Privacy policy

Heron Legal B.V. (“Heron Legal”, “we”, “us”) acts as a data controller under the General Data Protection Regulation (“AVG”), the relevant GDPR implementing laws and other applicable laws and regulations. That's why we want you to have a clear idea of how we use your personal information, how you can access your personal information, and how to protect your privacy. We are trying to achieve this through this Privacy Statement.

In this Privacy Statement, you can find:

What personal data we keep and/or collect, and why we collect it;
How we use that personal data;
Your options for accessing, updating or deleting your personal information;

We recommend that you read this Privacy Statement carefully. In the future, we may be required to amend this Privacy Statement. The most recent version of this Privacy Statement can be found on our website at https://www.heronlegal.com. In the event of significant changes to the Privacy Statement, we may also notify you by email.

If you have any questions about this Privacy Statement, you can also email us at office@heronlegal.com at any time.

Whose personal data do we collect?

Customers

We collect and store essential information about our customers to the extent required by law and to fulfill our contractual obligations with them.

Marketing, Communication and Website Visitors

With regard to marketing and other forms of communication, we collect your personal data because you are or have been a customer of ours, you have visited our website and signed up for our means of communication, or you are otherwise a valued contact of ours. For this purpose, we process your personal data in our relationship management system. From time to time, we provide you with information, including news reports, event invitations, or targeted communications that we think will be of interest to you. In addition, we can approach you for a targeted marketing campaign using data obtained from external sources (e.g. Kvk, LinkedIn). At all times, we strive to send you only the most relevant information and to personalize our forms of communication as much as possible. You can unsubscribe from our emails at any time by clicking “unsubscribe” at the bottom of each digital newsletter. Under no circumstances do we share your personal data for commercial purposes or sell your email address or other personal information.

How do we collect your personal data?

We may collect personal data:

that we obtained directly from you, for example the information you provided to us to sign up for the newsletter or via your business card that we obtained through direct interaction with you (by email, phone, letter);
when you enter into an agreement with us;
that we have obtained from other sources, such as a third party such as a law firm, the trade register, LinkedIn, or company websites.

What are the legal grounds for collecting your personal data?

There are 6 legal bases for collecting and processing personal data:

Your consent — that goes without saying;
Contractual obligations — that we have entered into with each other;
Our legitimate interest — (e.g. managing and administering relationships with our customers including marketing activities);
Legal obligation — sometimes we are legally obliged to process personal data, for example for identification purposes;
Vital interest — it is in your vital interest that we keep some of your personal information — for example, information about allergies;
Public interest — if required by a public authority or in the public interest.

Generally, we will collect and process personal data based on your consent, contractual obligations, our legitimate interest and to comply with legal obligations.

What personal data do we collect about you?

Basic information (such as your name, gender, title, position, employer, relationship with Heron Legal);
Contact details (email address, address, phone number);
Link to your LinkedIn profile;
Your contact person at Heron Legal;
Data that is necessary for billing;
Personal data provided to us during the service (this may include special personal data such as a passport number, social security number);
Marketing lists that include you based on your interests;
Opt-in/opt-out for means of communication (e.g. newsletter, etc. );
Whether you open our emails and/or click on any links attached;
Information about your visit to our website;
Other relevant personal data that you have provided to us;
Photos (e.g. taken at our drinks or events).

For what purpose do we collect your personal data?

We collect your personal data:

to address our communication to you correctly;
to adequately process and answer any questions or complaints you may have;
to maintain and administer our relationship with you;
to comply with regulatory and policy requirements;
to provide the services you require;
to find out which services might interest you more;
to communicate with you about our services;
to improve the service on our website by using statistics about browsing behavior on our website;
to monitor and analyse business processes and systems;
to process your application;
for business development purposes;
to improve our communication;
to invite you to events.

Who do we share your personal data with?

Our partners in the EU

In connection with one or more of the purposes listed above, we may share your personal data with third parties, for example if this is necessary to comply with the contractual obligations entered into with you. In any case that we share your personal data with a third party, we will ensure that party is contractually obliged to handle and protect your personal data carefully.

Our partners outside the EU

In principle, we do not share your personal data with parties outside the European Union, because those countries may not provide adequate protection for your data. However, it is possible that we work with a party that is located outside the EU in the execution of the agreement that has been concluded with you. In these cases, when your personal data is shared with parties outside the EU, we will ensure that measures are taken to ensure adequate protection of your data.

Law enforcement agencies

We reserve the right to disclose your personal information to the law enforcement authority that requests it in connection with a committed offence. We will only disclose your personal information if we can reasonably have sufficient confidence in the circumstances surrounding the request.

How long do we keep your personal data?

We will not keep your personal data longer than necessary for the purposes set out in this Privacy Statement. Your personal data will be kept in accordance with our retention policy, which is available upon request. The retention period for each category of personal data is based on regulatory and policy requirements and the purpose for which the data was collected and used.

How do we protect your personal information?

To prevent loss and any other form of unlawful processing of your personal data, we have taken appropriate technical and organizational measures. The latest version of our protection policy is available upon request.

What are your rights and how can you exercise them?

The GDPR provides certain rights for data subjects whose personal data is collected and processed. As a data subject, you have the right:

on information about and access to your personal data;
rectify and correct your personal data;
request the deletion of your personal data (“the right to be forgotten”);
to restrict or object to the processing of your personal data;
to request your personal data in an orderly manner and to send it (or have it sent) to another organization;
objecting to profiling;
to withdraw your consent to further future processing of your personal data insofar as that processing takes place on the basis of your consent.

If you want to exercise one or more of your rights, please contact our Privacy Officer. The contact details of our Privacy Officer can be found at the bottom of this Privacy Statement.

Finally, you also have the right to file a complaint with the Dutch Data Protection Authority.

Contact

If you have any questions, comments or complaints regarding this Privacy Statement or our processing of your personal data, please contact your regular contact person at Heron Legal or our Privacy Officer at the following email address: office@heronlegal.com or by mail to:

Heron Legal B.V.
Attn: Privacy Officer
64b Park Avenue
5613 BH Eindhoven
Netherlands