PRIVACY AND COOKIE DECLARATION

De Haij & Van der Wende Advocaten, with its registered office at Barbizonlaan 82, 2908 ME Capelle aan den IJssel, is responsible for the processing of personal data as set out in this privacy statement.

Contact details:
https://haijwende.nl/
Barbizonlaan 82
2908 ME Capelle aan den IJssen
010-2204400
E-mail: mail@haijwende.nl 

1.    Personal data processed by De Haij & Van der Wende Advocaten

De Haij & Van der Wende Advocaten processes your personal data because you use our services and/or because you provide the data to us directly. We handle your personal data with care and ensure that personal information provided to us, or otherwise obtained by us, is treated confidentially. All data that De Haij & Van der Wende Advocaten receives from its clients is also covered the lawyers' professional duty of confidentiality (Sections 10a(1)(d) and 11a of the Advocatenwet). This obligation also applies to our employees and staff, as well as to any other person involved in the practice of law. ‘Personal data’ means any information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier, or to one or more factors specific to that person’s  physical, physiological, genetic, mental, economic, cultural or social identity. This privacy statement explains how we comply with our information obligations under the GDPR towards the data subjects whose personal data we process. Below you will find an overview of the personal data that De Haij & Van der Wende Advocaten processes: 

1.   (Prospective) clients, employees and other (business) relations (of clients)

• First and last name;
• Address and place of residence;
• Company name (where the company name includes a person's name, for example Jan van der Meer B.V.;);
• Telephone number;
• E-mail address;
• Photos or video footage of you if you attend our knowledge sessions or events;
• Other personal data that you actively provide, for example through correspondence (including e-mail), during meetings, by telephone, through web forms, or at breakfast sessions or networking events. This may include your title, position, bank account number or other financial details, your gender and the names of your children or partner, dietary requirements and accessibility;
• For the purpose of the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (“Wwft”), registration in the UBO register, or the verification obligation under the Regulation on the Legal Profession (Verordening op de advocatuur), we may also aks you to provide a copy of your identity card or passport. In that case, we will ask you to redact any information that isn't required. You can do this using the KopieID app or an identity document cover;
• Special categories of personal data, such as data revealing racial or ethnic origin, religion, political opinions, trade union membership, and data concerning health, sexual behaviour or orientation, may also be processed where this is necessary for provide legal services and you have given your explicit consent. 

2.    Website visitors

• Internet browser and device type;
• Username, if any;
• Timestamps;
• Browsing behaviour and website visits;
• IP address;
• Cookie consent;

3.    Job applicants

• Name, address, place of residence, e-mail address, telephone number and identification details;
• Information included in your CV or in correspondence;
• Diplomas, transcripts, references and other documents relating to your work or academic performance. 

4.    Counterparties and other third parties

• First and last name;
• Address and place of residence;
• Company name (where the company name includes a person's name, for example Jan van der Meer B.V.);
• Telephone number;
• E-mail address;
• Other personal data actively provided, for example in correspondence (e-mail), during meetings, or by telephone. This may also include special categories of personal data, such as data revealing racial or ethnic origin, religion, political opinions, trade union membership, and data concerning health, sexual behaviour or orientation. Such data may be processed where this is necessary to provide legal services and/or the relevant person has consented to the processing. 

2.   For what purpose and on what legal basis De Haij & Van der Wende Advocaten processes personal        data

De Haij & Van der Wende Advocaten processes your personal data for the following purposes on the following legal bases under the GDPR:  

1.    De Haij & Van der Wende Advocaten processes your personal data where this is necessary to enter into or perform any agreement with you, for example to provide legal advice or share knowledge during breakfast sessions. This applies to: 

• (prospective) clients, for the purposes of providing legal services, carrying out client due diligence, issuing quotations, handling complaints, and collecting outstanding invoices for work performed;
• parties from whom De Haij & Van der Wende Advocaten purchases goods and/or services;
• (potential) suppliers;
• other clients or contractors.

2.    De Haij & Van der Wende Advocaten processes your personal data where you have given your consent or explicit consent where required, for example to receive our newsletter or direct marketing communications, to process special categories of personal data, or to improve our products and service through analytical cookies.

3.    De Haij & Van der Wende Advocaten processes your personal data where legally required to do so, for example for tax filings or to comply with the Wwft, or the Advocatenwet.

4.    De Haij & Van der Wende Advocaten processes your personal data where it has a legitimate interest in doing so. For example, to inform you about changes to, and improvements in, our services, products or website.

3.    Automated decision-making
De Haij & Van der Wende Advocaten does not make decisions based solely on automated processing where those decisions could have legal or similarly significant effects on individuals.

4.    How long we retain personal data
Sound information and document management is essential for a law firm. De Haij & Van der Wende Advocaten does not retain your personal data for longer than is strictly necessary for the purposes for which it was collected. De Haij & Van der Wende Advocaten retains the personal data relating to clients, relations (contacts), counterparties and third parties for the periods required by applicable laws and regulations, including the professional and conduct rules that apply to our practice. 

Where no statutory retention period applies, De Haij & Van der Wende Advocaten will delete all or part of the personal data no later than 5 years after the matter has been closed. We may retain your personal data for 7 years in order to comply with statutory tax-related retention obligations, and for up to 20 years where the personal data, including special categories of personal data, may be required in connection with professional liability. 

Special categories of personal data, such as dietary requirements provided for a breakfast session or networking event, are deleted immediately after the event has ended.

The personal data of website visitors described above, such as browser and device type, username, browsing behaviour and timestamps, is retained for no longer than 2 years.

Personal data relating to job applicants is retained for no longer than 4 weeks after the last contact, unless the applicant consents to a longer retention period. 

5.   Sharing personal data with third parties
De Haij & Van der Wende Advocaten does not sell your personal data to third parties. We only disclose it where this is necessary to perform our agreement with you. For example, we may need to disclose your data to a bailiff, a court, or a civil-law notary, or another professional adviser or service provider. We will ask for your consent or inform you beforehand, unless the law prohibits us from doing so.

In addition, De Haij & Van der Wende Advocaten uses external server capacity to store (parts of) our records, which may include your personal data. . For this purpose, your personal data is disclosed to our hosting or server provider. 

Because De Haij & Van der Wende Advocaten uses a a third-party email marketing service, your personal data (e-mail address and first and last name) are shared with that service provider, insofar as you have given consent to receive our mailings.  

It may happen that De Haij & Van der Wende Advocaten has to share your data with third parties on the basis of a statutory obligation, for example at the request of the Dutch Tax and Customs Administration or a supervisory authority. In that case, De Haij & Van der Wende Advocaten only discloses the information that is necessary.

We enter into data processing agreements with companies that process personal data on our behalf to ensure an equivalent level of security and confidentiality.

In principle, we remain responsible for these processing activities.

6.   AI policy 
De Haij & Van der Wende Advocaten may use applications based on artificial intelligence (AI) when providing its services. These applications may support, among other things, file analysis, translations, the drafting of (legal) documents, quality improvements, text formatting and editing, and the more efficient organisation of internal and external processes. 

Unless explicit consent has been obtained, client personal data is not entered into open, publicly accessible AI systems. Client personal data is processed in AI systems only where the processing takes place within a closed and controlled environment that complies with the GDPR and the Advocatenwet, including the core values of the legal profession. The attorney responsible for the matter retains final responsibility for the use of AI in legal advice, procedural documents and other communications relating to your matter.

In summary, the use of AI takes place within the framework of applicable laws and regulations, the (professional) rules governing lawyers, the guidance of the Dutch Bar Association (Orde van Advocaten), and our internal AI policy.

7.   Cookies and similar techniques used by De Haij & Van der Wende Advocaten
De Haij & Van der Wende Advocaten uses functional, analytical and tracking cookies. A cookie is a small text file stored in the browser of your computer, tablet, or smartphone when you first visit to our website. De Haij & Van der Wende Advocaten uses cookies with a purely technical function. These ensure that the website functions properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work properly and to be able to optimize it. In addition, we place cookies that track your browsing behaviour so that we can provide tailored content and advertisements.

On your first visit to our website, De Haij & Van der Wende Advocaten already informed you about these cookies and asked for consent to place them. 

You can disable cookies by configuring your browser not to store them (opt-out). In addition, you can also delete all information that was previously stored via your browser settings.

Third parties also place cookies on our website, including advertisers and social media companies. An overview is set out below:

Google Tag Manager
Name: gcl_au
Function: Analytical
Retention period: 3 months
Google Tag Manager sets this cookie to experiment with the advertising effectiveness of websites that use its services

Google Analytics
‍Name: _ga, _gid and _gat_UA
Function: Analytical cookie that measures website visits
Retention period: 1 year, 1 month and 4 days
This programme gives De Haij & Van der Wende Advocaten insight into (anonymous) statistics, such as visitor numbers and specific click behaviour. The cookie stores data anonymously and generates a random number to recognise unique visitors.

GDPR
Name: cookielawinfo-checkbox-necessary and cookielawinfo-checkbox-non-necessary
Function: Necessary
Retention period: 1 year
Set by the GDPR Cookie Consent plugin, this cookie records the user's consent for the cookies in the ‘Necessary’ category.

Doubleclick.net
Name: test_cookie
Function: Advertising
Retention period: 15 minutes
Doubleclick.net places the cookie to determine whether the user's browser supports cookies.

Our website contains hyperlinks to other websites, such as rechtspraak.nl, LinkedIn and Instagram. If you click these links, the relevant third party may process your personal data. De Haij & Van der Wende is not responsible for the content or the services of those websites, nor for the protection and security of your personal data that you provide to those websites.

8.   How De Haij & Van der Wende Advocaten secures personal data
De Haij & Van der Wende Advocaten takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. Our attorneys and employees are also bound by a statutory or derivative duty of confidentiality. 

If you have the impression that your data is not adequately secured, or if you suspect misuse, please contact the office at mail@haijwende.nl. De Haij & Van der Wende Advocaten will also notify you directly if a personal data breach is likely to adversely affect your privacy. 

De Haij & Van der Wende Advocaten has implemented at least the following measures to secure your personal data:

• Security software, such as a virus scanner and firewall;
• Pseudonymising and encrypting personal data where possible;  
• Access to laptops and computers is encrypted, and 2-factor authentication is used when working remotely;
• Employees within the organisation are informed of the security measures for personal data;
• Adequate procedures for the (technical) security of personal data are in place and are followed (not leaving a laptop unattended, secure USB sticks, etc.);
• Burglar alarm and other physical access-security measures;
• Secure connections;
• Secure transmission of personal data over the internet (for example, e-mail) by means of technical measures. Please note that no method of transmission over the internet or electronic storage is 100% secure, and De Haij & Van der Wende Advocaten cannot guarantee absolute security;
• Back-up (in (fire-)safe locations) and recovery;
• Strong password management;
• Personal data is not stored on private equipment.  

9.   Accessing, amending or deleting data your personal data
You have a number of rights under the GDPR: 

• The right to ask De Haij & Van der Wende Advocaten for access to your own personal data;
• The right to ask us to supplement or correct your personal data where appropriate;
• The right to ask for your personal data to be erased or for the use of your personal data to be restricted. You can also withdraw any consent you previously gave;
• The right to object to De Haij & Van der Wende Advocaten collecting and using your data, or file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). A complaint can be filed via the following link.
• The right, upon request, to receive information about the balancing of interests that De Haij & Van der Wende Advocaten has carried out where processing is based on our legitimate interests, insofar as this applies to you;
• The right to receive your personal data from us or to have it transferred to another party, where applicable;
• To exercise any of your rights, please contact De Haij & Van der Wende Advocaten using the contact details stated at the top of this privacy statement.
• If there is any doubt about your identity, De Haij & Van der Wende Advocaten may ask you for a copy of your identity document. In this copy, please redact your passport photo, MRZ (machine readable zone, the strip of numbers at the bottom of the passport), passport number and Citizen Service Number (BSN). This helps to protect your privacy. We will respond to your request as quickly as possible and within four weeks at the latest.

10.   Changes to this privacy statement
De Haij & Van der Wende Advocaten reserves the right to make changes, additions or amendments to this privacy statement if this is deemed necessary. The latest version is always available on our website. The first version was published in May 2018. This version was last updated in July 2026. 

Please contact us if you have any further questions or would like more information about how we collect and use your personal data.