Privacy Statement

Purposes of data processing

Van der Valk Advocatuur is the controller within the meaning of the GDPR. Personal data is any data that can provide information about an identifiable natural person. Van der Valk Advocatuur ensures the transparent, lawful, and proper processing of your data.

Your personal data will only be processed far a limited number of purposes and only to the extent necessary far those purposes:

the provision of legal services;

compliance with legal obligations and obligations imposed by the Dutch Bar Association (NOvA);

the prevention and combating of fraud and abuse; handling complaints and questions; establishing contact; providing information; • acquisition and marketing activities; improving the website and services; • recruitment and selection;

administration relating to (temporary) staff;

• absenteeism and reintegration support.

Legal basis for data processing

Van der Valk Advocatuur will, in principie, process your data because this is necessary in the context of the performance of the agreement (such as the agreement far legal services), far the establishment, exercise, and substantiation of legal claims, or on the basis of your consent. Any consent given can be withdrawn at any time.

Van der Valk Advocatuur may also be obliged to process your data based upon a legal obligation, far example to demonstrate that it complies with the rules of the GDPR or its employer obligations.

Furthermore, Van der Valk Advocatuur may process data based upon of its legitimate interest or of a third party.

Van der Valk Advocatuur processes personal data from clients of Van der Valk Advocatuur and other parties involved insofar as this is necessary far the provision of legal services visitors to the Van der Valk Advocatuur website; personal data obtained via social media;

Sharing data with third parties

Van der Valk Advocatuur may share your data with third parties who process your data under its responsibility. These parties are referred to as processors and may be engaged by Van der Valk Advocatuur. Van der Valk Advocatuur enters into a processing agreement with these third parties. This agreement stipulates that your personal data will not be processed by the processor far any purpose other than the execution of the processing agreement with Van der Valk Advocatuur.

Furthermore, Van der Valk Advocatuur may share your data with the competent authorities on the basis of a legal obligation, or in the event of fraud or abuse.

Who has access to my data?

The employees of Van der Valk Advocatuur and the third parties it engages as processors have access to your data, provided this is necessary far the performance of their duties. AII parties are bound to confidentiality under the GDPR.

Knowing where your data are

Van der Valk Advocatuur and its processors keep track of when and to whom they provide which data. You can request this information from Van der Valk Advocatuur at any time.

Data retention period

Van der Valk Advocatuur does not retain your data far longer than is necessary far the aforementioned purposes or far a legitimate interest of Van der Valk Advocatuur. Your data will be deleted after the retention period has expired.

Data security

Van der Valk Advocatuur takes both physical (organizational) and digital (technical) measures to secure your data in arder to prevent loss, destruction, or damage, and to prevent unauthorized and unlawful processing of your data.

The Van der Valk Advocatuur website uses a secure connection (https://). lnformation is encrypted so that only the sender and recipient can read it. The web pages where you enter your data are secured by an SSL certificate. This prevents third parties from "reading along. "Van der Valk Advocatuur will report any loss, theft, or misuse of personal data to you as soon as possible if it is obliged to do so. Van der Valk Advocatuur will cooperate fully with the investigation by the Dutch Data Protection Authority into such security incidents or data breaches.

Cookies

Van der Valk Advocatuur uses cookies on its website. These are small text files that are sent to your computer, tablet or smartphone by the internet page to make electronic communication easier and faster. lnformation about enabling, disabling and deleting cookies can be found in the Help function of your browser. Click on the following link far the cookie statement: Cookie statement :

Your privacy rights

Your privacy rights. You have the right to:

access your data;

rectify (modify or supplement) or erase (delete) your data; restrict the processing of your data. object to the processing and use of your data.

• data portability: the right to receive your data far personal (re)use or far transfer to another organisation.

AII this if and insofar as the restrictions arising from the GDPR (Art. 23) do not prevent this.

lf you would like to know which personal data Van der Valk Advocatuur processes, you can submit a request far access. lf your data appear to be incorrect, incomplete or irrelevant, you can submit an additional request to have the data changed or supplemented.

In addition, the data can be deleted at your request, insofar as this does not impede the performance of the current agreement with Van der Valk Advocatuur or another legitimate interest of Van der Valk Advocatuur and insofar as no legal obligation prevents this. After your personal data have been deleted from Van der Valk Advocatuur' s active databases, the backups will be retained far a further five years. These backups will be archived and Van der Valk Advocatuur will no longer refer to them.

You can exercise all your rights via the email address: info@jvalk.nl. Van der Valk Advocatuur will respond to your request within four weeks. lf you request access and there are no restrictions, Van der Valk Advocatuur will send you an overview of your data.

You can unsubscribe from commercial emails and newsletters at any time. In addition, you have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, in the event of improper data processing. For contact details, see: www.jvalk.nl

Changes to the privacy statement

Van der Valk Advocatuur reserves the right to amend this privacy statement. Van der Valk Advocatuur therefore recommends that you consult this privacy statement regularly. This privacy statement was last updated on 20 August 2025.