BVDV B.V. (‘BVDV’) is a law firm Utrecht. Quality, trust and transparancy are pillars of our work. Protecting the personal data we process is also very important to us. We process personal data of our (potential) clients with whom we have made or wish to contact, recipients of our newsletters and of all other persons who contact us.

BVDV is bound by the General Data Protection Regulation when processing personal data in the Netherlands. In this privacy statement we explain how we protect your privacy and how we handle your personal data. The content of this statement does not apply to persons working at BVDV, temporary workers and student trainees.

BVDV processes your personal data

This statement is about the processing of personal data by BVDV as controller. BVDV is located in (3581 GA) Utrecht at Wittevrouwensingel 1. You can reach us by telephone during office hours on +31 (0) 30 23 22 373 and by e-mail at info@bvdv.nl.

Personal data that we process

Personal data is data that holds information about your person or data that can be associated with you. Everything that can be done with your personal data, for example the collection, storage, use, transmission or deletion of your data, is “processing” of personal data. We process personal data that you have provided to us yourself. These are contact details and other personal data that are necessary for the handling of your case by our lawyers, for example your name, address, zip code, place of residence, telephone number, e-mail address, company name, job title, bank account number, date of birth and other information that is necessary for our services. We may obtain personal data from other sources, such as personal data from the Trade Register of the Chamber of Commerce, the Land Registry and personal data available on public (business) websites. We may also receive personal data from you from other parties.

Purposes and grounds for processing

To perform our work properly, we need and process your personal data. We process your personal data if this is necessary for the execution of the assignment you have given to us. For example, your personal data will be used to keep in touch with you about your case. In addition, your contact details will be placed in our customer system and can – if you have given us permission to do so – be used for sending newsletters and invitations for a seminar or events. Depending on the nature of your business, personal data other than your contact details may also be necessary. In addition, we use your personal data to send our invoices. In some cases we are also legally obliged to record certain personal data. For example, under the Money Laundering and Terrorist Financing (Prevention) Act (Wwft), we are sometimes required to store a copy of your identity card or passport. We can also process your personal data if we have a legitimate interest and do not disproportionately infringe your privacy.

Measures taken to protect your personal data

We have taken technical and organizational measures to protect your personal data and to prevent misuse. For example, we ensure that the systems in which we store your personal data are as secure as possible. Within BVDV, your personal data can only be used by employees who need access to it in view of their position. All information we receive from our clients is also protected by the professional secrecy of our lawyers. We may use service providers (processors) that we engage to process your personal data. For example, we work with processors who provide us with hosting services or ICT support. We also use processors to send our newsletters. In that case, we conclude a processor agreement with these processors, in which these processors guarantee that they will meet the requirements of the GDPR.

Transfer of personal data

In order to provide our services, BVDV might need to transfer your personal data to a recipient in a country outside the European Economic Area with a lower degree of protection of personal data than the European law offers. In that case, BVDV will ensure that such a transfer of personal data is in accordance with the applicable laws and regulations, for example by concluding a model contract prepared and approved for that purpose by the European Commission.

Retention period

We ensure that all your data is carefully and safely stored and protected. We have a retention policy that specifies how long we store personal data and do not store your data longer than is necessary for the purpose for which it was processed. We adhere to the legal retention periods. We store personal data of our clients for up to 10 years after the assignment has ended, unless we have ground to store personal data for a longer period of time.

Third parties and your personal data

We adhere to strict confidentiality. It may however be necessary to share your personal data with judicial authorities or with a counterparty. In addition, it may be necessary to share your personal data in order to conclude an agreement or notarial deed. In some cases, transactions must be registered in, for example, the Trade Register of the Chamber of Commerce or in the Land Registry. Data can also be shared with contractors engaged by us, such as a bailiff. We will always ask for your permission prior to sharing personal data in these circumstances. There may also be legal obligations that require us to transfer your personal data to third parties, for example pursuant to a court order. Your personal data will never be shared with third parties for commercial purposes.

Access to your personal data

You can request an overview of the personal data that has been or will be processed about you. If you believe that your personal data has been processed incorrectly or incompletely or if you do not find it necessary for certain personal data to be processed, you can submit a request for amendment, addition or removal to BVDV. You also have the right to object to the processing of your personal data and you have the right to data portability. In addition, you have the right to withdraw your consent to the processing of your personal data. This is the case, for example, when receiving our newsletter. If you send us such a request, we will provide you with information about the actions we have taken as soon as possible, but in any case within 4 weeks of receiving your request. Because the lawyers working at BVDV have a duty of confidentiality, it will not be possible to inspect data that are processed in the context of our services.

Should you have any questions regarding the processing of personal data by BVDV, you can inquire with us via e-mail: info@bvdv.nl or you can send a letter to:

BVDV Advocaten Belastingadviseurs BV
Wittevrouwensingel 1
3581 GA  UTRECHT

Complaints supervisor

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) checks whether companies comply with the GDPR. If you believe that we do not comply with the applicable privacy legislation, you can contact us. We are happy to help and find a solution. In addition, you always have the right to file a complaint with the Dutch Data Protection Authority.

Changes to this privacy statement

The regulations in the field of privacy law change regularly. Our privacy policy is never completely finished. We keep our policy up to date. BVDV may change this statement from time to time. If these changes are also important to you, we will notify you or make the changes known to you. The most recent version of our privacy statement can always be found on our website.

This privacy statement has been amended on January 1, 2021.