Pure Veritas Advisory & Control ("Pure Veritas", "we", "us") respects your privacy. In this statement we explain which personal data we process, why, on what legal basis, how long we keep it and which rights you have under the General Data Protection Regulation (GDPR, in Dutch: AVG).
1. Who is responsible
Pure Veritas Advisory & Control is the controller for the processing described in this statement. You can reach us at info@pureveritas.nl or +31 629 535 683.
2. Which personal data we process
We do not intentionally collect special categories of personal data through this website and we do not collect data from children.
- Contact details you give us, such as name, company name, email address and phone number.
- The content of your message or question and any further correspondence.
- Business and engagement data for clients, such as contact persons, agreements, invoices and the documents you provide for an assignment.
- Technical and usage data of this website (such as pages visited and device type) in aggregated form, only when you have given consent for statistics.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your question or intake request | Steps prior to entering a contract and legitimate interest (art. 6(1)(b) and (f)) |
| Performing assignments and managing the client relationship | Performance of a contract (art. 6(1)(b)) |
| Administration, invoicing and tax obligations | Legal obligation (art. 6(1)(c)) |
| Measuring and improving the website | Consent (art. 6(1)(a)) |
| Security of the website and our systems | Legitimate interest (art. 6(1)(f)) |
4. Retention periods
- Enquiries that do not lead to an assignment: up to 12 months after the last contact.
- Client files and correspondence: for the duration of the assignment and afterwards for as long as required by professional standards and law.
- Financial administration: 7 years, in line with the statutory retention obligation.
- Consent choice: up to 6 months, after which we ask you again.
5. Sharing with third parties
We only share personal data when this is necessary for our services or required by law. We use carefully selected service providers, such as for website hosting, email and administration, who process data on our behalf under a data processing agreement. We never sell personal data.
6. Transfers outside the EEA
Where a service provider processes data outside the European Economic Area, we make sure an appropriate safeguard is in place, such as an adequacy decision by the European Commission or Standard Contractual Clauses.
7. Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and other unlawful processing, including encrypted connections (HTTPS), access restrictions and confidentiality obligations for everyone who works with the data.
8. Your rights
To exercise your rights, email info@pureveritas.nl. We respond within one month and may ask you to identify yourself first.
- Access to the personal data we hold about you.
- Rectification of incorrect or incomplete data.
- Erasure of your data, where no legal obligation to keep it applies.
- Restriction of processing and objection to processing based on legitimate interest.
- Data portability, where processing is based on consent or contract.
- Withdrawal of consent at any time, without affecting earlier processing.
9. Complaints
If you disagree with how we handle your data, please contact us first so we can put it right. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
10. Cookies
Information about cookies and similar technologies is in our cookie policy.
11. Changes
We may update this statement. The date at the top shows when it was last changed. For significant changes we will inform you in a suitable way.
