Privacy Statement
Ecolytico Legal is the law firm of dr. T.D.O. (Tjarda) van der Vijver LLM, a Dutch lawyer (advocaat) registered with the Dutch Bar Association based in Amsterdam, the Netherlands.
This privacy statement explains how and for what purposes Ecolytico Legal processes personal data of persons that are or that are employed by or otherwise working for (potential) clients (Clients), suppliers (Suppliers) and other persons (Third Parties). It also explains how Ecolytico Legal secures this data, what rights you may have under applicable data protection laws and how you can contact Ecolytico Legal with questions about the processing of personal data.
Personal data
Under European data protection laws, ‘personal data’ means any information relating to an identified or identifiable natural person (called a ‘data subject’). Examples are name, address, identification number, location data and other data that directly or indirectly specify the physical, physiological, genetic, mental, economic, cultural or social identity of a person. In most cases, Ecolytico Legal acts as a controller within the meaning of the General Data Protection Regulation (GDPR). You can find information about which personal data are processed by Ecolytico Legal with respect to Clients, Suppliers and Third Parties in the relevant paragraphs below.
Legal basis
Ecolytico Legal may only process personal data if such processing can be based on a valid legal basis. Therefore, Ecolytico Legal only processes personal data if:
the data subject has given consent to the processing;
the processing is necessary for the performance of a contract with the data subject or in order to take steps at the request of the data subject prior to entering into a contract, for example when Ecolytico Legal includes personal data in a Client engagement agreement;
the processing is necessary to comply with a legal obligation to which Ecolytico Legal is subject, such as an obligation to verify the identity of a Client;
the processing is necessary for the purposes of the legitimate interests pursued by Ecolytico Legal or by a third party, and those interests outweigh the interests and fundamental rights of the relevant data subject.
In rare situations, Ecolytico Legal may process personal data where this is necessary in order to protect the vital interest of the data subject or another natural person. You can find information about which legal bases are relied on by Ecolytico Legal with respect to Clients, Suppliers and Third Parties in the relevant paragraphs below.
Personal data processing: Clients
When you are a Client, Ecolytico Legal may process your contact details (name and address details, titles, telephone numbers, email address and other data necessary for communication), date of birth, gender, bank account number, identity document, data used in handling the case or settling the dispute and data to record and calculate fees and collect invoices. In addition, Ecolytico Legal may process data relating to counterparties or other Third Parties (as discussed further below).
The legal basis that Ecolytico Legal relies on when processing the personal data of Clients, depends on the purpose of the processing. Where Ecolytico Legal provides legal services to a Client, maintains the Client relationship or calculates fees and collects invoices, it relies on the legal basis performance of a contract or legitimate interest. Where Ecolytico Legal processes personal data to comply with laws or regulations, this processing is based on a legal obligation or legitimate interest.
Personal data processing: Suppliers
When you are a Supplier, Ecolytico Legal may process your contact details (name and address details, titles, telephone numbers, email address and other data necessary for communication), date of birth, gender, bank account number, data relating to ordering and purchasing of products and services and data relating to payments for such products and services.
The legal basis Ecolytico Legal relies on when processing personal data of Suppliers depends on the purpose of the processing. Where Ecolytico Legal processes data in the context of ordering products or services, calculates fees and makes payments, maintains contacts, it relies on the legal basis performance of a contract or legitimate interest. Where Ecolytico Legal processes personal data to comply with laws or regulations, this processing is based on a legal obligation or legitimate interest.
Personal data processing: Third Parties
With regard to Third Parties, Ecolytico Legal may process contact details (name and address details, titles, telephone numbers, email address and other data necessary for communication), date of birth and gender, all insofar as provided. In addition, Ecolytico Legal may process other data provided by Clients or other Third Parties or obtained from public sources in the course of handling cases and settling disputes. When you visit www.ecoylito.com, Ecolytico Legal may process data for the purpose of communicating with the visitors to the website.
The legal basis Ecolytico Legal relies on when processing personal data of Third Parties depends on the purpose of the processing. Ecolytico Legal may process data relating to Third Parties in the context of providing legal services to Clients. Such processing may be based on a legal obligation or legitimate interest. The processing of data for the purpose of communication with the data subject is based on consent, the performance of contract or on legitimate interests. Where Ecolytico Legal processes personal data to comply with laws or regulations, this processing is based on a legal obligation or legitimate interest.
Sharing of personal data
Ecolytico Legal may share personal data of Clients and Third Parties with counterparties, other attorneys, courts, regulators and arbitrators in the context of the provision of legal services to Clients and with Suppliers (for example a translation agency). Personal data of Suppliers may also be shared with these parties, for example if the name of the external translator is included on a document provided to a Client or Third Party.
Ecolytico Legal may also share personal data with other third parties with the consent of the data subject (e.g. consent to provide personal data to the organizer of an event the data subject will attend) or when there is a legal obligation to do so.
Security
Ecolytico Legal applies various technical and organisational measures to protect personal data against destruction, loss, alteration or unauthorised disclosure or access. These comprise administrative, physical and technological measures. Any persons who work for Ecolytico Legal are bound to secrecy and must abide by instructions that ensure the protection of personal data.
Transfer to countries outside the EEA
Personal data may be transferred to a country outside the European Economic Area (EEA) that provides a lower level of protection to personal data than the legislation in the EEA. In such case, Ecolytico Legal will provide for appropriate safeguards, for example by entering into a contract with the recipient of the data as approved by the European Commission or a national supervisory authority (standard contractual clauses).
Data retention
Ecolytico Legal does not keep personal data any longer than necessary. Data are removed when they are no longer necessary for the purposes for which they are processed (as described above in the paragraphs relating to Clients, Suppliers and Third Parties), to comply with legal obligations (such as the legal requirement to retain bookkeeping related data for seven years) or for archiving purposes.
Rights regarding personal data
Data protection laws give data subjects the following rights with respect to their personal data:
the right to request whether or not personal data is processed, and if this is the case, to get access to these;
the right to request rectification and erasure of these data;
the right to object to the processing or to ask for a restriction of the processing;
the right to withdraw the consent to the processing, if the processing is based on consent;
the right to receive personal data or have this transmitted to an organization, in a structured, commonly used and machine-readable format;
the right to file a complaint with a supervisory authority.
Ecolytico Legal will handle requests in connection with the exercise of these rights in accordance with the law. The abovementioned rights are not absolute; there may be situations where Ecolytico Legal cannot or cannot fully meet a request.
Contact
If you want to exercise the rights described above, you can send an email to tjarda.vandervijver@ecolytico.com. You can also use this email address if you have other questions about personal data processing by Ecolytico Legal, or if you wish to file a complaint about how your data has been processed. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, if you reside or work in another country of the EEA, with the supervisory authority in that country.
Amendments to this Privacy Statement
This document was last changed in May 2022, and may be amended in the future.