Paulussen Advocaten N.V. Privacy Policy
PAULUSSEN ADVOCATEN NV is responsible for the processing of personal data, as set out in this Privacy Policy.
Contact information
The processing of personal data takes place under the watchful eye of the Quality Manager, who is also the first point of contact in our office. Please contact the Quality Manager by way of the following information:
PAULUSSEN ADVOCATEN NV
Attn. Quality Manager
ADDRESS: Sint Pieterskade 26 B
POSTCODE AND TOWN/CITY: 6212 AD Maastricht
E-MAIL ADDRESS: j.huppertz@paulussen.nl
TELEPHONE NUMBER: +_31 (0)43 3216640
The personal data that we process
PAULUSSEN ADVOCATEN NV processes personal data of our clients when they make use of our services or when our clients provide this information to us.
Below are the categories of personal data we process:
- Personal data pertaining to clients;
- Personal data pertaining to job applicants.
The purposes of the processing and who has access to the personal data is also specified for each category.
1. Clients
- Clients’ data will only be processed the following purposes:
- for identification purposes;
- to prepare a risk profile in connection with the Money Laundering and Terrorist Financing (Prevention) Act (Wet ter voorkoming van witwassen en financiering van terrorisme);
- to maintain contact with clients;
- to carry out activities as agreed with the client;
- to implement or apply another law.
- The only data that will be processed is:
- the surname, first names, initials, title, sex, date of birth, residence and address details of residence, e-mail address, telephone number and similar data required for communication purposes, as well as the bank account number of the data subject;
- a copy of the data subject’s proof of identity together with their citizen service number (burgerservicenummer);
- data other than those referred to under a. and b., which must be processed in order to carry out the instructions given to our office or results from or is required pursuant to the application of another law.
- The personal data will only be provided to:
- those persons, including third parties, who are in charge of or who manage the activities referred to in the second paragraph or who are necessarily involved in doing so;
- other persons, in cases where there is a legitimate basis pursuant to the EU’s General Data Protection Regulation.
2. Job applicants
- Job applicants’ data will only be processed for the following purposes:
- an assessment of the suitability of the data subject for a position that is or may become vacant;
- to settle the expenses incurred by the job applicant;
- for internal controls and company security purposes;
- to implement or apply another law.
- The only data that will be processed is:
- the surname, first names, initials, title, sex, date of birth, residence and address details of residence, e-mail address, telephone number and similar data required for communication purposes, as well as the bank account number of the data subject;
- a file number containing no information other than that referred to under a.;
- nationality and place of birth;
- data as referred to under a., of the parents, guardians or caregivers of underage job applicants;
- data relating to training, courses and work placements or traineeships, completed and still to be completed;
- data relating to the position that was applied for;
- data relating to the nature and content of the current employment and its termination;
- data relating to the nature and content of the previous employment and its termination;
- data relating to the motivation of the data subject with regard to the position and the organization;
- other data for the purpose of fulfilling the position, which are provided by the data subject or known to him/her;
- data other than those referred to under a. to i., which requires processing pursuant to the application of another law.
- The personal data will only be provided to:
- those persons, including third parties, who are in charge of or who manage the activities referred to in the second paragraph or who are necessarily involved in doing so;
- other persons, in cases where there is a legitimate basis pursuant to the General Data Protection Regulation (Algemene verordening gegevensbescherming).
Special categories of personal data and criminal personal data that we process
PAULUSSEN ADVOCATEN NV special categories of personal data or criminal personal data only if this is necessary for the instructions given by the client, unless we have a different basis for this processing.
We may process special categories of personal data of employees on the basis of statutory obligations, such as tax or reintegration legislation.
If the purposes or services change, this will be discussed again with the data subject.
The purposes and basis on which we process personal data
PAULUSSEN ADVOCATEN NV processes personal data for the following purposes:
- With your permission, such as to send you our newsletter;
- To carry out your instructions, such as to be able to telephone, write, fax or e-mail you or communicate with you in another way if this is necessary to perform our services;
- A statutory obligation. because we are obliged by law and regulations as well as by our professional organization to be responsible for properly compiling files when performing our services;
- Legitimate interest, such as for statistical purposes for marketing activities for our own office;
How long we retain your personal data
PAULUSSEN ADVOCATEN NV does not retain your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected or for longer than the statutory retention period that we are obliged to comply with. We apply the following retention periods for the following categories of personal data:
- A retention period of 30 days applies to cookies on our website;
- Information from a potential client (sent to our office via the website, for example) will be erased after three years if the potential client has ultimately not become a client of our office. This period is necessary in order to invite such a potential client to several events and because events do not take place annually. If a potential client does become a client of our office, the data will be retained for as long as is necessary for the provision of services to this client;
- In order to provide services to the client, our office complies with the statutory retention period for the recording of personal data in applications and files, which in most cases is seven years but which may also be longer or shorter. PAULUSSEN ADVOCATEN NV applies a shortest period of seven years and a longest period of 20 years, pursuant to the law and instructions issued by The Netherlands Bar (Nederlandse orde van advocaten, NOvA).
Sharing personal data with third parties
PAULUSSEN ADVOCATEN NV will not sell your data to third parties and will only provide this data if this is necessary for carrying out your instructions or to comply with a statutory obligation. This also includes the right of inspection by authorities such as the Dutch Tax and Customs Administration. We conclude processing agreements and subprocessing agreements with companies that process data for our clients on our instructions, in order to guarantee the same level of security and to safeguard the confidentiality of the personal data of the client. PAULUSSEN ADVOCATEN NV remains responsible for this data processing.
In special cases, we may provide personal data to external experts, including but not limited to a bailiff, civil-law notary or accountant, in connection with instructions agreed with the client to engage such external expert(s). Insofar as consent is required, this is embedded in the nature of the instructions given to our office or another legal basis.
This data is not used for commercial purposes.
Website
The following applies with regard to personal data when you visit our website.
Our use of cookies or similar techniques
PAULUSSEN ADVOCATEN NV may use functional, analytical and tracking cookies, partly via Google Analytics. A cookie is a small text file that is stored in the browser of the device you used on your first visit to our website. PAULUSSEN ADVOCATEN NV uses cookies that have a purely technical function. These ensure that the website works properly and that it can be optimized. In addition, we may place cookies that track visitors’ browsing habits so that we can offer customized content.
If we use cookies, we will inform visitors about these cookies on their first visit to our website and ask users for their consent to place them.
Visitors can opt out of non-functional cookies by setting their internet browser to no longer stores cookies. In addition, visitors can also erase all information previously saved via their browser’s settings. You can find more detailed information here.
Access, rectify, or erase your personal data
Data subjects (the persons whose personal data we process) have the right to access, rectify, or request the erasure of their personal data (all this insofar as we are required to do so pursuant to the General Data Protection Regulation). In addition, data subjects have the right to withdraw any consent to the data processing, to object to the processing of their personal data by PAULUSSEN ADVOCATEN NV, and to data portability. ‘Data portability’ means that data subjects can submit a request to us to send their processed personal data in a computer file to the data subject or to another organization specified by the data subject. This consent does not relate to the substantive file but merely to the personal data of the data subject.
Data subjects can submit a request to access, rectify, erase, or transfer their personal data, request the withdrawal of consent, or make an objection to the processing of their personal data to j.huppertz@paulussen.nl.
To ensure that the request for access has been made by the data subject, we ask the data subject to send a copy of their identification documents along with the request. We will respond to the request as quickly as possible and within one month at the latest.
PAULUSSEN ADVOCATEN NV also wishes to point out to data subjects that they are entitled to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
How we protect your personal data
PAULUSSEN ADVOCATEN NV takes the protection of personal data seriously and takes appropriate technical and security measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If data subjects have the impression that their data is not secure or there are indications of misuse, please contact the Quality Manager. Their contact details are listed at the top of this Privacy Policy.