1. Holthuis Corporate Law processes personal data in connection with the exercise of its legal practice, to comply with legal obligations, to maintain contact with (potential) clients and other relationships, for recruitment and selection purposes, to send newsletters and invitations to events, and to improve its services.
2. We process, among other things, the following personal data:
   a. Name, address, place of residence;
   b. Phone number, email address;
   c. Information contained in files;
   d. Financial data related to billing clients;
   e. Personal data relevant to establishing the identity of clients in relation to the office's obligations under the Money Laundering and Terrorist Financing Prevention Act (Wwft);
   f. Other personal data you provide, such as application letters and CVs of applicants.

The processing of personal data must be based on one of the legal bases from the GDPR. Holthuis Corporate Law bases the processing of your personal data on one of the following legal bases, depending on the type of processing: the conclusion and execution of a contract (with clients and other parties contracted by Holthuis Corporate Law), a legal obligation, a legitimate interest, or your consent.

1. Holthuis Corporate Law does not share your personal data with other parties, except when necessary for the execution of our services, based on a legal obligation, or with your explicit prior consent.
2. In the context of executing client assignments, it may be necessary to involve other parties who process data on behalf of Holthuis Corporate Law, such as couriers, role representatives, other parties involved in a file, or bailiffs.
3. In certain circumstances, Holthuis Corporate Law may have a legal obligation to provide personal data to government authorities, such as the Tax Authority, the Dutch Bar Association, or the Financial Intelligence Unit – Netherlands.
4. Holthuis Corporate Law uses certain ICT service providers for processing personal data, including for storing client data in a secure Cloud environment, performing financial administration, and in the context of IT management. Holthuis Corporate Law has entered into a processing agreement with these parties that complies with the GDPR.

1. You have the right to request access to your personal data processed by Holthuis Corporate Law and to request rectification or, under certain circumstances, deletion of your data. You can also submit a request to restrict the processing of your personal data (pending a rectification request made by you or an objection made by you against the processing of your data, because you believe that the data processing is unlawful, but you do not want it to be deleted by Holthuis Corporate Law, or if you need the data in connection with a legal procedure).
2. Under certain circumstances, you also have the right to request Holthuis Corporate Law to transfer personal data collected by the office to another service provider (the right to data portability).
3. You can always unsubscribe from receiving newsletters or advertisements.

Holthuis Corporate Law has taken appropriate technical and organizational measures to prevent loss or any unlawful processing of personal data. Personal data processed by Holthuis Corporate Law is stored in a secure Microsoft Cloud environment. Your personal data is secured with passwords and encryption. Access to personal data is only possible for authorized persons.

Holthuis Corporate Law does not retain your personal data longer than necessary for the purposes for which the personal data is collected. For some data (such as financial data), legal retention periods or retention periods prescribed by the Bar Association apply (including information in client files). Other personal data is not retained for longer than two years.