to yourself or to a third party. However, these rights are not absolute. Applicable laws and regulations provide the framework within which we must or need not honor such requests. A request for access, correction, restriction, objection, data portability, deletion of your personal data, or withdrawal of previously given consent can be sent via the contact details mentioned elsewhere in this privacy statement. You will receive a further message from us within four weeks of receiving your request. To ensure that we provide the relevant personal data to the correct person based on your request, we ask you to provide a copy of a valid passport, driver’s license, or identity document with a redacted passport photo and BSN (citizen service number) for verification. Drijber en Partners only processes requests relating to your own personal data. Circumstances may arise in which Drijber en Partners cannot implement your request as a data subject, or cannot do so in full. This includes the professional secrecy obligation of lawyers and statutory retention periods.

Complaints

Do you disagree with the way we process your personal data? You can then file a complaint with us via the contact details mentioned elsewhere in this privacy statement. Should we be unable to resolve your complaint, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Amendments to the Privacy Statement

Drijber en Partners reserves the right to change the content of this privacy statement at any time without prior notice. Amendments to the privacy statement will be published on the Drijber en Partners website. Therefore, please consult our website regularly.

Questions & Contact

Drijber en Partners is the administrator of this website. It is the data controller within the meaning of the GDPR for the processing of personal data that takes place in the context of its legal services on this website. Drijber en Partners BV is located at Hoofdstraat 26 (6881 TH) in Velp. It is registered in the trade register of the Chamber of Commerce under number 08202454. If you have any questions or comments about the processing of your personal data and this privacy statement, please contact us. If you have questions about how Drijber en Partners handles your personal data,
you can also contact us.

This privacy statement was adopted on October 30, 2018.