This privacy statement describes how Pact advocaten BV (“Pact advocaten”) deals with the privacy of people involved in its company (including clients, visitors to its websites, applicants and other relations). This privacy statement describes how Pact advocaten processes personal data and how data subjects can exercise their rights under the General Data Protection Regulation (GDPR).
1. Processing of personal data
We process personal data in the context of our legal services. Pact advocaten BV is the controller within the meaning of the GDPR and has the following contact details:
Pact advocaten BV
Jozef Israëlskade 46
1072 SB Amsterdam
Pact advocaten processes personal data in accordance with the privacy regulations and in the manner described in this privacy statement.
2. Clients and data subjects
In the context of our legal services, we may process the following personal data of our clients or 0f data subjects: name and address, gender and title, contact details (such as e-mail address and telephone number), business details (such as company name, trade register extract and VAT number), passport photo/copy of passport and bank details.
The processing of your personal data is in principle based on Article 6(b) of the GDPR, that is: in order to be able to implement the engagement letter that we have signed with you, which relates to activities such as providing advice, instituting legal proceedings on behalf of clients, settling bankruptcies and providing other legal services. We also process personal data in order to comply with legal obligations, such as the administration or identification obligation (as provided for in the Lawyers Act or in the Wwft,the Act on the Prevention of Money Laundering and Terrorism Financing) or tax obligations. We may also process personal data to pursue our legitimate interests, such as improving our services. If your personal data is processed on the basis of consent, you will be explicitly asked for consent.
3. Website visitors
Every website visitor can leave contact details on the Pact advocaten website as part of our online services. We use this information to contact you and store this information if necessary to answer your question.
4. Use of Social media plugins
Pages on our website can be shared by email, LinkedIn and X (formerly Twitter). Pact advocaten does not monitor the processing of your personal data by and through such third parties and is not responsible for this processing. The use of those social media is at your own risk. It is advisable to first read the privacy statement of third parties before you use their services.
5. Job applicants
Employment opportunities at Pact advocaten are published on the websites of Pact advocaten or via social networks. Applications should be made by letter or e-mail. In the context of job applications, we process name and address, e-mail address, telephone number, date of birth, gender, application data (CV, motivation letter, grade lists, internship reports) and any other data (whether or not requested in the context of the application). We process this data in our administration on the basis of the legitimate interest of Pact advocaten, which is finding suitable personnel. The data is only provided to the persons responsible for recruitment and selection at Pact advocaten and to those whom they involve in this process. The data is not provided for any other purpose. Open applications are processed accordingly.
6. Other relationships
When it comes to suppliers or other service providers, Pact advocaten may process personal data that are necessary for deliveries or for purchasing services, such as name and address, telephone number, e-mail address and bank account number. We process this data in order to implement the agreement or to comply with legal obligations, such as keeping records or for an audit.
7. Your personal data and third parties
Pact advocaten only shares your personal data with third parties to the extent necessary for the provision of services, taking into account the purposes mentioned above. For instance engaging another third party on behalf of and on directions of Pact advocaten, such as an IT supplier, bailiff, courier service or judicial authorities. Pact advocaten may also provide personal data to a third party such as a supervisory authority or another body with public authority, if there is a legal obligation to do so.
A data processing agreement is concluded with the third party processing your personal data on behalf of and on directions of Pact advocaten, which means that this third party is also obliged to comply with the GDPR. Third parties engaged by Pact advocaten who offer services as controllers, are themselves responsible for compliance with the GDPR for the (further) processing of your personal data. For instance accountants, civil-law notaries, or a third party engaged for a second opinion or an expert report.
Pact advocaten attaches great importance to the security and protection of your personal data and takes appropriate technical and organisational measures, according to the state of the art, to ensure a security level tailored to the risk. If Pact Advocaten uses services from third parties, such as an IT supplier, Pact Advocaten will sign a processing agreement with this third party in which adequate security measures in the context of the protection of personal data are laid down. If Pact advocaten transfers data outside the EEA, this will only be to countries covered by an adequacy decision, to a recipient who is certified for the EU-US Privacy Shield (such as Google and MailChimp), if we have an agreement with a recipient which includes the European Model provisions adopted by the Commission or if this is necessary for the execution of the agreement we have with you.
9. Retention period
Pact advocaten does not retain processed personal data for longer than is necessary for the above-mentioned purposes of the data processing or for longer than required by law and regulations. Client files are in principle kept for 5 years.
10. Privacy rights
A request regarding the exercise of privacy rights (such as access, correction, restriction, objection, portability of data, deletion of your personal data or withdrawal of previously given consent) can be made to info@pact advocaten.nl stating: ‘Exercise privacy rights’ or by post to Pact advocaten BV, stating: ‘Exercise privacy rights’, Jozef Israëlskade 46, 1072 SB, Amsterdam. We may ask you for proof of your identity for verification purposes. We aim to respond to your request within one month.
There may be circumstances in which Pact advocaten cannot (fully) follow up on your request as a data subject. For instance if the lawyer’s obligation of professional secrecy or statutory retention periods are in play. If you believe that the way we process your personal data is in breach of privacy regulations and your complaint was not handled to satisfaction, you can file a complaint with the privacy supervisor, the Dutch Data Protection Authority.
11. Changes and questions
We can change this privacy statement at any time and will always publish the latest version on our website. We therefore recommend that you consult our website regularly.
If you have any questions about this privacy statement or your privacy, please send us an e-mail (info@pact advocaten.nl) stating: ‘Privacy Statement Pact Advocaten’ or contact us by post at the address below.
Pact advocaten BV
indicating ‘Privacy statement’
Jozef Israëlskade 46
1072 SB Amsterdam
This privacy statement was last modified on: 1 July 2023.