Westerlaan 14
3016 CK Rotterdam

+31 10 313 39 00

Privacy statement

Hoboken Law Firm attaches great importance to the protection of your personal data. In this privacy statement, we explain which personal data we process, for what purposes, and what rights you have. We process your personal data carefully and in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

This privacy statement is intended to inform you about which personal data we collect, how we handle this personal data, and what rights you have in this regard.

This privacy statement applies to:

  • visitors to our website;
  • (prospective) clients.

We may amend this privacy statement, for example due to changes in our services or applicable laws and regulations. The most current version is always available on our website. You may request a previous version of the privacy statement at any time. We recommend that you regularly visit this website to ensure that you have the most recent version, particularly when you share personal data with us.

1. Who is responsible for personal data?

Hoboken Law Firm is the data controller responsible for processing your personal data.

Hoboken Law Firm
Westerlaan 14
3016 CK Rotterdam
Telephone: +31 10 313 39 00
Email: info@hoboken.nl

2. Which personal data do we collect?

2.1 Website
When you visit our website or contact us by email or telephone, we may process the following data:

  • name and contact details (such as email address and telephone number);
  • content of your message or enquiry;
  • technical data such as IP address, browser type and cookie data (see section 6).

2.2 Clients and legal services
In the context of our legal practice, we may process:

Identification data
Name, address, date of birth, copy of identity document

Contact details
Email address, telephone number, postal address

Financial data
Bank account number, invoice details

Case file data
Correspondence, procedural documents, legal advice

Depending on the area of law, special categories of personal data may be processed in exceptional cases, for example in employment disputes involving medical aspects or cases with a criminal component. We process such data only insofar as necessary for handling your case.

We may also receive personal data from third parties, including:

  • Opposing parties and their lawyers
  • Courts and other judicial authorities
  • Bailiffs and administrators
  • Public sources (Chamber of Commerce, Land Registry)

2.3 Job applications
When you apply for a position, we may process the following personal data:

Identification data
Name, address, date of birth, place of birth, copy of identity document

Contact details
Email address, telephone number, postal address

Technical communication information
IP address, device type, browser type, language settings, clicked links, dates and times of website use

Application-related data

  • Information about your competencies, skills, experience and education (CV, cover letter, employment history, qualifications, references)
  • Preferences (e.g. areas of interest)
  • Data from participation in assessments (you will be informed beforehand)
  • Pre-employment screening information (depending on the position)
  • Nationality and right to work in the Netherlands
  • CCTV images when visiting our office
  • Information from social network accounts (such as LinkedIn)

3. For what purposes and on what legal basis do we process your data?
We process your personal data only for specific, explicit and legitimate purposes, based on a legal ground as required by the GDPR.

We process your data for the following purposes:

  • performance of a client engagement agreement;
  • protecting your legal interests (in legal proceedings);
  • compliance with legal obligations (such as tax obligations and anti-money laundering laws);
  • invoicing and financial administration;
  • responding to enquiries;
  • improving our website and services;
  • recruitment procedures;
  • sending newsletters and invitations (only with your consent).

The processing is based on one or more of the following legal grounds:

  • performance of a contract (Section 6(1)(b) GDPR);
  • legal obligation (Section 6(1)(c) GDPR);
  • legitimate interest (Section 6(1)(f) GDPR);
  • consent (Section 6(1)(a) GDPR).

Where special categories of personal data are processed, we rely on Section 9(2)(f) GDPR (legal claims).

You may subscribe to newsletters or invitations via our website. You can unsubscribe at any time via the link in each message.

4. With whom do we share your personal data?
Our basic principle is that we do not sell your data and store it within the EU. However, sharing may be necessary.

We share data with:

Within the EEA

  • Courts and judicial authorities
  • Opposing parties and lawyers
  • Notaries, bailiffs, and other parties
  • Hosting providers
  • Financial administration and case management suppliers
  • Email service provider (La Posta)

Outside the EEA

  • Cloud providers (Microsoft 365)
  • Google, YouTube, LinkedIn

We ensure appropriate safeguards such as:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • EU–US Data Privacy Framework

We may also disclose data if required by law or legal proceedings.

5. How long do we retain your personal data?

 

Type of data

Retention period

Client data

20 years after closure

Financial records

20 years

AML (Wwft) data

5 years

Website contact requests

1 year

Cookies

See Paragraph 7

Application data

 1 month or up to 1 – 2 years with consent


6. How do we protect your personal data?
We implement technical and organisational measures such as:

  • Data encryption
  • Access restrictions (need-to-know)
  • Regular backups
  • Data processing agreements
  • Confidentiality obligations
  • Asset management
  • Physical security


7. Cookies
Our website uses cookies.

7.1 Types of cookies

 

Type

Purpose

Retention

Functional

Website operation

Session of max 1 year

Analytical

Website insights

Max. 26 months

Marketing

Advertising/tracking (Linkedin)

Variable


7.2 Use
We only place functional and limited analytical cookies.

7.3 Settings
You can manage cookies via your browser settings.

8. Social media
Our website may include links to platforms like LinkedIn or YouTube. These platforms may process your data independently. Please review their privacy policies.

9. Your rights
Under the GDPR, you have the right to:

  • Access your data
  • Rectify incorrect data
  • Request deletion (with exceptions)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent

9.1 Submitting a request

Email: info@hoboken.nl

Post: Westerlaan 14, 3016 CK Rotterdam

We may request ID verification. Please mask your BSN, MRZ, and photo.

We respond within 4 weeks (extendable by 2 months).

9.2 Complaints

First contact us. If unresolved:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Website: autoriteitpersoonsgegevens.nl

10. Minors
Our services are not intended for persons under 16. We do not knowingly collect their data. If data is collected without valid consent, it will be deleted. Parents or guardians may contact us with concerns.

Last updated: May 2026