Privacy Statement for the services provided by Lassche Advocaten

1. Lassche Advocaten respects your personal data and ensures that any personal information provided to us or otherwise obtained is treated confidentially. Personal data refers to all information relating to an individual. Data that indirectly reveals something about a person is also considered personal data. The following sets out the information requirements laid down in the GDPR regarding the personal data processed by Lassche Advocaten.
2. Lassche Advocaten processes personal data in order to provide services, improve the quality of our services and communicate with you personally as the data subject. Lassche Advocaten often engages a third party to evaluate our services. As a data subject, you are free to choose whether to participate in this and to provide your personal data for this purpose. You may also subscribe to receive a newsletter or other forms of communication from Lassche Advocaten.
3. Lassche Advocaten processes the personal data listed below solely for the purposes set out below:
   
   • the provision of our legal services, which in any event includes advice, support, mediation, referral and assistance in (legal) proceedings;
   • to enable you to post information and exchange information with us;
   • to contact you in connection with the provision of our services, offers and for service-related purposes, and to inform you of changes to our products and/or services;
   • to analyse, improve, secure and/or maintain our website(s) and technical systems;
   • to comply with the legal and regulatory obligations incumbent upon us;
   • to carry out marketing and communication activities;
   • to process your job application;
   • to manage accounts payable and receivable.
4. Lassche Advocaten processes the following (types or categories) of personal data for the purpose of providing its services or which have been provided by the data subject on their own initiative. This personal data may include, amongst other things: your name and address details, your bank account number, your gender, your date of birth and place of birth. In principle, we do not process special categories of personal data within the meaning of the General Data Protection Regulation (GDPR) and we do not process your BSN. We will only process your National Insurance Number (BSN) if there is a legal basis 1 for doing so. Lassche Advocaten processes the aforementioned personal data because it has been provided by you, the data subject, on your own initiative; obtained in the course of providing our services; disclosed to us by third parties, including opposing parties; or has become known to us through public sources.
5. Lassche Advocaten processes the personal data referred to above solely on the grounds set out below, as referred to in Article 6 of the GDPR:
   
   1. legal obligation
   2. performance of a contract
   3. consent obtained from the data subject(s)
   4. legitimate interest.

6. Lassche Advocaten will only share your personal data with third parties to the extent necessary for the provision of services, in accordance with the purposes set out above. This may include the practice being taken over by another solicitor, the carrying out of an expert investigation (or having one carried out), or the engagement of another third party on behalf of and at the request of Lassche Advocaten, such as an IT supplier, as well as the disclosure of your personal data in connection with (legal) proceedings or correspondence with the opposing party.

   In addition, Lassche Advocaten may disclose personal data to a third party, such as a regulatory authority or another body vested with public authority, to the extent that there is a legal obligation to do so. A data processing agreement is entered into with the third party processing your personal data on behalf of and at the request of Lassche Advocaten, thereby obliging that third party to comply with the GDPR as well. Third parties engaged by Lassche Advocaten, which provide services as data controllers, are themselves responsible for compliance with the GDPR in relation to the (further) processing of your personal data. Examples include an accountant, a notary, or other third parties engaged for the purpose of obtaining a second opinion or an expert report.

7. Lassche Advocaten attaches great importance to the security and protection of your personal data and, taking into account the state of the art, implements appropriate technical and organisational measures to ensure a level of security commensurate with the risk. Where Lassche Advocaten uses the services of third parties, such as an IT supplier, Lassche Advocaten will, in the context of personal data protection, set out agreements regarding adequate security measures in a data processing agreement.
8. Lassche Advocaten does not retain personal data that is being processed for any longer than is necessary for the aforementioned purposes of data processing or as required by law and regulations.
9. You may submit a request to access, rectify, restrict, object to, transfer, or erase your personal data, or to withdraw consent previously given, using the contact details below. You will receive a further response from us within four weeks of us receiving your request. There may be circumstances in which Lassche Advocaten is unable to comply with your request as a data subject, either in full or at all. Examples of this include the duty of confidentiality incumbent on solicitors and statutory retention periods. You may address your requests as referred to above to:
   
   • Lassche Advocaten PO Box 7
     7500 AA Enschede
     Email info@lassche.nl
     Telephone 053-4306700.
10. To ensure that we provide the relevant personal data to the correct person in response to your request, we ask you to provide, for verification purposes, a copy of a valid passport, driving licence or identity card showing a redacted passport photograph and your BSN number. Lassche Advocaten will only process requests relating to your own personal data.
11. The Lassche Advocaten website(s) contain buttons and/or links that enable you to promote or share web pages on social media networks or third-party websites, such as LinkedIn or Facebook. Lassche Advocaten does not monitor and is not responsible for the processing of your personal data by and via such third parties. You therefore use these platforms at your own risk. Before using these third-party services, it is advisable to read the privacy policy of the relevant third party first.
12. Lassche Advocaten collects usage data from its website(s) for statistical purposes. The personal data collected in this way is, in principle, anonymous and is not sold by Lassche Advocaten to third parties. In order to improve the user-friendliness of Lassche Advocaten’s website(s), so-called ‘cookies’ are used. A cookie is a small text file that is placed on, for example, your computer, tablet or smartphone during your visit to the Lassche Advocaten website(s). You may refuse the use of these cookies at any time, although this may limit the functionality and user-friendliness of the website(s). The Lassche Advocaten website uses Google Analytics cookies to, broadly speaking, track user behaviour and general trends and to generate reports. This helps to improve the functioning of the website(s). Google may provide this information to third parties if Google is legally obliged to do so or insofar as third parties process the information on Google’s behalf. By using the Lassche Advocaten website(s), you consent to the processing of the information by Google in the manner and for the purposes described above. Cookies are also placed through the use of buttons and/or links, as described above under ‘Use of social media’. Lassche Advocaten has no control over the placement and use of cookies by these third parties. You can find out more about cookies and how to block or delete them on the website of the Netherlands Authority for Consumers and Markets (https://www.consuwijzer.nl/telecom-post/internet/privacy/uitleg-cookies).
13. Lassche Advocaten may provide a blog or forum on its website(s) that is freely accessible. Any information posted there may be read, collected and used by anyone, including any third party. A request to remove personal data from a blog or forum may be submitted via the contact details listed under ‘Data subjects’ privacy rights’. In some cases, Lassche Advocaten is unable to remove personal data from a blog or forum. In response to your aforementioned request, Lassche Advocaten will then indicate that it has not been possible to do so and explain the reason why. If, as a data subject, you post personal data via a third-party application (via social media), that third party or the administrator of the application is the point of contact for such requests for deletion or other privacy-related enquiries.
14. Lassche Advocaten reserves the right to amend the content of this privacy statement at any time without prior notice. Any amendments to the privacy statement will be published on the law firm’s website at www.lassche.nl. We therefore advise you to check our website(s) regularly.
15. If you have any questions or comments regarding the processing of your personal data or this privacy statement, please contact Mr E. Lassche.

This privacy statement was adopted on 3 December 2020.