KC Alliance, comprising Kraaijeveld Coppus Legal B.V., Kraaijeveld Coppus Koelewijn Accountants & Advisors B.V., KC Audit & Assurance Services B.V., KC Legal Middle East FZ LLC, and KC Accounting Services Lux Sàrl, acts as the data controller under the General Data Protection Regulation (GDPR) and relevant GDPR implementation Acts and and other applicable laws and regulations.

What personal data do we collect about you?

The personal data we process may include:

• Basic information, such as your name, title, position, the company you work for, your relationship to a person;
• Contact details;
• Data necessary for processing invoices;
• Metrics of your visit on our website, such as device type used and user-agent;
• Data relating to your attendance of events and interests;
• Personal data that we need for compliance purposes;
• Personal data provided to us in the course of rendering services which may include special categories of data;
• Any other personal data relating to you that you provide to us.

How do we obtain your personal data?

We obtain the personal data in the following situations:

• When you provide us with your personal data, or when you interact with us directly (by e-mail, telephone or letter);
• When you enter into an agreement with us;
• When we monitor our technology tools and services, including visits of our website and the e-mails that are sent to and from all KC Alliance offices;
• When we collect personal data from other sources, such as local counsel, counterparties, the Trade Register, the Land Registry, commercial databases or by using public sources.

For what purposes do we process your personal data?

• To process and to respond to requests, enquiries or complaints received from you;
• To onboard and execute our services and supporting processes and systems required;
• To manage and administer our relationship with you;
• To comply with regulatory and policy requirements;
• To provide services requested by you;
• To identify services you may be interested in;
• To communicate with you about our services;
• To provide and improve our website by generating statistics regarding the use of the website;
• To monitor and analyse our business processes and systems;
• To handle your job application or subscription to any of our recruitment services or events;
• To establish, exercise or defend a legal claim and proceedings against Kraaijeveld Coppus Legal B.V. and its staff;
• Business development activities.

On what basis do we use your personal data?

• To conclude and perform a contract;
• To comply with regulatory and policy requirements;
• For a legitimate interest (e.g. managing and administering the relationship with clients and suppliers);
• With your consent.

How long do we keep your personal data?

We will keep your personal data no longer than is necessary to achieve the purposes stated in this Privacy and Cookie Policy. Your personal data will be retained in accordance with our retention policy, which is available upon request to the Data Protection Officer using the contact details set out under the section “How you contact us” of this Privacy and Cookie Policy. The retention period for each category of personal data is based on regulatory and policy requirements and the purpose for which the information is collected and used.

Who do we share your personal data with?

In connection with the provision of our services and supporting, dispute resolution and regulatory systems and processes we may need to share your personal data with any current or future other offices or related parties of KC Alliance. We may also need to allow our suppliers and sub-suppliers access to your personal data when they perform services on our behalf (mainly to maintain and support our ICT systems) and regulatory authorities, courts, tribunals, government agencies and law enforcement agencies for the purposes specified above. Any transfer of personal data outside the EU/EEA is made in line with applicable data protection laws. Our international transfers of personal data outside the EU/EEA are based on the EU Commission’s standard contractual clauses, a copy of which may be read at the website of the EU Commission.

How do we protect your personal data?

KC Alliance has taken appropriate technical and organisational measures to protect personal data against loss or against any form of unlawful processing. The information security is in the hands of skilled external and/or internal ICT professionals.

What rights do you have regarding your personal data?

The GDPR and other applicable laws provide for certain rights for data subjects under the conditions set out therein. You, as a data subject, specifically have the following rights:

• Right to access your personal data;
• Right to rectification or correction of your personal data;
• Right to erasure of your personal data;
• Right to object or to request restriction of processing of your personal data;
• Right to data portability;
• Right to object to profiling;
• Right to lodge a complaint with a supervisory authority;
• Right to withdraw your consent for the future to the extent that the processing of your personal data takes place on the basis of your consent.