Privacy statement
At Dirkzwager, we believe it is important to inform you clearly and transparently about the data we process and how and why we do this.
Dirkzwager N.V. (hereinafter ‘Dirkzwager’, ‘we’, ‘our’ or ‘ourselves’) process processes personal data in the role of data controller as set out defined in the General Data Protection Regulation (the ‘GDPR’).
This privacy statement was last amended on 17 September 2024.
1. Which personal data do we process
Personal data is any information that can be used to identify or make identifiable a natural person (the date subject). The personal data that we may process from you (i.e. from receiving and saving through to amending, transferring and deleting) includes:
- basic information, such as your first and last name, title, gender, the company where you work or your function title
- contact details, such as postal address, (mobile) telephone number or email address
- additional personal data, such as identity document(s), date of birth, nationality and marital status
- financial information, such as your bank account number
- technical details, such as your IP address, the device you use to visit our website and the pages you view, as well as analysis of your reading behaviour of our newsletters and mailings
- personal data you provide us with when you apply for a job with us, such as educational and work experience details
- all other personal data that we acquire from you or about you, or that we are able to acquire ourselves and which we use for the purposes cited below.
2. How we acquire personal data?
In most cases, we acquire your personal data from you, for example if you ask us to carry out an assignment for legal or tax services, you visit our website, you complete a form on our website, you apply for a job with us, you give us your business card or from information we acquire during (telephone) conversations and email contact with you.
In addition, we may also acquire your personal data in other ways, such as from an opposing party or third parties in connection with a case that we are handling, from (public) registers (such as the Chamber of Commerce Register) or from public sources and websites.
3. For what purposes do we process personal data?
Personal data is necessary for all the relationships we enter into so that we are able to offer the best possible services and partnership. We process your personal data for the following purposes:
Legal or tax services
We only process the data that is necessary for the preparation, implementation and completion (including invoicing) of the engagement in question (providing legal or tax advice, drawing up a notarial deed, conducting judicial proceedings, filing a tax return or providing legal knowledge).
Complying with statutory obligations and (professional) rules
We process personal data in order to fulfil statutory obligations as well as the applicable legislation and professional rules that apply to lawyers, civil-law notaries and tax consultants, such as identification, checking details, administrative requirements or retention periods.
Marketing and business development objectives
In order to maintain and expand our client base, we may approach you with news & updates, knowledge in the form of articles/publications/podcasts/videos, or invitations to events hosted by Dirkzwager and/or its partners. We also do that in order to maintain the relationship we have with our partners, suppliers and other business contacts.
Use and improvement of our website
In order to monitor and to improve the contents and usage of our website, we collect and analyse data about the browsing behaviour of the visitors to our website and gather and analyse the effectiveness of our newsletters. Please read our cookie statement for more information.
Participation in our events
When you sign up for one of our events, we will request your personal data. We use that in order to confirm your application, to provide you with up-to-date information about the event in question, to register your presence and to be able to send you proof of participation.
Satisfaction surveys
We believe it is important for us to know what your experience is of our services. This means that we invite you to complete a client satisfaction survey once an assignment has been completed. We may also send you an invitation to assess an event after participation of an event.
Access control and security
Upon visiting one of our offices, we record your name upon arrival. This allows us to know, in case of an emergency situation, who is currently visiting and also to ensure that no unauthorised persons are present in the building. CCTV cameras are used at the entrance and in the parking garage at our offices. Footages from these cameras are not stored.
Job applications and recruitment
To process your job application or when you register for one of our recruitment activities, we request your personal data. The data you provide us with via e-mail, the application form on www.werkenbijdirkzwager.nl and during (telephone) conversations will be stored for up to four weeks at the latest after the end of the job application procedure. If we want to contact you again for a job vacancy in the future, then we ask your permission to save your personal data for a longer period. That period will be no longer than one year.
4. On which grounds do we process your personal data?
We are only permitted to process your personal data if there is a legal ground for that. The processing cited above is carried out on the basis of the following legal grounds from the GDPR:
- For the execution of an agreement
- Due to a statutory obligation
- With your permission
- Due to a legitimate interest
5. With whom do we share your personal data?
Sometimes it is necessary to share your personal data with third parties. That may include the following situations:
- In order to provide our legal and tax services, for example when conducting judicial proceedings, for the purpose of drawing up a notarial deed or to file a tax return
- In order to comply with statutory obligations, for example a registration in the land register or a report to a supervisory authority
- External suppliers who we engage for processing, such as those described in this privacy statement, including our IT suppliers
- Third parties who are involved in the hosting or organisation of our events
- If necessary, written agreements are made with non-processors based on privacy covenants.
Third parties to whom we provide your personal data are also responsible themselves for the processing of those data and for compliance with the GDPR. If a third party processes your personal data as processor on behalf of Dirkzwager then we enter into a data processing agreement that fulfils the requirements of the GDPR. If necessary, we enter into written agreements, such as privacy covenants with non-processors.
6. For how long do we retain your personal data?
We retain your personal data no longer than is necessary for the purpose for which we have collected and recorded the data.
If a statutory obligation exists to retain data or there is a retention period on grounds of professional or conduct regulations, then we observe such periods correctly.
7. How is the personal data safeguarderd?
We have taken suitable technical and organisational measures based on ISO 27001 in order to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised amendment of your personal data.
If you have any questions concerning the security of your personal data or if you suspect any misuse, please contact us via privacy@dirkzwager.nl.
8. What are your rights?
You may inspect the personal data we have recorded about you. You have the right to have your personal data amended or even deleted if the data is not or no longer correct, or if the processing is not (or no longer) justified. Under certain circumstances you may limit the processing, request us to transfer your data or object to the processing. We will assess whether we can comply with your request pursuant to the law.
The Data Protection Officer (DPO) will process your request or any complaint and can be reached by e-mail: privacy@dirkzwager.nl. We will provide a response within 30 days. However, this may take longer depending on the complexity of your request.
We may not be able to respond to your request within the period of one month. This could be because the processing of certain personal data is required in order for us to fulfil our legal and statutory obligations and/or professional requirements or due to other exceptions, such as the rights and freedoms of third parties or the interests of conducting legal proceedings. If we are unable to comply with a particular request, then we will of course provide you with substantiation for that.
You also have the right to submit any questions to the supervisory authority (the Data Protection Authority).
9. Contacting us
If you would like to know more or you have questions or any complaints about our processing of your personal data, you can contact our DPO as follows: privacy@dirkzwager.nl or Dirkzwager, attn. Data Protection Officer, PO Box 111, 6800 AC Arnhem, the Netherlands.
Because we may amend this statement from time to time, we recommend that you view this page regularly so that you can be aware of any changes we make. Should we need to make significant changes to our privacy statement, then we will publish that in a clear statement on our website. If we want to use your data for a different purpose of processing, then we will actively inform you of that.
