Privacy and Cookie Statement
1. Introduction
In this Privacy and Cookie Statement, you can find information about whether, how, and why Kennedy Van der Laan N.V. (“KVdL” or “we”) collects and uses your personal data. This Privacy and Cookie Statement applies to all personal data that are processed by or on behalf of us when you make use of our services, visit our events, visit our websites (www.kvdl.com, www.rechtindezorg.nl, www.mediareport.nl, jointly to be referred to below as: “Websites”), or otherwise communicate or are in contact with us.
We use cookies and similar technologies (jointly to be referred to below as: “cookies”) when offering our websites. In this Privacy and Cookie Statement, we also inform you about what cookies are, how we use cookies on our websites and how you can manage these cookies. For more information, see section 5.
2. The role of KVdL
Generally speaking, with regard to your personal data we are the controller within the meaning of the General Data Protection Regulation (“GDPR”). This means we have certain statutory duties and responsibilities regarding our processing activities. This Privacy and Cookie Statement serves to inform you on how we meet our duties and responsibilities. For the sake of clarity, we have divided this Privacy and Cookie Statement into different sections, each headed by a question. Please go to the relevant question below to find further information.
1. Introduction
2. The role of KVdL
3. How does KVdL receive or collect my personal data?
4. For what purposes does KVdL process personal data and on what legal grounds?
5. Does KVdL use cookies?
6. When does KVdL share my personal data with third parties?
7. Where is my personal data processed?
8. What security measures does KVdL take to protect my personal data?
9. How long does KVdL retain my personal data?
10. What are your rights with regard to the personal data that KVdL processes?
11. How can you reach KVdL if you have questions or complaints?
12. What is KVdL's policy for updating this statement?
3. How does KVdL receive or collect my personal data?
We collect personal data in a number of ways. We will receive personal data from you in the course of offering and providing our legal services, when you engage us as a client or otherwise contact us. Furthermore, your personal data may be collected when you visit our Websites, register for an event, or subscribe to our newsletter.
4. For what purposes does KVdL process personal data and on what legal grounds?
a. Clients
We may process the following personal data of clients:
- Contact information: name, address, job title, title, telephone and fax number, Chamber of Commerce registration number, VAT number, bank account number, website, e-mail address and other company and contact information;
- Communication: letters and e-mail messages with contact persons;
- Assignment information: information on the legal services provided to our clients and information regarding the substance of the matter;
- Billing information: information regarding the calculation and recording of fees and expenses, making payments and collecting debts;
- Video and visual material: video footage, recordings and materials obtained through the security cameras (CCTV) within our office buildings;
- Other information: any other information, including date of birth, nationality, place of birth, sex, copy of ID.
We process these personal data for the following purposes:
1. to provide our legal services, including internal management activities;
2. to calculate or record fees or payments;
3. to make payments or collect debts, including assigning debts to third parties;
4. to conduct (legal) proceedings;
5. to perform audits or other checks;
6. to implement or apply any law or regulation;
7. the access control and security of our office buildings and websites; and/or
8. to implement or apply any law or regulation.
The legal basis for the processing of these personal data is:
- the necessity to perform the agreement with our clients (purposes 1-5);
- the necessity to comply with a legal obligation to which we are subject (purposes 1, 4-5 and 7);
- the necessity to pursue our legitimate interests or those of a third party, where these interests override the interests or the fundamental rights of the data subject (purposes 1-3 and 6).
b. Job applicants
We may also process personal data of job applicants. More information about this can be found in our Privacy Statement for Job Applicants.
c. Suppliers
We may process the following personal data of suppliers:
- Contact information: name, address, job title, title, telephone and fax number, Chamber of Commerce registration number, VAT number, bank account number, website, e-mail address and other company and contact information;
- Communication: letters and e-mail messages with contact persons;
- Assignment information: information on the services provided by our suppliers;
- Video and visual material: video footage, recordings and materials obtained through the security cameras (CCTV) within our office buildings;
- Other information: (in some cases) certificate of good conduct and information from the identity card, or any other data of which processing is required or necessary with a view to the application of laws or regulations.
We process these personal data for the following purposes:
1. to source goods and/or services;
2. to keep accounts (of payments) and to make payments;
3. to conduct (legal) proceedings;
4. to perform audits or other checks;
5. the access control and security of our office buildings and Websites; and/or
6. to implement or apply any law or regulation.
The legal basis for the processing of these personal data is:
- the necessity to perform the agreement with our suppliers (purposes 1-2);
- the necessity to comply with a legal obligation to which we are subject (purposes 2, 4 and 6);
- the necessity to pursue our legitimate interests or those of a third party, where these interests override the interests or the fundamental rights of the data subject (purposes 1-5).
d. Third parties
We may process the following personal data of third parties:
- Contact information: name, address, job title, title, telephone and fax number, Chamber of Commerce registration number, VAT number, bank account number, website, e-mail address and other company and contact information;
- Video and visual material: video footage, recordings and materials obtained through the security cameras (CCTV) within our office buildings;
- Communication: letters and e-mail messages from or addressed to third parties;
- Other information: data we receive from clients or third parties or from a public source for the purpose of dealing with a case.
We process these personal data for the following purposes:1. communication purposes, such as keeping in contact and informing about our services;
2. internal management activities, such as keeping accounts (of payments) and making payments;
3. offering and providing our legal services to clients, such as conducting (legal) proceedings;
4. access control and security of our office buildings and Websites; and/or
5. to implement or apply any law or regulation.
The legal basis for the processing of these personal data is:
1. the necessity to perform the agreement with our suppliers (purpose 1);
2. the necessity to comply with a legal obligation to which we are subject (purposes 2-5);
3. the necessity to pursue our legitimate interests or those of a third party, where these interests override the interests or the fundamental rights of the data subject (purposes 1-4).
e. Website users / visitors
We may process the following personal data of website visitors:
- Contact information (when registering for a newsletter): first and/or last name and e-mail address;
- Communication data: technical data of the equipment that is used to visit the website, such as IP address (with privacy-friendly settings), MAC address and software used;
- Technical information (depending on the settings for cookie preferences): surfing behaviour on our Websites, including mouse and clicking behaviour, duration and times of visits to the Websites.
We process these personal data for the following purposes:
1. to provide relevant information, such as newsletters, legal updates and invitations to events;
2. to make our Websites operate properly;
3. to optimize our marketing activities and to adjust our offer and our information on the Websites accordingly; and/or
4. to be able to answer and handle questions, complaints, or other contacts.
The legal basis for the processing of these personal data is:
- the consent of the data subject (purpose 1);
- the necessity to pursue our legitimate interests or those of a third party, where these interests override the interests or the fundamental rights of the data subject (purposes 2-4).
5. Does KVdL use cookies?
A cookie is a small text file that is stored on your device by visiting websites. Cookies can be accessed either by your web server or your device.
As the administrator of the Websites, we may place cookies on your device. These cookies are called 'first party' cookies. Some cookies may also be placed on your device by other parties, such as our advertisers or parties that place cookies to display certain content on our Websites (such as videos). These cookies are called ‘third party’ cookies.
This Privacy and Cookie Statement does not apply to the use of cookies by third parties. We cannot guarantee that these third parties will treat your (personal) data in a reliable and secure manner. Therefore, we are not responsible for how these third parties treat your (personal) data. For more information on how these third parties treat your (personal) data, we refer to the privacy policy of these third parties (see below).
The following functional, analytical or tracking cookies or similar techniques may be used on our Websites:
Below, a link is indicated to the privacy and/or cookie policy of the third parties that place analytical and/or tracking cookies via our Websites. We advise you to read this policy carefully.
Google Analytics
We use Google Analytics to keep track of how users use our websites. For this purpose cookies are placed. This information is transferred to Google and stored by Google on servers in the United States. Google uses this information to keep track of how our Websites are used, in order to provide us with reports on the Websites.
We have set Google Analytics in a privacy-friendly manner. Among other things, your IP address is pseudonymized before it is transmitted to Google. In addition, we have concluded a data processing agreement with Google under which Google is not allowed to disclose your data to third parties or to use it for other Google services. We have set the maximum retention period of the cookies that are used by this service at 24 months. This means that after this period, the (personal) data can no longer be read out.
The processing of your personal data via Google Analytics is based on our legitimate interest in obtaining general statistics on our website visitors. If you have consented to this on the Websites, a tracking cookie with the name 'NID' will also be placed. This NID cookie contains a unique ID that Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you want to show per page (e.g. 10 or 20), and whether or not you want Google's SafeSearch filter to be enabled.
For more information, read Google’s privacy policy and the specific privacy policy of Google Analytics. For more information about Google’s opt-out, see here.
Enabling or disabling cookies
Through the links indicated above, you can either change and/or withdraw your consent.
In addition, you can set your browser to allow the storage of cookies only if you consent to it, and/or to delete already placed cookies manually. Please consult the manual of your web browser for more information. Please note that many websites will not work optimally if cookies are disabled or deleted.
6. When does KVdL share my personal data with third parties?
When you use our services or Websites, we may share some of your personal data with third parties. This may be necessary, for example, to allow us to properly perform the agreement to which you are a party, or because we are subject to a statutory obligation to share your personal data. When we share your personal data with third parties that process personal data on our behalf (data processors), we will ensure that your personal data are protected in accordance with the GDPR and the terms of this Privacy and Cookie Statement through the data processing agreements we have concluded with these third parties.
Below, we will explain for each category of data subjects with which third parties the personal data may be shared:
a. Clients
- suppliers (such as external translation agencies, bailiffs, or other experts engaged in the course of our services);
- parties involved in our services, such as legal professionals, judges, opposing parties, and/or
- other third parties, if the data subject has given consent or if this sharing arises from a statutory provision.
b. Job applicants
- suppliers (such as the assessment agency that offers our assessments);
- references that are mentioned in the application letter or resume to verify the competences of a job applicant; and/or
- other third parties, if the data subject has given consent or if this sharing arises from a statutory provision.
c. Suppliers
- other third parties, if the data subject has given consent or if this sharing arises from a statutory provision.
d. Third parties
- parties involved in our services, such as clients, legal professionals, judges, opposing parties; and/or
- other third parties, if the data subject has given consent or if this sharing arises from a statutory provision.
e. Website users / visitors
- other third parties, if the data subject has given consent or if this sharing arises from a statutory provision.
Our Websites also contain links to third-party websites. If you click on these links, you will exit our website. Our Privacy and Cookie Statement does not apply to third-party websites, and we are not responsible for the ways in which these third parties treat your personal data. For more information on how these third parties treat your personal data, please consult their respective privacy policies.
7. Where is my personal data processed?
When processing your personal data for some of the purposes specified above, we may disclose your personal data to organizations located outside the European Economic Area (“EEA”). For example, some cooperation partners (sub processors) of parties engaged by us are domiciled in the United States, so that your personal data are disclosed outside the EEA.
In such situations we will ensure that appropriate safeguards are in place that offer an adequate level of protection of your rights and freedoms as a data subject in accordance with the GDPR. We do this, for example, by concluding standard contractual clauses approved by the European Commission for the transfer of personal data, or by transferring your personal data only to third parties that are considered by the European Commission to guarantee an adequate level of protection.
If you wish to receive more information about the international transmission of your personal data, please contact us via the contact details mentioned in section 11.
8. What security measures does KVdL take to protect my personal data?
We have taken appropriate technical and organizational measures to protect your personal data, in accordance with the GDPR, against destruction, loss, alteration, unauthorized disclosure or unauthorized access, including by ensuring that:
- the confidentiality of your personal data is guaranteed and the integrity and availability of your personal data will be maintained;
- our personnel is trained in information security requirements; and
- your personal data is protected against unauthorized access.
If you suspect that your personal data is not sufficiently secured, or if there are indications of unauthorized use, we request you to notify us immediately via the contact details mentioned in section 11.
9. How long does KVdL retain my personal data?
In principle, we will not retain your personal data for any longer period than necessary to fulfil the purposes described in this Privacy Statement.
Job application: Data that we retain about you as a job applicant will be retained up to a maximum of 4 weeks after the completion of the application procedure, or 12 months if you consent to this. You can find more information in our Privacy Statement for Job Applicants.
Newsletter: If you are on the mailing list for the newsletter, we will delete your data if you ask for this (by clicking the unsubscribe link), or ultimately one year after the last communication took place.
Question, complaint or GDPR request: In principle, your communication data will be deleted ultimately six months after your question, complaint and/or GDPR request has been satisfactorily dealt with. In our records, we maintain an overview of all GDPR requests and their status for a period of five years.
Video and visual material: Video and visual material we collect about you if you have visited our office building will be retained for 4 weeks.
However, a longer retention period of your personal data may occur if this is necessary in order to comply with a legal obligation. For example, in our accounting system certain personal data are required to be retained for a minimum of 7 years after the end of a tax year. Furthermore, as advised by the Dutch Bar Association, we have to retain some of your personal data on our files for archiving purposes for a maximum of 20 years. If a dispute or (legal) proceedings are expected, we may also retain your personal data for a longer period of time.
If you wish to receive more information about our policy regarding retention periods, please contact us via the contact details mentioned in section 11.
10. What are your rights with regard to the personal data that KVdL processes?
Under the GDPR, you have the following rights that you may exercise in the context of our processing of your personal data. If you wish to exercise any of your rights, you may reach us using the contact information mentioned in section 11.
Right to be informed
You have the right to be informed about the processing of your personal data. This Privacy and Cookie Statement provides this information. If you would like more information, please contact KVdL.
Right of access
You have the right to access the personal data we collect and retain about you. This access includes information about the purposes for which the personal data is processed, which personal data is processed, how long and where the personal data is retained, and the recipients of the personal data.
Right to rectification
We give our best efforts to ensure that the personal data we process are accurate and complete. However, if you believe that your personal data is incorrect or incomplete, you may request to have your personal data supplemented or changed.
Right to erasure
In certain situations, you have the right to have your personal data erased. For example, if the personal data have been collected in violation of statutory frameworks, or if the personal data is no longer necessary for the purpose for which it was collected and retained.
Right to restriction of processing
You have the right to have the processing of your personal data restricted. This means that we will suspend the processing of your data during a specific period of time. Circumstances giving rise to this are, for example, situations where you question the accuracy of the data, or because you consider that the personal data are no longer necessary for the purpose for which it was collected and retained. This right will not keep us from continuing to process your personal data. We will let you know when the restriction will be lifted.
Right to data portability
In certain cases you may request to receive personal data that KVdL retains about you in a structured, commonly used and machine-readable format. After receipt of the personal data, you are free to transfer them to third parties.
Right to object
You have the right to object to the processing of your personal data that is based on our legitimate interests. Unless we have a compelling legitimate reason for the processing, we will stop processing your personal data if you file an objection.
Right to withdraw your consent
If the data processing is based on your consent, you have the right to withdraw your consent at any time. Upon receipt of your request, KVdL will immediately cease the processing of your personal data to which you had consented. However, the withdrawal of consent will not affect the legitimacy of the processing activities prior to that time.
Please take into account that your rights are not absolute in some cases, and that we may not be required to comply with your request. We will always test in each individual case whether your request should be accommodated, and we will inform you of this.
11. How can you reach KVdL if you have questions or complaints?
If you have any questions or complaints about the processing of your personal data or wish to exercise your rights, you may contact us using the contact details below. We will be happy to help you.
- Kennedy Van der Laan N.V.
- Molenwerf 16
- 1014 BG Amsterdam
- Nederland
- E: privacy@kvdl.com
- T: +31 20 5506 666
To enable us to identify you, we will ask you to send us a copy of your passport or other proof of your identity, in which your (passport) photo and citizen service number are protected. We will delete this copy as soon as we have verified your identity.
If you feel that your rights have been violated, you may also lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl). For more information about the protection of personal data, please consult our GDPR page or the website of the Autoriteit Persoonsgegevens.
12. What is KVdL's policy for updating this statement?
KVdL reserves the right to update or change this Privacy and Cookie Statement. If KVdL make any changes to this Privacy and Cookie Statement in the future, we will publish the adapted Privacy and Cookie Statement on our Websites.. All changes will take effect as soon as the Privacy and Cookie Statement has been posted on the Websites.
Most recently amended: 05 January 2023