OSK attaches great importance to the careful handling of personal data and strives to respect the privacy of everyone whose personal data it processes. Personal data will therefore be processed carefully and in accordance with this Privacy and Cookies Statement and applicable laws and regulations. This Privacy and Cookies Statement explains how OSK processes personal data and for what purpose.

What personal data is processed?

OSK processes personal data that have been provided to us by you as a (potential) client, relation, other party or supplier of OSK. In addition, OSK may process personal data which you have not provided to us yourself, but which are necessary for the purpose of litigation or proceedings. OSK does not use the personal data received for purposes other than those for which it was collected.

We may process the following personal data, among others:

• Contact information, such as first and last name, address, telephone number and e-mail address;
• Date of birth;
• Gender (if you choose to share this with us);
• Function (if you choose to share this with us);
• Copy of ID proof;
• Payment details (required for the conclusion of the agreement);
• File number;
• Content of correspondence.

If you wish to receive assistance from one of our lawyers, the conclusion and/or execution of the agreement requires in any case that you provide us with your first and last name, date of birth, address details, BSN number, telephone number and/or e-mail address and payment details.

What is the basis for processing personal data?

OSK processes personal data pursuant to Article 6(1) of the General Data Protection Regulation (‘GDPR’) only if one of the following conditions is met:

1. the data subject has given his/her consent to the processing of his/her personal data for one or more specific purposes;
2. the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to the conclusion of a contract;
3. the processing is necessary for compliance with a legal obligation incumbent on the controller;
4. the processing is necessary for the purposes of pursuing the legitimate interests of the controller or of a third party, except where the interests or fundamental rights and freedoms of the data subject which require protection of personal data outweigh those interests, in particular where the data subject is a child.

Purpose of processing personal data

OSK collects and processes personal data for various purposes. We use the personal data that we have received from you, but we may also use personal data that we have obtained from other sources. These include personal data that can be found on public business websites and business social media platforms such as LinkedIn, personal data that may be obtained from the Trade Register of the Chamber of Commerce and/or the Land Registry, and personal data that we obtain from our clients or associates.

OSK processes personal data for the performance of the contract in which you instructed us to provide legal services. In addition, we may use your personal data to maintain contacts, for billing purposes and to comply with legal obligations. It is also possible that we process your personal data for the protection of a legitimate interest. A legitimate interest is generally legal, financial or business in nature.

OSK may need to share your personal data with third parties. This may include, for example, the coverage of the practice by another attorney, the performance of an expert opinion or the engagement of another third party on behalf of and for OSK, such as an IT supplier, as well as the disclosure of your personal data in connection with litigation or other legal proceedings or correspondence with opposing counsel.

In addition, OSK may disclose personal data to a third party, such as a supervisor or other authority vested with public power, to the extent that there is a legal obligation to do so. We do not share personal data with third parties for commercial purposes.

Third parties to whom we provide your personal data are responsible for compliance with the privacy laws. OSK is not responsible or liable for the processing of your personal data by these third parties. To the extent that a third party processes your personal data on our behalf in the capacity of processor, we will enter into a processing agreement with such third party which complies with the rules set forth in the GDPR.

In circumstances where OSDK transfers personal data to other parties, in those countries outside of the EU/EEA without an adequacy decision, transfer is usually necessary for the establishment, exercise or defence of legal claims. Otherwise, OSK will ensure that it provides appropriate safeguards for this transfer in accordance with the GDPR.

At the moment that personal data is used for a purpose other than that for which it was obtained, we will reconsider whether there is a legal basis for the processing in question. If this is not the case, then (renewed) permission will be requested.

Security Measures

OSK takes the protection of personal data very seriously. We take appropriate security measures to protect against misuse, loss, unauthorized access, disclosure and unauthorized alteration of your personal information. For example, we ensure that only necessary persons have access to your personal data, that access to your personal data is protected. Our website and systems are secured by means of information security techniques and that our security measures are regularly checked (by external parties).

Retention period

We do not keep your personal data longer than is reasonably necessary to realize the goals stated in this privacy statement or to comply with laws and regulations.

For most personal data, we keep them at least as long as necessary to execute the agreement, to collect the claim and to be able to settle disputes that may arise from a file we have handled. However, some personal data must be kept for even longer periods of time by virtue of the law.

The use of cookies

Our website does not use cookies.

Inspection and modification of your data

You have the right to inspect, correct or have removed your personal data. A request for access, correction, restriction, opposition, data portability, deletion of your personal data or withdrawal of previously given consent, can be sent via the contact details below. You will receive further notice within four weeks after receipt of your request.

There may be circumstances under which OSK cannot or cannot fully comply with your request as a data subject. These circumstances may include, for example, the duty of secrecy of lawyers and legal deadlines.

Please direct your requests as mentioned above to info@osk.nl.

Changes Privacy and Cookies Statement

This Privacy and Cookies statement was last updated on 26 February 2021 and may be changed over time. We invite you to consult this Privacy and Cookies Statement regularly so that you remain informed.