1. Introduction
Van Leeuwen Advocatuur & Legal attaches great importance to protecting your personal data. This privacy statement explains which personal data Van Leeuwen Advocatuur & Legal processes, for what purposes, and what rights you have. This privacy statement sets out how Van Leeuwen Advocatuur & Legal fulfils its obligations under the General Data Protection Regulation (GDPR).
2. Data controller
Van Leeuwen Advocatuur & Legal is responsible for the processing of personal data. If you have any questions about the processing of personal data, please contact xander@vanleeuwenlegal.nl.
3. Types of personal data
Van Leeuwen Advocatuur & Legal may process, among other things, the following personal data:
- name and other (personal) data;
- (other) contact details;
- job and company details;
- payment and invoice details;
- other data provided in connection with an engagement;
- data provided through the contact form on the website; and
- other data necessary for the provision of services.
4. Purposes of processing personal data
Van Leeuwen Advocatuur & Legal processes personal data for the following purposes:
- assessing an application or engagement;
- the provision of legal services, including conducting legal proceedings and advising on them;
- otherwise performing an agreement for legal services;
- maintaining contact with clients and other contacts;
- complying with legal obligations;
- billing and administration; and
- marketing and communication.
5. Legal bases for processing personal data
Van Leeuwen Advocatuur & Legal processes personal data on the basis of the following legal grounds:
- performance of an agreement for legal services;
- legal obligation;
- consent; and
- legitimate interest.
6. Disclosure of personal data to third parties
Van Leeuwen Advocatuur & Legal discloses personal data to third parties only if this is necessary for the provision of its services, to comply with a legal obligation or with the consent of the data subject.
Personal data may be shared with, among others:
- courts, courts of appeal and other authorities;
- bailiffs;
- opposing parties and their advisers, where necessary for handling a case;
- accountants and administrative service providers;
- IT service providers and cloud providers.
Where required, data processing agreements are concluded with these parties, so that they too are required to comply with the GDPR. These third parties are themselves responsible for complying with the GDPR when further processing your personal data.
7. Retention periods
Personal data are not retained for longer than necessary for the purposes for which they were collected or as required by laws and regulations.
8. Security
Van Leeuwen Advocatuur & Legal takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration or disclosure.
9. Rights of data subjects
Data subjects have the right, insofar as provided for by law:
- to access their personal data;
- to rectification of inaccurate data;
- to erasure of personal data;
- to restriction of processing;
- to data portability;
- to object to processing.
Requests may be sent to xander@vanleeuwenlegal.nl. Van Leeuwen Advocatuur & Legal may request additional information to verify the identity of the person making the request.
10. Cookies
Van Leeuwen Advocatuur & Legal uses only functional cookies on its website, which are necessary for the proper functioning and security of the website. For example, these cookies ensure that the website is displayed correctly and that certain settings are remembered.
These cookies do not infringe on visitors’ privacy and are not used to track visitors, analyse their browsing behaviour or serve personalised advertisements. No prior consent is required to place these functional cookies.
Van Leeuwen Advocatuur & Legal does not use tracking cookies or other cookies for marketing purposes.
11. Complaints
If a data subject has a complaint about the processing of personal data, they are asked to contact Van Leeuwen Advocatuur & Legal first. You have the right to lodge a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority.
12. Changes
Van Leeuwen Advocatuur & Legal reserves the right to amend this privacy statement. The most up-to-date version will always be published on the website. This privacy statement is available in both Dutch and English; the Dutch-language version shall prevail.
This privacy statement takes effect on 2 November 2026.