Privacy statement Arrow Advocaten

This privacy statement provides further information about the processing of personal data by Arrow Advocaten B.V. (Arrow). Arrow is the controller, as referred to in the General Data Protection Regulation (GDPR), for the processing activities described below. Arrow's contact details are:

Arrow Advocaten B.V.
H.J.E. Wenckebachweg 200
1096 AS Amsterdam
info@arrowlegal.nl

This privacy statement was last amended on 6 September 2026.

If you have any questions about the way we handle your personal data, please contact Anita Nijboer, nijboer@arrowlegal.nl. Information about your rights under the GDPR can be found at the end of this privacy statement.

Data and processing
Arrow processes personal data for the provision of legal services, including conducting (legal) proceedings, advising, mediation, internal knowledge sharing and referrals. For this purpose, Arrow processes, among other things, the contact details of clients and clients' contact persons, opposing parties and their contact persons and lawyers, and others involved in a matter, such as experts, etc.
Arrow also processes personal data for the collection of invoices. For this purpose, it processes, among other things, the contact details of clients and clients' contact persons.
Arrow also processes personal data for marketing and communication activities. The purpose of this processing is to establish and maintain contact with (potential) relations through mailings, newsletters, distributing a message via social media, or invitations to events. For this purpose, it processes, among other things, the name, job title and email address of the data subject.
Personal data of suppliers and/or persons working for them is further processed in order to order and purchase goods and services.
Arrow also processes personal data for recruitment and selection (job applications). For this purpose, it processes, among other things, the contact details and information provided by the data subject, such as the cover letter and CV.

Finally, Arrow processes personal data in order to comply with its statutory obligations, including the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft). For this purpose, it processes the personal data of the client's contact persons and the ultimate beneficial owner(s) of the client, to the extent it is required to do so under applicable laws and regulations. The provision of personal data by Arrow to comply with statutory obligations is a necessary condition for entering into an agreement with the client.
Arrow will not use personal data for any other purposes.

What personal data do we process?

• Name, address, telephone numbers, email addresses, and other communication details of our clients;
• A copy of the identity document of our clients, with the citizen service number (BSN) redacted;
• Data from public registers such as the Trade Register or the Land Registry, including Chamber of Commerce (KvK) and VAT numbers;
• Data of opposing parties, their lawyers/authorized representatives and other persons involved in a matter;
• Any other personal data you provide to us that is necessary for the performance of the engagement;
• Bank account numbers and other data needed to send and collect invoices and make payments.

This personal data is provided to us by you on your own initiative or pursuant to laws and regulations, obtained in the course of providing our services, disclosed to us by third parties (including opposing parties), or has become known to us through public sources.

Arrow may process this data:

• if it has obtained consent from the data subject for this purpose (in which case that consent can always be withdrawn);
• for the performance of an agreement, or in order to take steps at the request of the data subject prior to entering into an agreement;
• on the basis of a statutory obligation; or
• on the basis of the legitimate interests pursued by Arrow or by a third party.

Arrow does not retain personal data for longer than necessary, or for longer than required under applicable laws and regulations, for the purposes of the processing referred to above. For personal data stored in connection with the provision of legal services, financial administration and complaints handling, a retention period of 20 years applies. For all other purposes for which personal data is stored, this data is not stored for longer than necessary, or for longer than required under applicable laws and regulations.

Sharing personal data with other parties
Arrow only shares your personal data with third parties to the extent necessary for the provision of its services, in accordance with the purposes referred to above.

First, in processing personal data for itself, Arrow makes use of the services of third parties. To keep track of the work performed, it uses a provider of time-recording and invoicing software. For its financial administration, it uses the services of an accountant/tax advisor. It uses an email provider for sending and receiving emails. It also uses a service provider to recognize and filter unsafe emails, and uses an antivirus service provider to secure Arrow's IT systems at its office. It uses a hosting provider to publish its website. In addition, Arrow uses a back-up service.

Arrow also provides data to other parties who are themselves responsible for it. This includes, for example, having an expert assessment carried out or providing your personal data in connection with (legal) proceedings or correspondence with the opposing party. In addition, Arrow may provide personal data to a third party, such as a supervisory authority or another body vested with public authority, to the extent that a statutory obligation exists to do so.

Website
On our website, we use functional cookies to enhance ease of use. We also use analytical cookies (Google Analytics), but only in anonymized form. These cookies do not collect any personal data.
If our website directs you to another website, it is possible that this other website does collect and process personal data. We have no control over this. The company concerned is responsible for protecting your personal data on that other website. Information about this can, in such a case, be found in that company's privacy statement.

What are your rights?
You have the right to:

• access the personal data we process about you;
• correct your personal data if it is incorrect, supplement it, or (in certain cases) restrict its processing;
• obtain your personal data in a structured, commonly used and machine-readable format (data portability);
• object to the processing of personal data based on a legitimate interest;
• withdraw consent that has been given.

Such a request, objection or notice can be sent by email to Anita Nijboer, nijboer@arrowlegal.nl, or by post to Arrow Advocaten, H.J.E. Wenckebachweg 200, 1096 AS Amsterdam. In order to ensure that we provide the relevant personal data to the correct person based on your request, we ask you to submit, for verification purposes, a copy of a valid passport, driving licence or identity card, with the photo and citizen service number (BSN) redacted. Arrow will only process requests that relate to your own personal data. We will respond to your request as soon as possible, but in any event within 1 month of receipt. We will comply with your request as far as possible and, if this is not possible, will clearly explain why not.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your personal data is not being handled with due care; see https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-over-gebruik-persoonsgegevens

Amendment of this privacy statement
We may amend this privacy statement from time to time. Material amendments will be published on the website of Arrow Advocaten (www.arrow-advocaten.nl).

Limitation of liability
Arrow makes every effort to update and/or supplement the content of the website as often as possible. Despite this care and attention, it is possible that the content is incomplete and/or incorrect. The information and/or materials offered on the website are provided without any form of warranty or claim to accuracy. These materials may change at any time without prior notice from Arrow.
This concerns general information and not advice. No liability is accepted for the consequences of errors. The content of our website may only be used for your own purposes. Any other use, including commercial exploitation of this information, is not permitted. Arrow can never accept liability for hyperlinks included on the website to websites or services of third parties.

Your data is protected with the utmost care; nevertheless, Arrow cannot be held liable for negative or illegal external influences. Arrow does, however, strive to maintain as secure an environment as is reasonably possible.