Privacy Statement Osprey Advocaten

1. Introduction

   In this Privacy and Cookie Statement, you can find information about the processing of personal data by the (legal) persons acting under the trade name Osprey Advocaten (hereinafter: “Osprey Advocaten” or “we”). This Privacy and Cookie Statement applies to all personal data processed by or on behalf of Osprey Advocaten when you use our services, attend our events, visit our websites Ospreyadvocaten.com, Ospreyadvocaten.nl, Ospreylegal.nl (hereinafter collectively referred to as: “Websites”), or otherwise communicate or interact with us.

   When offering our Websites, we use cookies and similar technologies (hereinafter collectively referred to as “cookies”). In this Privacy and Cookie Statement, we also inform you about what cookies are, how we use cookies on our Websites, and how you can manage these cookies. For more information, see paragraph 8.

2. Processing by Osprey Advocaten

   Osprey Advocaten is the controller with regard to your personal data within the meaning of the General Data Protection Regulation (hereinafter: “GDPR”). This means our firm has certain legal duties and responsibilities for processing activities.

   This Privacy and Cookie Statement addresses the rights you have as a data subject with regard to the processing of your personal data.

   What is relevant to you depends on your relationship with Osprey Advocaten:

   • If you are a client of Osprey Advocaten, paragraph 3 is relevant.
   • If you supply goods or services to Osprey Advocaten, see paragraph 4.
   • If you are a visitor to Osprey Advocaten, see paragraph 5.
   • If you have subscribed to receive mailings from Osprey Advocaten, or are interested in information, see paragraph 6.
   • If you have shared your contact details with Osprey Advocaten, see paragraph 7.
   • If you are a visitor to our Websites, see paragraph 8.
   • If you wish to apply or have applied for a position at Osprey Advocaten, see paragraph 9.

   In each of the above-mentioned paragraphs of this Privacy and Cookie Statement, we describe:

   • The individuals whose data is processed,
   • The types/categories of personal data processed,
   • How the personal data is processed, and
   • The persons/parties to whom the personal data may be disclosed.

3. If you are a client of Osprey Advocaten

   1. How do we collect your personal data, what personal data do we collect, and why?

      Under applicable law, all legal and financial service providers, including Osprey Advocaten, must hold information and/or documents enabling them to establish the identity of their clients. In the course of our services, we collect personal data from, among others, clients, client contacts, witnesses, experts, counterparties, counterparties’ contacts, lawyers and advisors of counterparties, and individuals whose personal data is included in a case file.

      Osprey Advocaten collects specific information to comply with our legal obligation to verify the identity of our clients and to report unusual transactions. We do so under anti-money laundering legislation (Wwft), the Code of Conduct for Lawyers, and in the execution of agreements. For example, we are required to verify the status of identity documents and, if necessary, share information with relevant authorities.

      We may also process data relating to (contacts of) our clients within the scope of our client relationship.

      We process this data to perform the services we provide to clients. If the client is a natural person, our processing is based on the necessity of performing the agreement entered into with that person. If the client is a legal entity, we base our processing on our legitimate interest in performing the agreement entered into with the client (who is not the data subject).

   2. How long do we retain your personal data?

      Your personal data collected in connection with client relationships or case files will be retained for up to 20 years.

   3. With whom do we share your personal data?

      Where relevant, we share your personal data with the Financial Intelligence Unit, debt collection agencies, relevant (tax) authorities within the EU, and third parties insofar as required for the purposes outlined above or where these third parties assist us. The recipients of your personal data are located in countries within the European Economic Area, under the protection of the GDPR.

4. If you supply goods or services to Osprey Advocaten

   1. How do we collect your personal data, what personal data do we collect, and why?

      When you or your employer supplies goods or services to Osprey Advocaten, we process certain information obtained from you, such as your name, email address, and job title. We use this data to process invoices, allow for auditing, or comply with legal obligations.

      Where processing of personal data is necessary for the performance of the agreement, suppliers acting as processors are required to accept the data processing agreement proposed by Osprey Advocaten.

      We process this data to execute the agreement. The legal basis for processing invoices is our legitimate interest in maintaining financial records. We may also process your personal data to comply with legal obligations.

   2. How long do we retain your personal data?

      We do not retain your data longer than necessary for the performance of the agreement.

   3. With whom do we share your personal data?

      We only share your personal data with our accountant, with authorities such as the tax authorities where legally required, or where we have obtained your explicit consent.

5. If you are a visitor to Osprey Advocaten

   1. How do we collect your personal data, what personal data do we collect, and why?

      Personal data use

      Personal data	Purpose
      Name (including initials)	For proper addressing
      Address (business and private)	To contact you
      Position or profession	For proper addressing and personalisation
      Title(s)	For proper addressing
      Email address	To contact you
      Phone/mobile number	To contact you
      Gender	For addressing
      Link to LinkedIn profile/td>	To keep your details up to date
      Areas of interest (practice areas, topics, and/or sectors, only if provided by you)	To personalise digital communications and ensure relevance
      (Previously) sent newsletters, white papers, event invitations	To verify accuracy of communications and improve future mailings
      Opt-in	To correctly register and respect your subscription preferences
      Opt-out	To correctly register and respect your opt-out, ensuring no unwanted communications
      Click behaviour (linked to name)	To analyse engagement and improve communications

      If you visit the offices of Osprey Advocaten, you are required to identify yourself. The receptionist verifies your identity with your passport or ID card.

   2. How long do we retain your personal data?

      If you visit the office, your name and purpose of visit are stored in the system for 48 hours.

   3. With whom do we share your personal data?

      In exceptional cases, such as criminal offenses, we may share relevant personal data with the police, judiciary, or security/intelligence services. We will also provide personal data to competent authorities when legally required and may use such data as evidence in legal proceedings, disclosing it to courts and counterparties.

6. If you have subscribed to newsletters or requested general information from Osprey Advocaten

   Osprey Advocaten aims to meet the needs of its clients at the highest quality level. We are pleased to share our knowledge and keep interested parties informed.

   1. How do we collect your personal data and why?

      We may collect information about you:

      • Directly from you, such as when you sign up for newsletters;
      • From public or otherwise accessible sources, such as LinkedIn or your employer’s corporate website;
      • Through cookies (set when you sign up for newsletters or visit our website). See paragraph 8 for more information.

      We process your personal data relating to newsletters and mailings based on your consent. We aim to inform you of legal developments relevant to you, using your information to better understand your preferences and tailor our communications.

   2. How long do we retain your personal data?

      We retain your personal data until you notify us that you no longer wish to receive our mailings, Osprey Advocaten stops sending the newsletters in question, or it becomes clear that your email address is no longer in use.

   3. With whom do we share your personal data?/h3>

      Osprey Advocaten does not share your personal data with third parties.

7. If you have shared your contact details with Osprey Advocaten

   1. How do we collect your personal data, what personal data do we collect, and why?

      If you have given your business card to (an employee or partner of) Osprey Advocaten or otherwise provided your contact details to us, we process your data such as name, contact details, company, job title, and your contact person at Osprey Advocaten. We use this data to contact you, for example, to ask whether you wish to subscribe to our information or to send you specific information you requested.

      We process this data based on your consent (by actively providing your details for a specific purpose).

   2. How long do we retain your personal data?

      We retain your data until you request deletion.

   3. With whom do we share your personal data?

      We do not share your personal data with third parties unless you have given explicit consent.

8. If you are a visitor to our Websites

   How do we collect your personal data, what personal data do we collect, and why?

   Your personal data may be used to improve our Websites, for marketing purposes, and for social media sharing.

   1. Cookies

      To optimise visits to our Websites, we collect anonymous visitor statistics using cookies. We use cookies to personalise content and ads, provide social media features, and analyse traffic. We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine this with other information you have provided or that they have collected from your use of their services. You can set your preferences in the cookie settings. You only need to do this once (unless you clear your temporary files). You can change your settings at any time by clicking the paperclip in the lower left corner of the Website.

   2. What are cookies?

      Cookies are small text files used by websites to make user experiences more efficient. By law, we may store cookies on your device if they are strictly necessary for the operation of the site. For all other types of cookies, we need your consent. Some cookies are placed by third-party services appearing on our pages. Collected data cannot be traced to individuals and does not contain personal data. All IP addresses are anonymised. There are 4 types of cookies:

      1. Necessary cookies

         Required for proper functioning of the Website, enabling basic functions such as page navigation and access to secure areas. Not shared with third parties.

      2. Preference cookies

         Enable a website to remember information that changes how the website behaves or looks, such as preferred language or region.

      3. Statistical cookies

         Help website owners understand how visitors interact with their sites by collecting anonymous data.

      4. Marketing cookies

         Used to track visitors across websites to display personalised, relevant ads.

9. If you wish to apply or have applied for a position at Osprey Advocaten

   1. How do we collect your personal data, what personal data do we collect, and why?

      We may obtain your personal data from:

      • You directly, when applying for a position;
      • A contact or web form, or during meetings, events, or conferences;
      • An external recruitment agency;
      • Public sources such as social media or your employer’s website.

      Personal data use

      Personal data	Purpose
      Name (including initials)	Proper addressing
      Title(s)	Proper addressing
      Email address	Contacting you
      Phone/mobile number	Contacting you
      Gender	Proper addressing
      Education	Matching suitability
      LinkedIn profile	Keeping data up to date
      CV	Application assessment
      Motivation letter	Application assessment
      Transcripts	Application assessment
      Assessment results	Application assessment
      Evaluation forms (internship, work placement, or current job)	Application assessment
      Thesis	Application assessment
      Other documents you provide	Application assessment

      We process your personal data for filling vacancies and recruitment purposes, based on your consent or our legitimate interest.

   2. How long do we retain your personal data?

      • For applications: up to 4 weeks after the procedure ends, if you withdraw, or if you are not selected. After this, your documents (e.g. CVs, letters, assessments) are permanently deleted.
      • For recruitment events: with your consent, up to 1 year after the event, for other events or potential vacancies.

      Your personal data will also be deleted if:

      • Your email address is no longer valid; or
      • You withdraw consent for processing.

   3. With whom do we share your personal data?

      We use external service providers for applicant screening. Where relevant, we share your data with them to contact you.

      We do not share your data with third parties for commercial purposes. If we organise an activity with another party, we only share necessary contact details for that event.

      1. Data protection & security

         Osprey Advocaten always places the client’s interests first. It is essential that the confidentiality, integrity, and availability of our client information are safeguarded at all times by managing the risks to which it is exposed, in compliance with applicable laws, regulations, and internal standards.

      2. Changes to this Privacy Statement/h2>

         Osprey Advocaten reserves the right to amend this Privacy Statement at any time and for any reason. We therefore advise you to check this section of our Website regularly.

      3. Rights of data subjects

         You may request information and access to your personal data and object to our processing of your personal data. Under certain circumstances, you also have the right to request rectification or deletion of your personal data, to restrict processing, to receive your personal data in a structured, commonly used, and machine-readable format, and to have your personal data transmitted to another organisation.

         If you have questions, comments, or complaints about this Privacy Statement or our processing of your personal data, please contact your regular contact at our firm. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) if you suspect non-compliance with privacy legislation.

         This Privacy Statement was last updated September 2025.