Privacy statement : Law law

Privacy Statement

Who is the data controller?
This is the privacy statement of Law Law B.V., established in Amsterdam and registered with the Dutch Chamber of Commerce under number 87003511.

Law Law B.V.
Nieuwendammerdijk 241
1025 LK Amsterdam
06-19243780
law@lawlaw.law

What personal data are processed?

Type of personal data	What data may this include?	Examples of use
Clients
Contact details	Form of address Name Address Telephone number Email address	Communicating about the engagement
Financial details	Bank account number Information on invoices	Administration Invoicing Collecting receivables
Correspondence	Contents of emails Contents of letters	Communicating about the engagement Correspondence in a particular case file Communicating about an order
Case-file data	Correspondence in a particular case file Information in procedural documents and advice Information from public sources (for example, the Chamber of Commerce register), insofar as necessary	Providing legal services, including conducting (court) proceedings. Archiving
Identification data (insofar as necessary)	Copy of identity document	Client due diligence (insofar as necessary)
Suppliers
Contact details	Form of address Name Address Telephone number Email address	Communicating about the engagement
Financial details	Bank account number Information on invoices	Making payments Collecting receivables
Correspondence	Contents of emails and app messages Contents of letters	Communicating about an order Communicating about the engagement
Other purchasing data	Information about the service purchased Information about the product purchased
Website visitors
Data about your website visit	Information about the device you use to visit our website and your location IP-adres	Displaying the website Generating statistics on use of the website
Third parties
Case-file data	Correspondence in a particular case file Information in procedural documents and advice Information from public sources (for example, the Chamber of Commerce register), insofar as necessary	Providing legal services, including conducting (court) proceedings. Archiving

Whose personal data are processed?

Clients
Suppliers
Website visitors
Third parties (persons appearing in clients' case files, other lawyers and advisers)

Why are these data processed and on what legal basis?

Purpose	Legal basis	Examples
Clients
Providing legal services, including conducting (court) proceedings.	Performance of a contract	Drafting legal advice Drafting procedural documents
Maintaining administration	Performance of a contract Compliance with legal obligations (administrative and tax obligations)	Administration Invoicing Collecting receivables
Handling complaints	Performance of a contract Legitimate interest, where relevant, in resolving disputes with clients and defending Law Law's legal position
Compliance with legal obligations	Compliance with legal obligations	Client due diligence under the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft)
Suppliers
Purchasing products and/or services	Performance of a contract Legitimate interest, where relevant, in resolving disputes with suppliers and defending our legal position. Compliance with legal obligations (administrative and tax obligations)	Administration Invoicing Paying invoices
Website visitors
Displaying the website	Performance of a contract
Generating (limited) statistics about use of the website	Law Law's legitimate interest in improving the website
Third parties
To provide requested legal services to clients	Clients' legitimate interest (for example, opposing parties and parties engaged by opposing parties)

With whom does Law Law share personal data?

Law Law may share personal data with suppliers that act as processors on Law Law's behalf, such as the email service provider and the administrator. Law Law has signed data processing agreements with these parties.

Law Law may share personal data with third parties that are independent data controllers, such as lawyers for opposing parties, lawyers engaged by Law Law and bailiffs.

Law Law may share personal data with competent authorities, such as courts and supervisory authorities.

Your personal data will only be processed outside the European Economic Area (EEA) by Law Law or third parties engaged by Law Law where this is in accordance with the GDPR. This means that Law Law will only transfer your data outside the EEA if the European Commission has decided that the relevant third country ensures an adequate level of protection, or if other appropriate safeguards are provided.

How are personal data protected?

Law Law takes appropriate measures to protect your personal data from destruction, loss, alteration, unauthorised disclosure or unauthorised access. Law Law is selective when engaging processors. Law Law has concluded a data processing agreement with engaged processors, such as ProtonMail for email.

Law Law offers the option of using encrypted email. Upon request, Law Law will provide you with a password for PGP encryption. If you also use ProtonMail, email correspondence with Law Law will be encrypted by default (end-to-end encryption). No further action is required.

How long does Law Law retain your data?

Law Law does not retain your personal data in identifiable form longer than necessary for the purposes described in this privacy statement.

Financial records are retained for seven years due to the tax retention obligation.
Case files are archived for 5 or 20 years after closure, in view of the limitation period for professional errors.
Personal data processed under the complaints procedure are deleted two years after the complaint has been handled.

What are your rights?

Under the GDPR, you have the following rights in relation to your personal data:

Right to withdraw consent
You have the right to withdraw your consent at any time without giving reasons. Processing of the personal data for which you withdraw consent will then stop, unless there is another reason requiring processing.

Right of access and rectification
You may ask whether and which data we process about you. We can give you access to these data upon request. You may also ask us to amend data if you believe they are incorrect or incomplete.

Right to erasure
You may ask for data we hold about you to be deleted where the personal data are no longer relevant to the purpose for which they were collected, or where consent has been withdrawn.

Right to restriction of processing
You have the right to request restriction of processing if you contest the accuracy of the personal data being processed.

Right to data portability
You have the right to ask us to provide the data we hold about you or to transfer them to another party.

Complaint
If you have a complaint about the processing of your personal data, you may use Law Law's complaints procedure. You may also lodge a complaint with the Dutch Data Protection Authority.

Law Law does not use automated decision-making.

A request can be made via law@lawlaw.law. We may ask you for additional information to verify your identity and/or may be unable to comply fully with your request, for example due to lawyers' obligations of confidentiality and mandatory legal retention periods.

Changes

This privacy statement may be amended. The latest version can be found on the Law Law website (lawlaw.law). In the event of substantial changes, we will endeavour to inform you.

Contact

law@lawlaw.law
Version 1.1: 1 May 2022