Privacy statement

This is the privacy statement of Bowmer & Nuiten Advocaten/Legal, two collaborating law firms located at the addresses Burgemeester de Raadtsingel 93C in Dordrecht and Vasteland 78 in Rotterdam, respectively (hereinafter: "the law firm" or "we"). This privacy statement applies to the processing of personal data of our clients, potential clients, and other individuals who visit our website(s) or contact us.

In this privacy statement, you will find information about how we handle personal data. If, after reading this privacy statement, you have any questions about how we handle personal data, if you wish to exercise your rights under the General Data Protection Regulation ("GDPR") or other personal data laws and regulations listed in this privacy statement, or if you wish to file a complaint about the use of your personal data, you can contact us by phone or email: +31 78 613 39 66 or +31 10 310 08 28 or mail@bnlegal.nl.

If you are not satisfied with how your complaint has been handled, or if you prefer not to file your complaint with us, you can also submit it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via the website autoriteitpersoonsgegevens.nl.

The law firm is responsible for the processing of your personal data and will exercise the utmost care in doing so, complying with the rules arising from the GDPR.

What personal data do we process?

Client File
If you instruct the law firm (or its lawyers), the firm will process the personal data you and the other party(s) in your case provide to the firm. This includes your contact details, such as your name, address, email address, and telephone number. It also includes personal data relevant to the case and/or the handling of your case. Depending on the subject matter of your case, this may also include sensitive and/or special personal data.

Invoicing
If you instruct our law firm, we also process data necessary for sending invoices and processing payments for the services provided by the law firm. In addition to your contact details, this includes your bank account number and any other payment information.

Contact
If you contact us via the contact form on the website(s), by email, or by telephone, we process the data you provide. This includes the contact details you provide (such as your name, email address, and telephone number) and the reason for contacting us (for example, because you have a question).

Tracking website visits
Bowmer & Nuiten Advocaten/Legal uses only technical and functional cookies, as well as analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remembers your preferences, for example. They also allow us to optimize our website. You can opt out of cookies by configuring your internet browser to no longer store them. You can also delete all previously stored information through your browser settings.

For what purposes and on what basis do we process personal data?

Client file
The law firm uses the personal data you have provided under a contract of engagement to handle your client file. Because sensitive and/or special personal data may be processed during the process (and this is not always clear in advance), we ask for your consent to process your personal data. You give this consent by signing the intake form and/or the assignment confirmation. If you do not give this consent, you will unfortunately not be able to use the law firm's services, as we cannot perform our services without processing personal data relevant to the case.

You have the right to withdraw your consent. The law firm will then no longer be able to process your data. From the moment you withdraw your consent, the law firm can no longer provide services to you and will then be required to immediately close the client file.

Invoicing
We use the payment information you provide to invoice for services. This processing is necessary to execute the agreement you enter into with us.

Contact
We use the contact information you provide to contact you if necessary, for example, to answer a question. We process this personal data because it is necessary to pursue our legitimate interest, namely the interest of being able to perform our work and secure new assignments.

Newsletter
We also use your email address to send you occasional updates about our services. If you have instructed us, there is a so-called "existing customer relationship," and we may periodically send you newsletters based on our legitimate interest. If you have not previously used our services but have contacted us in another way (such as by completing the contact form or sending an email with a question), we will ask for your permission to send you newsletters, and will only do so if you have given your consent.

Website Visitor Analysis
The data we collect about website visitors is used solely to track statistics about website visits (for example, to see which pages are viewed most frequently). The data is stored anonymously.

How long do we retain your personal data?

Client File
We retain the client file and the personal data contained therein for seven years after the file is closed. In exceptional cases, we retain a file for a longer period, for example, if the statute of limitations is interrupted or if the law firm believes there is another legitimate reason to retain the file for a longer period.

Administration
We retain our administration, including invoices and other documents containing the personal data of the parties, for a period of seven years after the end of the financial year to comply with tax and legal retention obligations.

Other Contact Information
We retain other contact information for one year after the last contact, unless you request us to delete it sooner.

Website Visitor Analysis
Data about website visitors is retained for two years after the visit to the website. This is the default setting for Google Analytics.

Who do we share your data with?

Your data will be stored in a paper and/or digital file and may appear in emails sent or received by the law firm, and will be stored (and therefore processed) by our IT provider. Furthermore, the payment information you provided to the law firm for invoicing purposes will be passed on to the party that handles the firm's financial administration. The law firm has entered into a data processing agreement with these parties, which stipulates at least the same level of security and confidentiality as you would expect from us.

If you, or another party involved in a client file, files a complaint against (one of the lawyers of) the law firm regarding the handling of a client file containing your personal data, your personal data may be provided to the complaints officer, as directed by the President of the Netherlands Bar Association and/or the Disciplinary Board and/or the Disciplinary Court, or any other relevant disciplinary body, including but not limited to the Stichting Tuchtrechtspraak Mediation (STM). Your data will be treated confidentially by these bodies. We do not share your information with third parties unless we are required to do so under applicable laws and regulations.

Special and/or sensitive personal data that we process

The law firm does not intend to collect data about website visitors under the age of 16 unless they have permission from their parents or guardian. However, we cannot verify whether a visitor is older than 16. We therefore encourage parents to be involved in their children's online activities to prevent personal data about children being collected without parental consent. If you believe that we have collected personal data about a minor without this consent, please contact us at mail@bnlegal.nl, and we will delete this information.

How is your personal data secured?

We have implemented appropriate technical and organizational security measures to protect your personal data against loss, misuse, and unauthorized access by third parties. Furthermore, we require our IT provider to implement such appropriate technical and organizational security measures.

What are your rights?

You have the following rights:

  • The right to access your personal data and receive a copy.
  • The right to rectify your personal data if it is inaccurate or incomplete.
  • The right to object to the processing and/or, in certain cases, the right to restrict the processing of your personal data.

For more information about these rights and when you can exercise them, see Articles 15 through 20 of the General Data Protection Regulation.

You can exercise your rights by contacting us at the email address or phone number listed at the beginning of this privacy statement.

Changes

Sometimes the personal data we process or the applicable regulations may change. In that case, we may amend this privacy statement. In the event of significant changes, we will post a notice on the website and notify you of the change by email.

Dordrecht/Rotterdam, February 1, 2026.