YELH is the law firm of mr. L.J. (Lars Braams), a Dutch lawyer (advocaat), based in Woerden, but operational throughout the Netherlands and globally.
YELH respects your personal data and ensures that the personal information provided to us or otherwise obtained is treated confidential. Personal data includes all information about a person or “data subject”. Data that indirectly says something about someone is also personal data.
YELH is in most cases an independent data controller with respect to the personal data it processes as part of its services. YELH processes personal data in order to provide services, to improve services and to communicate personally with you as a data subject.
The following implements the obligations of the GDPR to the data subject(s) whose personal data YELH processes. You can find more information about which personal data are processed by YELH below.
This privacy statement is based on the model provided by the Dutch Bar Association.
Purposes of processing personal data
YELH processes the personal data mentioned below exclusively for the following purposes:
- Entering into and performing under contracts for the provision of legal services, such as giving advice, conducting proceedings and performing other legal work;
- invoicing, debtor and creditor administration, including taking collection measures;
- advice and referral;
- complying with our legal and statutory obligations, including complying with (identification) obligations arising from the Advocatenwet (Dutch Law on Advocates) and the Wet ter voorkoming van witwassen en financiering terrorisme (Money Laundering and Terrorism Financing Act);
- communication with clients, counterparties and other parties involved in the case (such as translators, patent attorneys, experts);
- marketing activities and relationship management;
- recruitment and strategic collaborations (such as with other freelance lawyers).
What personal data is processed?
YELH processes the following (types or categories of) personal data for the purpose of providing its services:
- Identification data of which processing is necessary for the purposes named above. This concerns data such as names, functions, titles, addresses, dates of birth, gender, ID-papers, telephone numbers, e-mail addresses, photo/image materials, IP addresses, browser data and (click) behaviour on our website;
- The content of files, such as correspondence, procedural documents, recommendations, reports and various documents related to the assignment for legal services provided to us. Where appropriate, this may include the processing of special personal data or personal data relating to criminal law;
- Financial data, the processing of which is necessary for the above-mentioned purposes. This concerns data such as bank account numbers and payment details.
We may have obtained these data from the parties involved or from third parties, such as our clients, judicial authorities or counterparties or their lawyers/authorized representatives.
Legal basis for processing personal data
YELH processes the personal data mentioned above exclusively on the basis of the following grounds as referred to in Article 6 of the GDPR:
- legal obligation (for example the obligation to verify a client’s identity);
- necessity for the performance of a contract with regard to legal services (for example including personal data in an engagement letter);
- obtained consent from data subject(s);
- legitimate interest of YELH or third parties, including the clients of YELH.
Sharing personal data with third parties
YELH will only share your personal data with third parties to the extent necessary to provide its services in compliance with the aforementioned purposes. This includes, for example, the engagement of another third party, such as an IT supplier or translation agency. Personal data of such third parties may also be shared, for example if the name of the external translator is included on a document provided to a client or third party.
We also share personal data in connection with (legal) proceedings or correspondence with counterparties and their lawyers/authorized representatives. Finally, YELH may provide personal data to a third party, such as a supervisory authority or any other body entrusted with public authority, insofar as there is a legal obligation to do so.
A processing agreement shall be concluded with a party that processes your personal data on behalf of YELH, which party shall also be obliged to treat the personal data to be processed with due care. Third parties engaged by YELH, who offer services as independent data processors, are themselves responsible for the (further) processing of your personal data in compliance with the GDPR. This includes, for example, an accountant, notary public, bailiff or another third party for a second opinion or expert report.
Security of personal data
YELH attaches great importance to the security and protection of your personal data and, taking into account the state of the art, will provide appropriate technical and organizational measures to ensure a risk appropriate security level. In case YELH makes use of services of third parties, such as an IT supplier, YELH will lay down agreements on adequate security measures in a processor’s agreement for the protection of personal data.
YELH does not keep personal data that is processed by it any longer than necessary for the aforementioned purposes of data processing or as required by law and regulations. This means that personal data are kept as long as they are necessary to achieve the relevant purposes and in accordance with statutory retention obligations.
Transfer to countries outside the EEA
Personal data may be transferred to a country outside the European Economic Area (EEA) that provides a lower level of protection to personal data than the legislation in the EEA. In such case, YELH will provide for appropriate safeguards, for example by entering into a contract with the recipient of the data as approved by the European Commission or a national supervisory authority (this are standard contractual clauses).
Privacy rights of data subjects
A request for inspection, rectification, restriction, opposition, data portability, deletion of your personal data or withdrawal of previously given consent can be sent via the contact details below. You will receive further notice from us within four weeks of receipt of your request.
There may be circumstances under which YELH cannot or cannot fully implement your request as a data subject. These include the duty of confidentiality of lawyers, prevailing rights of third parties and statutory retention periods.
Your requests as referred to above can be addressed to:
You must submit a request as referred to above clearly and reasoned. To ensure that we provide the personal data in question to the correct person on the basis of your request, we will ask you to provide sufficient identification. YELH will only handle requests that relate to your own personal data.
Use of social media and website
The website of YELH (www.yelh.nl) includes buttons and/or links to promote or share web pages on social (media) networks or third party websites, such as LinkedIn. YELH does not monitor and is not responsible for the processing of your personal data by and through such third parties. The use of such media is therefore at your own risk. Before using those third party services, it is advisable to read the privacy statement of those third parties
Statistics and cookies
YELH keeps track of usage data of its website for statistical purposes. The personal data collected in this way are in principle anonymous and will not be sold by YELH to third parties.
On the website of the Authority Consumer and Market (https://www.consuwijzer.nl/telecom-post/internet/privacy/uitleg-cookies) you can read more about cookies and how you can block or remove them.
Modification of privacy statement
YELH has the right to change the content of this privacy statement at any time without prior notice. Any changes to the privacy statement will be published on this website www.yelh.nl.
For questions, comments or complaints regarding the processing of your personal data and this privacy statement, please contact us in the following manner:
If you are not satisfied with the way we handle your complaint, you can also file a complaint with the Dutch Data Protection Authority or, if you reside or work in another country of the EEA, with the supervisory authority in that country.
The current version of this privacy statement was established on 19-05-2021.