Privacy statement

This privacy statement describes how Law Firm Penn treats the privacy of individuals involved in its business (including clients, visitors to its websites, subscribers to its newsletter, participants in workshops or seminars, job applicants and other relations). This privacy statement describes how Law Firm Penn processes personal data and how data subjects can exercise their rights under the General Data Protection Regulation (AVG).

1. Processing of personal data

In the context of our legal services, we process personal data. Law Office Penn is the data controller within the meaning of the AVG and has the following contact details:

Law firm Penn
Attn: Mr D.M. Penn
Markt 14
6211 CJ Maastricht

The processing of personal data by Penn Law Firm is done in accordance with privacy regulations and in the manner described in this privacy statement.

A. Clients and stakeholders

As part of our legal services, we may process the following personal data of our clients or data subjects: name and address details, gender and titles, contact details (such as e-mail address and telephone number), business details (such as company name, trade register extract and VAT number), passport photo/copy of passport and bank details.

We base the processing of your personal data in principle on Article 6 under b of the AVG, namely to be able to perform the engagement agreement we have with you, such as giving advice, conducting proceedings for clients, settling bankruptcies or other legal work. In addition, we process personal data to comply with legal obligations, such as administration or identification obligations (Lawyers Act or Money Laundering and Terrorist Financing (Prevention) Act) or tax obligations. We may also process personal data to promote our legitimate interests, such as improving our services. If your personal data are processed on the basis of consent, you will be explicitly asked for permission.

B. Website visitors

Any website visitor may leave contact details on the Penn Law Firm website as part of our online service We will then use these details to contact you and retain these details as necessary to answer your query.

C. Cookies

Advocatenkantoor Penn maintains usage data of the website(s) for statistical purposes. The personal data collected in this way are in principle anonymous. The website of Advocatenkantoor Penn uses cookies from Google Analytics to track user behaviour and general trends and to obtain reports. This helps to improve the functioning of the website. Google may provide this information to third parties if Google is legally obliged to do so or insofar as third parties process the information on Google's behalf.

Google is a member of the EU-U.S. Privacy Shield Framework. By using the Penn Law Firm website, you consent to the processing of the information by Google in the manner and for the purposes described above. Cookies are also set by the use of buttons and/or links, as described above under 'Use of social media'. Advocatenkantoor Penn has no influence on the placement and use of cookies by those third parties.

Use social media plugins

Pages on our website are shareable on LinkedIn, Twitter and Facebook. Law Firm Penn does not monitor and is not responsible for the processing of your personal data by and through such third parties. Use of those media is therefore at your own risk. Before using those third-party services, it is advisable to read the privacy statement of those third parties.

D. Applicants

Vacancies at Law Firm Penn are published on the websites of Law Firm Penn or via social networks. Applications can be made in writing or by e-mail, or, where appropriate, via a form on the website. In the context of job applications, we process name and address details, e-mail address, telephone number, date of birth, gender, application data (CV, motivation letter, marksheets, internship reports) and any other data (whether or not requested in the context of the application). We process these data in our records on the basis of the legitimate interest of Law Firm Penn, which consists of finding suitable staff. The data are not provided for other purposes and only to those entrusted with the recruitment and selection activities at Law Firm Penn or involved by it. Open applications are processed in a corresponding manner.

E. Other relationships

When it comes to suppliers or other service providers, Law Office Penn may process personal data such as name and address, telephone number, e-mail address as well as bank account number that are necessary for deliveries or the purchase of services. We process these data to be able to perform the agreement or to comply with legal obligations, such as keeping records or for auditing purposes.

2. Your personal data and third parties

Advocatenkantoor Penn only shares your personal data with third parties to the extent necessary for the provision of services in accordance with the aforementioned purposes. This could include engaging another third party on behalf of and at the behest of Law Firm Penn, such as an IT supplier, bailiff or courier or judicial authorities. In addition, Law Office Penn may provide personal data to a third party, such as a regulator or another body vested with public authority, insofar as there is a legal obligation to do so.

A processing agreement will be concluded with the third party processing your personal data on behalf of and at the instructions of Law Office Penn, whereby that third party is also obliged to comply with the AVG. Third parties engaged by Advocatenkantoor Penn, who offer services as processors, are themselves responsible for the (further) processing of your personal data to ensure compliance with the AVG. This could include an accountant, notary, other third party engaged for the purpose of a second opinion or expert report.

3. Security

Advocatenkantoor Penn attaches great importance to the security and protection of your personal data and, taking into account the state of the art, ensures appropriate technical and organisational measures to ensure a risk-appropriate level of security. In the event that Advocatenkantoor Penn uses services of third parties, such as an IT supplier, in the context of the protection of personal data, Advocatenkantoor Penn will lay down agreements on adequate security measures in a processing agreement. If Law Office Penn transfers data outside the EEA, this will only be done to countries for which an adequacy decision applies, if the recipient is certified for the EU-US Privacy Shield (such as Google and MailChimp), if we have an agreement with a recipient that includes model provisions set by the European Commission or if this is necessary for the performance of the agreement we have with you.

4. Retention period

Advocatenkantoor Penn retains personal data that are processed for no longer than is necessary for the aforementioned purposes of data processing or is required under laws and regulations. Client files are in principle kept for five years.

5. Privacy rights

A request in connection with the exercise of privacy rights (such as inspection, correction, restriction, opposition, transferability of data, deletion of your personal data or withdrawal of previously granted consent) can be made to advocaat@penn.nl o.v.v. 'Exercise of privacy rights' or by post to Advocatenkantoor Penn, o.v.v. 'Exercise of privacy rights', Markt 14, 6211CJ Maastricht. For verification purposes, we may ask you for proof of your identity. We aim to respond to your request within one month.

There may be circumstances in which Law Firm Penn cannot or cannot fully comply with your request as a data subject. These include lawyers' duty of confidentiality and legal retention periods. If you are of the opinion that our processing of your personal data infringes the privacy regulations and after reporting this, no solution is found to your complaint, you can file a complaint with the privacy regulator, the Authority for Personal Data.

6. Changes and questions

We may amend this privacy statement at any time and will always publish the latest version on our website. We therefore recommend that you check our website regularly.

If you have any questions about this privacy statement or about your privacy, please contact us by e-mail (advocaat@penn.nl) attaching 'Privacy Statement Law Firm Penn' or by post at the address below.

Law firm Penn
please mention privacy statement
Markt 14
6211CJ Maastricht