Privacy Policy

1. Controller

JOUHAR EXPERTISE BUREAU
Soest office: Oostergracht 42, 3763 LZ Soest · +31 35 220 30 00 · soest@jouharbureau.nl
Amsterdam office: Hildegard von Bingenstraat 44, 1081 LH Amsterdam · +31 20 211 71 10 · amsterdam@jouharbureau.nl
Postal address: Postbus 3033, 3760 DA Soest, The Netherlands
Email (privacy): privacy@jouharbureau.nl
Chamber of Commerce number: 82552754

For questions, requests or complaints about this privacy policy, the processing of your personal data or compliance with privacy legislation (GDPR), please contact us at privacy@jouharbureau.nl.

2. Personal data we process

JOUHAR EXPERTISE BUREAU processes personal data because you use our services and/or because you provide this data to us directly. We process the following categories of personal data:

• First and last name
• Address details
• Telephone number
• Email address
• Date of birth (where relevant to the provision of services)
• Citizen service number (BSN) (exclusively for tax-related services)
• Financial data (income, expenditure, assets)
• Business data (Chamber of Commerce number, VAT number, turnover)
• Bank details (for payment processing)
• Data about your activities on our website
• Other personal data you actively provide in correspondence, telephone communications or via forms on our website

3. Special and/or sensitive personal data

Our website and/or service does not intend to collect data about website visitors under the age of 16, unless they have the consent of a parent or guardian. However, we cannot verify whether a visitor is over 16 years of age. We therefore encourage parents to be involved in the online activities of their children.

In the course of our tax and financial services, it may be necessary for us to process sensitive data, such as your citizen service number (BSN). We do so only where this is required by law for the performance of our services.

4. Legal bases for processing

JOUHAR EXPERTISE BUREAU processes your personal data on the basis of the following legal grounds under Article 6 of the GDPR:

• Performance of a contract: when you engage us for accounting, tax advisory, financial consulting, administration or professional translation services.
• Legal obligation: for the fulfilment of fiscal and administrative retention obligations, the filing of tax returns and other statutory obligations.
• Legitimate interest: for the improvement of our services, the security of our systems and the maintenance of client relationship management.
• Consent: when you give your explicit consent, for example for receiving information about our services. You may withdraw this consent at any time.

5. Purposes of processing

JOUHAR EXPERTISE BUREAU processes your personal data for the following purposes:

• Keeping financial administrations and bookkeeping and preparing financial reports
• Preparing tax returns and providing tax advisory services
• Providing business and financial advisory services
• Performing financial intermediation services
• Providing professional translation services
• Processing your payments
• Maintaining contact by telephone, email or post
• Informing you of changes to our services
• Fulfilling statutory obligations
• Handling disputes and exercising legal rights

6. Retention periods

JOUHAR EXPERTISE BUREAU does not retain your personal data for longer than is strictly necessary to fulfil the purposes for which your data is collected. We observe the following retention periods:

• Tax records and financial administration: 7 years after the relevant tax year (statutory obligation under the General Tax Act).
• Contractual data and correspondence: 7 years after termination of the agreement.
• Application data: a maximum of 4 weeks after completion of the procedure, unless you consent to a longer retention period.
• Website data and cookies: see our Cookie Policy.
• Contact form data: 2 years after the last contact, unless an agreement is entered into.

Upon expiry of the retention period, your data will be securely deleted or anonymised.

7. Sharing personal data with third parties

JOUHAR EXPERTISE BUREAU only discloses personal data to third parties where this is necessary for the performance of our agreement with you, to comply with a legal obligation or with your express consent. We may share your data with:

• The Dutch Tax and Customs Administration and other government authorities (statutory obligation)
• Financial institutions (in the context of financial intermediation, with your consent)
• Software providers for accounting systems (processors on the basis of a data processing agreement)
• Our hosting provider (processor on the basis of a data processing agreement)

With all parties that process your data on our behalf, we enter into a data processing agreement to ensure an equivalent level of security and confidentiality for your data.

8. Transfers outside the EEA

JOUHAR EXPERTISE BUREAU endeavours to process your personal data exclusively within the European Economic Area (EEA). Should a transfer to a country outside the EEA be necessary, we shall ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision of the European Commission.

9. Automated decision-making

JOUHAR EXPERTISE BUREAU does not make decisions based on automated processing on matters that may have significant consequences for individuals. These are decisions made by computer programs or systems without human intervention. We do not make use of profiling.

10. Your rights as a data subject

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access: you may request information about which personal data we process about you.
• Right to rectification: you may request the correction of inaccurate or incomplete data.
• Right to erasure: you may request the deletion of your personal data.
• Right to restriction of processing: you may request that the processing of your data be restricted.
• Right to data portability: you may request to receive your data in a structured, commonly used and machine-readable format.
• Right to object: you may object to the processing of your personal data.
• Right to withdraw consent: where processing is based on your consent, you may withdraw this at any time.

You may submit a request by sending an email to privacy@jouharbureau.nl. We shall respond to your request as promptly as possible, but no later than within four weeks. We may ask you to verify your identity before processing your request.

11. Filing a complaint with the supervisory authority

We take the protection of your data seriously and handle every complaint with care. Should you be dissatisfied with the manner in which we handle your personal data, you may file a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
PO Box 93374
2509 AJ The Hague
Telephone: 088 - 1805 250
Website: autoriteitpersoonsgegevens.nl

12. Security of personal data

JOUHAR EXPERTISE BUREAU takes the protection of your data seriously and implements appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. Our security measures include, among others:

• Encrypted connections (SSL/TLS) for all data transmission
• Access to personal data restricted on a need-to-know basis
• Regular backups of systems and data
• Secure storage of physical files
• Awareness training for staff in the areas of privacy and information security

If you believe your data is not adequately protected or there are indications of misuse, please contact us immediately at privacy@jouharbureau.nl.

13. Cookies

JOUHAR EXPERTISE BUREAU uses only technical and functional cookies. We refer you to our separate Cookie Policy for further information about the use of cookies on our website.

14. Changes to this privacy policy

JOUHAR EXPERTISE BUREAU reserves the right to amend this privacy policy. We recommend that you review this privacy policy regularly so that you remain informed of any changes. The most current version of the privacy policy is always available on our website. In the event of material changes, we shall actively inform you.