Privacy statement

Windt Le Grand Leeuwenburgh B.V. (hereinafter: ‘Windt Legal’) respects your privacy and processes personal data in its capacity as controller in accordance with the European General Data Protection Regulation EU 2016/679 (hereinafter: the ‘GDPR’) and the General Data Protection Regulation Implementation Act (hereinafter: the ‘UAVG’).

The Privacy Statement was last updated on 4 December 2025.

Windt Legal reserves the right to amend or supplement the Privacy Statement from time to time. You are therefore advised to regularly consult the Privacy Statement as published on the website www.windtlegal.com.

The Privacy Statement explains the following:

To whom this privacy statement applies.
What personal data is processed by Windt Legal.
On what basis personal data is processed and for what purpose.
How long personal data is retained.
With whom personal data is shared.
Security.
Your rights as a data subject.
Which cookies are used.
How to contact us regarding the Privacy Statement.

To whom does this privacy statement apply?

This Privacy Statement is relevant for:

Our (future, existing and former) clients, and their (legal) representatives, authorised representatives, staff and/or contact persons.
Our service providers, and their (legal) representatives, authorised representatives, staff and/or contact persons.
(Potential) counterparties, and their representatives, authorised representatives, staff and/or contact persons.
Applicants and candidates.
Website visitors.
Other (business) relations and/or third parties with whom Windt Legal maintains contact or a relationship (upon request).

What personal data does Windt Legal process?

Personal data refers to all information about an identified or identifiable natural person (the data subject).

Depending on the relationship and the purpose, Windt Legal collects and processes the following categories of personal data:

Our (future, existing and former) clients, and their (legal) representatives, authorised representatives, staff and/or contact persons

Name and address details, (business) contact details, date and place of birth, title, position, profession, copy of ID, signature.
(Business) financial details, invoice and payment details.
Information from the Chamber of Commerce or other public registers.
Information about your participations, information about your qualification as an ultimate beneficial owner (UBO) or politically exposed person (PEP) under applicable anti-money laundering legislation such as the Wwft, and other information that Windt Legal is obliged to process about you on that basis.
Personal data processed by us in the context of handling your case and as contained in the file, documents or correspondence.
Special categories of personal data if this is necessary for the establishment, exercise or substantiation of a legal claim on behalf of our client (e.g. data concerning health, criminal records or other sensitive information in documents provided to us).

Our service providers and their (legal) representatives, authorised representatives, staff and/or contact persons

Name and address details, (business) contact details, title, position, signature.
(Business) financial data, invoice and payment details.
Information from the Chamber of Commerce or other public registers.
Personal data contained in quotations, agreements and/or correspondence with our service providers.

(Potential) counterparties, and their representatives, authorised representatives, staff and/or contact persons

Name and address details, (business) contact details, date and place of birth, title, position, profession, copy of ID, signature.
Information from the Chamber of Commerce or other public registers.
Personal data processed by us in the context of handling a case against an opposing party, and any personal data contained in the file, documents or correspondence.
Special personal data if this is necessary for the establishment, exercise or substantiation of a legal claim on behalf of our client (e.g. data about health, criminal data or other sensitive information in documents provided to us).

Job applicants and candidates

Personal data provided to us by or on behalf of you for the purpose of applying for a job or expressing your interest in our firm, such as your name and address details, date of birth, telephone number, email address, nationality, marital status, CV, diplomas, transcripts, references, (internship) assessments, LinkedIn profile, and all other personal data mentioned in the application.

Website visitors

Data relating to the device you use to visit our website, such as an IP address.

Other (business) relations and/or third parties with whom Windt Legal maintains contact or a relationship (upon request).

Name and address details and/or business contact details that you provide to us by contacting us by email or telephone, via our website and social media, or by providing a (digital) business card to one of our employees.
Personal data that you provide to us in the context of attending events or meetings, such as requirements and wishes regarding accessibility and diet.
Contact details and communication preferences that you provide to us in order to stay informed of developments, news or to receive invitations or newsletters.

Purposes and grounds for the processing of personal data

Windt Legal always processes personal data on the basis of a legal processing basis and for specific purposes:

Windt Legal processes personal data in order to comply with a legal obligation:

To comply with the obligation to identify clients on the basis of the Dutch bar rules and other professional rules applicable to the legal profession.
To comply with KYC and AML obligations (under the Wwft) such as client screening, the identification and verification obligation and reporting unusual transactions.
To comply with tax and administrative (retention) obligations.
To comply with requests from competent supervisory authorities or other entities.

Windt Legal processes personal data to assist its clients as a solicitor on the basis of (legitimate interests in order to implement) the agreement with the client, for the following purposes:

Providing legal assistance and advice.
Representing clients in court, before opposing parties, courts and tribunals, competent authorities, commissions, bailiffs and other third parties.
Administering and managing client files.
Invoicing and credit control and the collection of invoices.

Windt processes personal data on the basis of its legitimate interests in the context of its general business operations and services for the following purposes:

To provide optimal legal services.
To establish, exercise or defend its legal position and rights.
For quality control, internal audits and complaint handling.
To maintain and expand its business network.
To improve our website.
To inform clients and contacts about relevant developments in legislation and regulations.
To invite (existing) clients to events that may be relevant to them.
In the context of its general business operations, financial policy, work distribution, personnel and business planning, ensuring continuity, and optimising and improving its (business) processes.

Windt Legal processes personal data on the basis of consent in order to:

Send digital newsletters, invitations or other marketing communications, taking into account the communication preferences specified by the recipient.

Windt Legal processes personal data of potential candidates and applicants as follows:

Based on Windt Legal's legitimate interests in recruiting and selecting suitable candidates, conducting the application procedure and assessing the applicant;
When making an offer of employment, the applicant's personal data is processed with a view to concluding an employment contract;
With the applicant's consent, for the storage of their personal data with a view to future contact.

Retention period

Windt Legal does not retain personal data that is processed for longer than is necessary for the aforementioned purposes of data processing or as required by law and regulations. In addition, we may retain personal data for longer if this is necessary to establish, exercise or defend our legal position or rights.

In general, Windt Legal applies the following retention periods:

Files are retained for a period of 5 years after completion.
In accordance with the General Tax Act, administrative data is subject to a retention period of 7 years.
Data relating to job applicants is subject to a retention period of 4 weeks after completion of the application procedure, unless the applicant gives permission for that data to be retained for future use for a longer period. In that case, the applicant grants permission to retain the data for a maximum period of 1 year at a time. This permission can be withdrawn and changed at any time, after which Windt Legal will delete the personal data.

With whom is personal data shared?

Windt Legal may share personal data with external suppliers within the framework of its further business operations, such as IT suppliers, communication service providers or other suppliers to whom Windt Legal outsources certain (supporting) services.

A processing agreement is concluded with the third party that processes personal data on behalf of and on the instructions of Windt Legal in its capacity as processor, in which it is laid down how the processor must handle the personal data.

Insofar as it concerns data that Windt Legal processes on the basis of the client relationship and that is subject to professional secrecy, Windt Legal will only share this data with third parties:

Based on the client's consent and insofar as sharing is necessary for the provision of services and/or legal assistance by Windt Legal. This includes, for example, conducting or commissioning an expert investigation or communicating with opposing parties, solicitors, courts and/or other government institutions.
To the extent that there is a legal obligation to do so and Windt Legal cannot invoke its duty of confidentiality and/or right of non-disclosure. In that case, Windt Legal may or must provide personal data to third parties, such as a supervisory authority or other public authority or an authorised recipient.

In order to provide services, it may be necessary for Windt Legal to transfer your personal data to a recipient in a country outside the European Economic Area. In that case, care will be taken to ensure that such transfer of personal data complies with applicable laws and regulations.

Security

Windt Legal has taken appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against loss, destruction, damage, alteration or disclosure.

If you have any questions about the security of your personal data, or if there are indications of misuse, please contact Windt Legal using the contact details below.

Rights of data subjects

Under the (U)GDPR, data subjects have a number of privacy rights, known as the rights of data subjects:

Right to information: this is fulfilled by means of the Privacy Statement.
Right of access, with the exception of personal notes: you can request access to the personal data that Windt Legal has collected about you.
Right to correction, addition, deletion or blocking: this only applies to factual data.
Right to object: this right includes the right to object to or request restriction of the processing of your personal data.
Right to data portability: this means that you have the right to receive your data in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another third party.
Right to be forgotten: you have the right to submit a request to have your personal data deleted.
Right to restrict the processing of personal data: if you wish to restrict the processing of personal data by Windt Legal (pending your requested rectification of your personal data, objection to processing, or because you do not want personal data to be deleted despite the processing being unlawful), you may submit a request to this effect.
Right to withdraw previously given consent: you may change or withdraw your previously given consent to process personal data at any time.
Right to lodge a complaint with a supervisory authority: if you believe that Windt Legal is not handling your personal data with care, or if you are dissatisfied with Windt Legal's response after you have invoked one of the rights mentioned here, and you are unable to reach agreement with Windt Legal itself, you can lodge a privacy complaint with the Dutch Data Protection Authority. You may also choose to go to court.

These rights are not absolute. In some cases, the right only applies under certain conditions. When invoking one of the above rights, you should always bear in mind that circumstances may arise in which Windt Legal is authorised not to comply with your request.

Without being exhaustive, this may include (continuing to) comply with the duty of confidentiality (client-attorney privilege), the right to refuse to give evidence and the ability to comply (or continue to comply) with (other) legal obligations, such as statutory retention periods or the legitimate interests of the client(s) or Windt Legal in the given circumstances, outweigh the interests of the data subject(s) invoking one of the above rights.

You can send a request regarding the above rights using the contact details at the bottom of this page. You will receive further notification within four weeks of receipt of your request.

Cookies

We only use functional cookies on our website. A cookie is a small text file that is sent along with pages from this website (and/or Flash applications) and stored by your browser on the device you are using. The information stored in it can be sent back to our servers on your next visit. No permission is required for the placement and use of functional cookies. You can block the use of cookies by adjusting the settings in your web browser. However, this may affect the full functionality of the website.

Contact

If you would like further information or have any questions or complaints about the processing of your personal data, please contact us at:

By email: compliance@windtlegal.com
By telephone: 010 2617 500

Windt Le Grand Leeuwenburgh B.V.
Blaak 555
3011 GB Rotterdam