Privacy Policy

Privacy Policy The Legal Company – 1 October 2021

Why does TLC have this privacy policy?

The Legal Company respects your personal data and ensures that the personal information provided to us, or otherwise obtained by us, is treated confidentially. Personal data means any information relating to a person. This also includes data that indirectly says something about someone. The following gives effect to the duty to inform the data subject(s) whose personal data The Legal Company processes, as laid down in the GDPR.

We recommend that you read this privacy policy carefully.

The Legal Company processes personal data in order to be able to offer and perform its services, to improve its service provision, and to be able to communicate with you personally as a data subject. For the evaluation of our services, The Legal Company sometimes engages a third party. As a data subject, you yourself make the choice to participate in this and to provide personal data for that purpose. You can also sign up to receive a newsletter or other forms of communication from The Legal Company.

What personal data does TLC hold about me?

We process the following personal data of our prospects and clients for the purposes of our service provision:

  • First and last name;
  • Gender;
  • Email address;
  • Telephone number;
  • Position;
  • Title;
  • Address;
  • Bank account number;
  • Membership of a professional association (when you wish to receive CPD/PE credits);
  • Login details for the Legal Safe portal;
  • Personal data as described in the cookie policy;
  • Information containing personal data about counterparties;
  • Personal data and payslips of our clients’ employees.

Of applicants:

  • The CV containing the personal data (which the applicant chooses to provide themselves). Consisting of, among other things:
  • First and last name;
  • Address;
  • Telephone number;
  • Email address;
  • Title;
  • Gender;
  • Date of birth;
  • Passport photo;
  • Nationality;
  • Education;
  • Hobbies;
  • Languages;
  • Current and previous employers.

We explicitly request applicants not to provide or include their national identification (BSN) numbers or financial details in their CV.

The Legal Company processes the aforementioned personal data because it has been provided by you as a data subject on your own initiative, obtained in the context of the service provision, made known to us by third parties, including counterparties, or has become known through public sources.

The Legal Company processes the personal data mentioned above solely on the basis of the following grounds referred to in Article 6 of the GDPR:

– (in preparation for) compliance with a legal obligation

– (in preparation for) the performance of an agreement

– with the consent obtained from the data subject(s)

– on the basis of a legitimate interest

Why does TLC need my personal data?

We process the personal data referred to below solely for the following purposes:

  1. Use of our services/delivery of products
    In order to make use of our services, it is necessary that you provide us with personal data. We process this personal data for the following purposes (falling within the conclusion and performance of the agreement):
    – Sending of quotations, order confirmations and cost estimates, etc.;
    – Drafting of subscription agreements;
    – Answering questions about our services and products;
    – Provision of the following services:
    > Legal advice and assistance;
    > The Legal Safe subscription service;
    > Trainings and masterclasses.
    – Invoicing.

This personal data is retained for as long as necessary to be able to provide our services and to handle requests. The data is subsequently erased, unless a statutory retention obligation applies, such as, for example, the retention obligation under tax law.

  1. Use for, among other things, direct marketing regarding our services/products
    It is possible that we use your data for direct marketing purposes, for example to promote contact, email marketing, etc. We only do so if you have given consent for this or because you are a client and we have a legitimate interest in providing you with further information about our services or expertise.
  2. Use for sending our newsletter
    We also offer a newsletter through which we inform interested parties about our services and activities. Every newsletter contains a link with which you can unsubscribe. Your email address is only added to the list of subscribers with your consent for as long as you are not yet a client. Once you become a client, you are automatically added, but you may unsubscribe (opt out) at any time.
  3. Use for the recruitment procedure
    We collect and process data from applicants for the purposes of the recruitment procedure, directly or by means of attached CVs/via third parties (headhunters)/email. This takes place on the basis of (preparation for) the performance of the employment agreement, which also includes recruitment, selection and the application procedure.

Your personal data will then be deleted no later than four weeks after the end of the recruitment procedure if, unfortunately, you have not been offered the position. If we have obtained your consent to retain the data for longer, for example because suitable positions may become available in the future, this period will be one year.

Can I withdraw my consent?

If a processing operation is based on your consent, you are entitled to withdraw it at any time (without retroactive effect). Please contact us using the details below.

Is my data disclosed to third parties?

We only share your personal data with third parties to the extent necessary for the service provision, in accordance with the purposes referred to above. This includes, for example, our CRM platform for client and project management, time tracking, sales quotations, or our contract dispatch and signing platform. It also includes our hosting provider for desktop, email and document storage. Or the covering of a practice by another lawyer or the engagement of another third party on behalf of and instructed by The Legal Company, such as an IT supplier, as well as the provision of your personal data in connection with (legal) proceedings or correspondence with the counterparty.

In addition, we may provide your personal data to a third party, such as a supervisory authority or another body vested with public authority, insofar as there is a statutory obligation to do so.

With the third party that processes your personal data on behalf of and instructed by The Legal Company, a data processing agreement is concluded, by which that third party is likewise bound to comply with the GDPR. Third parties engaged by The Legal Company that offer services as a controller in their own right are themselves responsible for compliance with the GDPR in respect of the (further) processing of your personal data. This includes, for example, a bookkeeper, accountant, notary, etc.

The transfer of personal data to parties outside the European Union takes place only to parties/countries that, in accordance with the relevant legislation, offer an adequate level of protection for the processing of personal data.

Does TLC ensure that my data is protected?

The Legal Company attaches great importance to the security and protection of your personal data and, taking into account the state of the art, ensures appropriate technical and organisational measures to guarantee a level of security appropriate to the risk. Where The Legal Company makes use of the services of third parties, such as an IT supplier, The Legal Company will, in the context of the protection of personal data, lay down agreements on adequate security measures in a data processing agreement.

These measures include, but are not limited to:

  • TLC ensures that its network connections are secured (firewalls and SSL);
  • TLC works with an RDP system with password protection and firewalls;
  • Staff and third parties are bound to confidentiality;
  • Access to personal data is limited to certain authorised persons;
  • Security and encryption of email traffic (Zivver);
  • Up-to-date backups;
  • Staff are trained on privacy matters;
  • Strict password policy and secure password vault;
  • Two-factor authentication.

For more information about our security, you may contact us using the details below.

How long does TLC retain my data?

The Legal Company does not retain personal data being processed for longer than is necessary for the purposes of the data processing referred to above, or as required under applicable laws and regulations. Files handled by TLC are not retained for longer than 7 years. The files are then destroyed after 7 years, unless a specific statutory basis requires it to retain the data for longer.

Does TLC use cookies?

For all information regarding the use of cookies, click here.

Can this privacy policy be amended?

The Legal Company has the right to amend the content of this privacy statement at any time without prior notice. Amendments to the privacy statement will be published on the website. Please therefore consult our website regularly.

What are my privacy rights as a data subject?

A request for access, rectification, restriction, objection, data portability, erasure of your personal data, or withdrawal of previously given consent, may be sent via the contact details below. You will receive a further response from us within four weeks of receipt of your request.

Circumstances may arise in which The Legal Company is unable to give full or partial effect to your request as a data subject. This includes, for example, lawyers’ duty of confidentiality and statutory retention periods. Submitting a request
You may submit a request using the details at the bottom of this page.

Use of social media

The Legal Company’s website includes buttons and/or links to enable web pages to be promoted or shared on social (media) networks or third-party websites, such as Twitter, LinkedIn or Facebook. The Legal Company does not supervise, and is not responsible for, the processing of your personal data by and through such third parties. Use of that media is therefore at your own risk. Before making use of the services of such third parties, it is advisable to first read the privacy statement of those third parties.

What responsibilities do I have myself?

It is also your responsibility to ensure that the personal data you share with us is accurate, complete and up to date. Furthermore, if you share the personal data of others with us, it is important that you are certain that you are permitted to share this data with us. You are responsible for this yourself.

Can I file a complaint?

Do you have a complaint about the processing of your personal data? We would be happy to discuss this with you. Under privacy legislation, you also have the right to file a complaint about incorrect processing of your personal data with the Dutch Data Protection Authority. For more information, you can contact the Dutch Data Protection Authority.

How can I reach TLC: our contact details?

For questions or requests regarding this privacy policy or your personal data, you may contact us at any time using the details below.

The Legal Company B.V.
Laan Nieuwer-Amstel 4B
1182 JT Amstelveen
info@thelegalcompany.nl
020-3450152