This Privacy Statement applies to all natural persons whose personal data, as meant in the General Data Protection Regulation (Regulation (EU) 2016/679; “GDPR”), is processed by Bartolus Rechtspraktijk B.V. (“Bartolus”).

Bartolus respects your personal data and ensures that the personal information provided to us or otherwise obtained by us is treated confidentially. Personal data contains all information in respect of a natural person. This includes data that indirectly relates to a natural person. This statement is to implement the obligation set out in the GDPR to inform the data subject(s) whose personal data is processed by Bartolus.

Identity and contact details

Bartolus determines the purposes and means of the processing of personal data. The contact details of Bartolus are available on Bartolus processes personal data to be able to offer services, to improve its services and to be able to communicate individually with you as a concerned party. As concerned party it is your choice to participate therein and, to that end, to enter your personal data. You can also subscribe to receive a newsletter or to receive other forms of communication from Bartolus.

Purposes of the processing of personal data

Bartolus only processes personal data for the following reasons:

  1. providing legal services, including the implementation of an agreement and the conduct of (legal) proceedings;
  2. collecting invoices;
  3. consultancy, intermediary services and referral;
  4. compliance with our legal and statutory obligations;
  5. marketing and communication activities; and/or
  6. recruitment and selection (job application).

What personal data is processed?

Bartolus processes at least the following (types or categories of) personal data for the benefit of the service or provided by the data subject on its own initiative:

  1. name;
  2. function;
  3. (email)address; and/or
  4. phone number

Bartolus processes the aforementioned personal data because these have been provided by you as a data subject on your own initiative, have been obtained in the context of the services, have been made known to us by third parties, including counterparties, or have become known through public sources.

Legal basis for the processing of personal data

Bartolus only processes personal data on the following legal bases as referred to in Article 6 of the GDPR:

  1. The person concerned has given consent to the processing;
  2. The processing is necessary for the performance of an agreement in which the person concerned is involved or in order to take steps at the request of the person concerned prior to entering into an agreement;
  3. The processing is necessary for compliance with a statutory obligation of Bartolus; and/or
  4. A legitimate interest of Bartolus or a third party.

Sharing personal data with third parties

Bartolus only shares personal data with third parties insofar as required for its services and taking into account the aforementioned purposes. This could include observation of the practice by another lawyer, carrying out an expert investigation or hiring another third party on behalf of and on behalf of Bartolus, such as an IT supplier, but also providing your personal data in connection with (legal) proceedings or correspondence with the other party.

In addition, Bartolus may provide personal data to a third party, such as a supervisory authority or another body exercising public authority, to the extent Bartolus is subject to a statutory obligation to do so.

A data processing agreement is concluded with a third party that processes your personal data on behalf of and on instructions of Bartolus, whereby that third party is also obliged to comply with the GDPR. Third parties engaged by Bartolus, who offer services as controller, are responsible for compliance with the GDPR for the (further) processing of your personal data. An accountant, civil-law notary, other third party involved can be considered for the benefit of a second opinion or expert report.

Security of personal data 

Bartolus attaches great importance to the security and protection of your personal data and will, taking into account the state of the art, implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk. In case Bartolus uses services from third parties, such as an IT supplier, Bartolus will, for purposes of protection of personal data, lay down arrangements on sufficient security measures in a data processing agreement.

Personal data retention period

Bartolus stores the personal data no longer as necessary in relation to the aforementioned purposes for which these personal data have been processed by Bartolus or as required by laws and regulations.

Rights of the data subject

You may send requests for access, rectification, restriction, objection, data portability, erasure of your personal data or withdrawal of consent already given via the contact details stated below. Bartolus will only process requests that are related to your own personal data. Please send your request to: You will receive further notice from us within four weeks of receipt of your request.

There may be circumstances due to which Bartolus cannot (fully) comply with a request made by a data subject. This may be due to the duty of confidentiality of lawyers and statutory retention periods.

Social media

Bartolus’ website includes buttons and/or links to promote or share web pages on social (media) networks or websites of third parties, such as Twitter, LinkedIn or Facebook. Bartolus does not monitor and is not responsible for the processing of your personal data by and via such third parties. The use of such media is therefore at your own risk. Before you make use of these services from third parties, we recommend to first read those third parties’ privacy statements before using their services. 

Adjustment privacy statement

Bartolus is entitled to amend the contents of this privacy statement at any desired moment without prior notification. Adjustments to the privacy statements are published on the firm’s website. We therefore recommend that you regularly check our website.

Questions or complaints about processing of personal data

Please contact Bartolus for questions or complaints about the processing of the personal data by Bartolus and this privacy statement.