PRIVACY STATEMENT &Bousie

  1. 1. Introduction

This is the privacy statement of &Bousie. In this privacy statement, we explain how we handle the personal data we process when you use our services, when you visit our website, or when you interact with us in any other way.

The data controller within the meaning of the General Data Protection Regulation (GDPR) is &Bousie. Our address is: Herengracht 433, 1017 BR Amsterdam.

If, after reading this privacy statement, you still have questions about how we handle your personal data, please contact us at: info@andbousie.stripedelephant.nl

2. Processing of Personal Data

As a law firm, &Bousie processes data about natural persons (“personal data”). This includes, among other things, data relating to:

  • · Individuals who are clients or who work for our clients;
  • · Third parties whose data appears in the files we handle, such as opposing parties and other attorneys;
  • · Visitors to our office;
  • · Visitors to our website;
  • · Individuals from whom we purchase products or services (suppliers);
  • · Job applicants.

Below, we describe for each category what personal data we process (to the extent necessary), for what purposes, and on what legal basis.

Clients, opposing parties, and third parties

&Bousie is a law firm. We provide legal advice and conduct legal proceedings. In order to properly perform our work for clients, it is necessary and sometimes legally required to process personal data. This includes personal data of our clients, of individuals employed by our clients, of opposing parties, of individuals employed by our opposing parties, other attorneys, and relevant third parties (such as experts).

(Personal) Data

Purposes

Legal Bases

· Name, address, and contact details;

· Data of opposing parties or third parties;

· Extracts from the Chamber of Commerce, Land Registry, and other public registers;

· Information about the case;

· A copy of identification (Social Security Number is redacted);

· Payment and bank details;

All other personal data that you provide to us or whose processing is required or necessary.

· Our legal services, including conducting proceedings and providing advice;

· Compliance with (legal) obligations, such as the obligation to verify the identity of clients;

· Billing and record-keeping;

· Making and collecting payments via our escrow account;

Marketing and business development activities, such as sending newsletters, invitations to our events, and other communications.

· If you are our client: the performance of the agreement, including maintaining the file and performing (litigation) actions on your behalf;

· If you are not our client yourself (but, for example, your employer is, or you are a party to a dispute): the legitimate interest of us and our clients in using your data in connection with handling cases, maintaining case files for that purpose, and performing (litigation) actions on behalf of our clients;

· Compliance with legal obligations (such as the Money Laundering and Terrorist Financing Prevention Act (“Wwft”) and the Bar Regulations).

Our legitimate interest in using contact information to send commercial messages and/or invitations in connection with maintaining our business relationships;

Your consent.

Office visitors

We may record who visits us and with whom an appointment has been made. If you arrive by car, the receptionist may report your license plate number to our parking service. We process (where necessary) the following data:

(Personal) Data

Purposes

Legal Bases

· First and last name;

· Contact information;

· Date of visit;

· Information about your position and/or the organization where you work;

Your contact person at &Bousie

· License plate number;

Date and time of vehicle registration check-in and check-out

· Scheduling appointments.

· Being able to properly receive guests/clients;

Paying parking fees.

· The performance of the agreement with the visitor (organizing and fulfilling the appointment);

Our legitimate interest in being able to properly receive our guests/clients.

Website visitors

When you visit our website (www.andbousie.com), we may process certain personal data, for example when you sign up for our newsletter.

Personal Data

Purposes

Legal Bases

Data regarding the device you use to visit our website and your location;

· Your IP address;

· Information about your visit to our website;

Contact information (when subscribing to the newsletter and/or sending an email via the website).

To display our website to you;

· Generating statistics on website usage;

· Improving the website;

· Collecting contact information for our newsletter;

Processing emails sent via the website.

To perform the agreement;

· Our legitimate interest in improving (our communication via) the website.

Social media

&Bousie is active on social media platforms such as LinkedIn. When you follow us and/or connect with us, we may gain access to some of your profile information. &Bousie also follows social media channels and may, in this way, gain access to information about you on social media.

Personal Data

Purposes

Legal Bases

Social media profile data

· To post and read messages.

To maintain contact.

Our legitimate interest in conducting marketing and communication activities via social media.

Suppliers

When we purchase goods and/or services from suppliers and/or service providers, we process personal data of those suppliers and/or service providers and/or individuals employed by them.

(Personal) Data

Purposes

Legal Bases

· Name, address, and

contact information;

· Chamber of Commerce
number;

· VAT number;

· Payment and bank details;

· Information regarding orders or the purchase of services;

· In some cases: a certificate of good conduct and/or proof of identity (with the Social Security Number (BSN) redacted);

Other data that you provide to us or whose processing is required or necessary in light of applicable laws or regulations.

Placing

orders or purchasing services;

· Billing, record-keeping, and internal administration;

· Conducting (audit) reviews;

Handling and resolving disputes with suppliers

· Maintaining contacts;

Compliance with (legal) obligations.

· The performance of the

agreement with the supplier/service provider;

· Our legitimate interest in resolving disputes with suppliers and, where necessary, defending our legal position;

Compliance with legal obligations.

Sollicitanten

When you apply to us for a job or internship, we ask for various personal data and documents.

(Personal) Data

Purposes

Legal Bases

· Name, address, and contact details;

· Date of birth, gender;

Resume and cover letter containing information about your education,

work experience and

skills;

· Information about your current employment and any termination thereof;

· Degree, grades, and/or any other evidence of completed education;

· Information about the position for which you are applying;

· References and any other information you provide to us;

· Information we collect, for example by viewing your LinkedIn profile.

Other data whose processing is required or necessary in light of applicable laws or regulations.

· Processing the application;

Assessing suitability for the position, availability, reliability, and

integrity of the

applicant;

· The potential conclusion of an internship or employment agreement;

· Keeping on file for future job openings;

Compliance with (legal) obligations.

· The performance of the agreement (completion of the application process);

· Our legitimate interest in finding work experience suitable for the
position

to assess

of a candidate’s suitability and reliability;

Compliance with legal obligations.

  1. 3. Retention periods

&Bousie does not retain personal data longer than necessary:

  • · for the purposes for which it is collected or processed. For example, we retain personal data that is part of ongoing case files for as long as we are advising on or litigating these matters;
  • · to comply with laws and regulations. For example, we retain data necessary for our accounting for seven years;
  • · for archiving. We transfer closed case files to an archive. We retain the file in the archive for up to 5 years after the file is closed, in accordance with general legal rules regarding the retention of files.

4. Recipients of personal data

&Bousie shares your personal data with third parties only to the extent necessary for the purposes mentioned above.

We may share personal data of clients, opposing parties, and third parties with:

  • · our employees, in particular those within the firm involved in handling your case;
  • · suppliers (such as external translation agencies, bailiffs, and collection agencies);
  • · opposing parties, other attorneys, insurers, experts, courts, administrative bodies, government agencies, and similar parties.

We may share personal data about visitors with:

  • · our employees (who have an appointment with the data subject or are otherwise involved in the matter);
  • · suppliers (such as parking services).

We may share personal data about website visitors with:

  • · our IT service providers.

We may share personal data about suppliers with:

  • · our employees (who are involved in the supplier’s order or delivery and/or its processing).

We may share personal data of job applicants with:

  • · our employees, in particular those within the office involved in your (job application) process;
  • · suppliers (such as an assessment agency).

In cases other than those mentioned above, we will only share your personal data with third parties if you have given your consent, to comply with (legal) obligations, or if we are required to do so as a result of legal proceedings and/or to protect our own interests or those of third parties.

5. Transfer

We may use the services of third parties to process your data in accordance with this privacy statement. These parties may be located outside the European Union or may use servers located outside the European Union, including in the United States. The level of protection for personal data in these countries may be lower than in the European Union.

If that is the case, we will ensure appropriate safeguards, such as by entering into a contract based on standard contractual clauses approved by the European Commission (Article 46 of the GDPR).

6. Security

&Bousie takes the protection of personal data seriously and takes appropriate measures to protect your personal data against destruction, loss, alteration, or unauthorized disclosure or unauthorized access. Our employees are bound by confidentiality and must adhere to our instructions aimed at the adequate protection of your data

7. Access, Correction, Objection, and Other Rights

Under the GDPR, you have the following rights regarding your personal data:

  • · The right to ask whether we process your data and, if so, to access it;
  • · The right to request rectification of your data if it is inaccurate, incomplete, or irrelevant, and the right to have your data erased;
  • · The right to object to the processing or to request restriction of the processing;
  • · The right to withdraw consent for processing, if the processing is based on your consent;
  • · The right to receive or have your data transferred to an organization of your choice, in a structured, commonly used, and machine-readable format;
  • · he right to file a complaint with the Dutch Data Protection Authority if you believe we are processing your personal data unlawfully.

A request can be submitted via info@andbousie.stripedelephant.nl. We may ask you for additional information to verify your identity, or we may not be able to fully comply with your request due to other conditions. Circumstances may arise that prevent us from fully complying with your request, for example, due to attorneys’ duty of confidentiality or statutory retention periods.

8. Version and changes

This privacy statement was last updated on April 9, 2026. We may update this privacy statement from time to time. We therefore recommend that you review the privacy statement regularly. If there are any material changes to this privacy statement, we will provide clear notice (via our website or by informing you directly).