Privacy Statement
In this privacy statement we explain how SIX Advocaten treats your personal data. These are personal data which we process with in the context of:
- Our provision of services
- Our relationship with suppliers
- Our website
- Client relationship management
- Selection procedures
SIX Advocaten B.V., located in Amsterdam at IJdok 25 (1013MM), is the controller as defined in the General Data Protection Regulation (GDPR).
If you have any questions about how we treat your personal data, please contact Irma van den Berg at vandenberg@sixlegal.nl. Information about your rights under the GDPR may be found at the end of this privacy statement.
Provision of services
As a law firm we provide legal advice and conduct legal proceedings. Within that context we process personal data of our clients and/or their employees, of counterparties and/or their employees, of their lawyers / authorized representatives and of other persons involved in a case, such as court staff, experts, translators, etc.
Which personal data do we process?
a. Names, addresses, phone numbers, e-mail addresses and other communication data of our clients;
b. A copy of our clients’ IDs, with the citizen service number having been made illegible;
c. Data from the public registers, such as the Commercial Register or the Land Register;
d. Data of counterparties, their lawyers / authorized representatives and other persons involved in a case;
e. Any other personal data which you provide to us and which are essential to carrying out the contract;
f. Bank account numbers and other data required for sending and collecting invoices and making payments from the clients’ account of SIX Advocaten.
These personal data are provided to us by you at your initiative, are obtained within the context of the provision of services, are disclosed to us by third parties (including counterparties) or have become known to us from public sources.
What is the purpose of this processing of personal data and what are the grounds for doing so?
The purpose of processing the aforementioned personal data is to enable us to provide legal services to our clients and in that context to do all that is required and important. In addition, personal data are required so as to be able to send you our invoices for our services and for keeping our accounts.
The grounds for doing so are:
- Entering into and performing the contract for the provision of services with our clients (article 6 (1) (b) GDPR).
- Complying with legal obligations (article 6 (1) (c) GDPR), such as storing a copy of the ID within the context of the Money Laundering and Terrorist Financing (Prevention) Act (in Dutch: Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft)).
- A legitimate interest pursued by SIX Advocaten or our clients (article 6 (1) (f) GDPR), such as the processing of personal data of counterparties, or persons employed with these, their lawyers / authorized representatives and other involved in a case, provided such is essential for the proper handling of the case.
- In some cases: the data subject has given consent to the processing of his or her personal data (article 6 (1) (a) GDPR).
Providing personal data to third parties
We will provide your personal data to third parties only, if doing so is useful and necessary for the provision of our services. These parties may be:
- counter parties, law courts, bailiffs, experts and translators;
- our IT provider (external hosting) or administrative office (accounts department);
- a regulator or other public body, to the extent that we are required to do so by law.
How long will the personal data be stored?
Personal data may not be stored longer than is necessary for the purpose for which they were obtained, or not longer than is required by the applicable laws and regulations. With regard to our clients’ case files we observe the guidelines provided by the Netherlands Bar Association (in Dutch: Nederlandse Orde van Advocaten), see https://www.advocatenorde.nl/archivering. Case files are stored for a period of 20 after the case has been closed. Data required for tax purposes will in any case be stored for a period of 7 years.
Relationship with suppliers
Which personal data do we process?
a. Names, addresses, phone numbers, e-mail addresses and other communication data, position;
b. Chamber of Commerce and VAT numbers;
c. Bank account numbers and other data required for payment;
d. If required: a copy of an ID, with the citizen service number having been made illegible;
e. Any other personal data we may require.
These data are provided to us by you, are disclosed to us by third parties or have become known to us from public sources.
What is the purpose of this processing of personal data and what are the grounds for doing so?
The purpose of processing the aforementioned personal data is to enable us to order and purchase goods and services from our suppliers. To that end it is necessary to process personal data of these suppliers themselves or of persons employed by them.
The grounds for doing so are:
- entering into and performing agreements with our suppliers (article 6 (1) (b) GDPR;
- complying with legal obligations (article 6 (1) (c), for example including a copy of an ID in our records pursuant to section 15 of the Foreign Nationals (Employment) Act (in Dutch: Wet arbeid vreemdelingen (Wav)) or obligations arising from tax legislation.
The provision of personal data to third parties
We will provide your personal data to third parties only, if doing so is useful and necessary in connection with the order or the supply of goods and/or services which we purchase from our suppliers, or because we are obliged to do so by law (for example under tax legislation).
How long are the personal data stored?
Personal data may not be stored longer than is necessary for the purpose for which they were obtained, or not longer than is required by the applicable laws and regulations. Personal date concerning our suppliers are deleted as soon as possible after the relationship has ended, with the exception of information required for tax purposes, which has to be stored for a period of 7 years.
Website
On our website we use functional cookies for improved ease of use. We also use analytical cookies (Google Analytics), which, however, have been anonymized. These cookies do not collect personal data.
If by way of our website you are directed to another website, it is possible that this other website does collect and process personal data. We have no influence on this. The business in question is in that case responsible for the protection of your personal data on that other website. Any information on this matter may in that case be found in the privacy statement of the business in question.
Client relationship management
Which personal data do we process?
a. Names, addresses, phone numbers, e-mail addresses and other communication data, position;
These personal data are provided to us by you at your initiative or have become known to us from public sources.
What is the purpose of this processing of personal data and what are the grounds for doing so?
The purpose of processing the aforementioned personal data is to establish and maintain contacts with business relations and potential business relations by means of mailings, newsletters, spreading news by way of social media or sending invitations to attend events.
The grounds for doing so are:
- A legitimate interest on the part of SIX (article 6 (1) (g) GDPR) for the purpose of maintaining contacts with business relations and potential business relations;
- Consent having been given by the data subject (article 6 (1) (a) GDPR).
Providing personal data to third parties
We will provide your personal data to third parties only to the extent that such is useful and necessary with a view to maintaining contact or sending an invitation to attend an event, such as:
- to our IT provider (external hosting);
to an events agency which takes care of the communication on behalf of SIX.
How long are the personal data stored?
Personal data in our relations database are deleted at once if 1) you withdraw the consent you have given or if you unsubscribe by way of the ‘unsubscribe’ link in our e-mail messages, or if 2) the legitimate interest has become irrelevant, for example when your business has ceased to exist or when an e-mail address is no longer in use.
Applicants
SIX processes your personal data within the context of a selection procedure.
Which personal data do we process?
a. Name, address, phone number, e-mail address and any other contact data that we may require;
b. Personal data in your resume and in your application letter or e-mail, such as your date and place of birth, gender, information about your education and traineeships, your current job and its termination, your employment history, other activities, personal interests, names and contact data of references;
c. Information about your performance as well as other information of a personal nature which has been written down in the course of the job interview by those taking part and may be relevant to the application;
d. Any other personal data relevant in the context of the selection procedure, for example your LinkedIn profile.
These personal data are provided to us by you at your initiative, have been obtained from third parties with your consent or have become known to us from public sources.
What is the purpose of this processing of personal data and what are the grounds for doing so?
The purpose of processing these personal data is to maintain contacts with you and be able to make appointments with you and to determine whether you are eligible for the position concerned.
The grounds for doing so are:
- A legitimate interest on the part of SIX (article 6 (1) (g) GDPR), namely to be able to conduct a proper and effective selection procedure.
- Consent having been given by the data subject (article 6 (1) (a) GDPR).
How long are the personal data stored?
The data will be deleted 4 weeks after the completion of the selection procedure at the latest. If you give us your consent to do so, we may keep the data for a maximum of one year in the event of a fitting position becoming available once again. You may at all times withdraw this consent.
What are your rights?
You have the right to:
- inspect the personal data we process about you;
- correct your personal data if these are inaccurate, to add to these or (in some cases) to restrict these;
- receive personal data in a structured, in a structured, commonly used and machine-readable format; (data portability);
- object to the processing of personal data by reason of a legitimate interest;
- withdraw your consent.
Such a request, objection or notice may be sent by e-mail to Irma van den Berg, vandenberg@sixlegal.nl, or by mail to Six Advocaten, IJdok 25, 1013 MM Amsterdam. You will receive a reply to you request as soon as possible, but in any case within one month from receipt. We will as much as possible comply with your request and, should this prove impossible, explain the reasons for this to you.
If you feel that your personal data are not processed carefully, you may also file a complaint with the Autoriteit Persoonsgegevens, see https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-over-gebruik-personal data
Amending this privacy statement
We may from time to time amend this privacy statement. All essential amendments will be published on the website of SIX Advocaten (www.sixlegal.nl).
This privacy statement was adopted on 15 June 2020.