Call us directly 070 204 21 81

Atay Legal attaches great importance to the protection of your privacy and handles personal data with due care. This Privacy Statement explains how Atay Legal processes personal data in the context of its services and through the use of its website. By means of this Privacy Statement, Atay Legal complies with its information obligations under the General Data Protection Regulation (GDPR).

Data Controller

Atay Legal
Laan van Vredenoord 11
2289 DA Rijswijk

Telephone: 070 204 2181
E-mail: info@ataylegal.nl
Chamber of Commerce number: 87594021

Atay Legal acts as the data controller within the meaning of the GDPR.

Personal Data Collected

Atay Legal processes personal data that:

is provided directly by you (for example through intake forms, e-mail, or telephone contact);
is obtained in the context of the provision of services;
is provided to Atay Legal by third parties (such as opposing parties, insurers, or healthcare providers);
originates from publicly available sources.

This may include the following categories of personal data:

identification and contact details, such as your name, address, telephone number, and e-mail address;
information relating to your file and case, including correspondence, documents, and notes;
financial data, insofar as relevant to the services provided;
medical and other special categories of personal data, insofar as necessary for the handling of a personal injury claim and only:
- with the explicit consent of the data subject; or
- where processing is necessary for the establishment, exercise, or substantiation of a legal claim (Article 9(2)(f) GDPR);
information regarding the use of the website, such as IP address, browser information, and cookie data.

Purposes of Processing

Atay Legal processes personal data exclusively for the following purposes:

providing legal services and legal assistance, particularly in personal injury matters;
entering into, performing, and terminating agreements for services;
maintaining correspondence and communication with clients, opposing parties, and authorities;
requesting, receiving, and processing medical and other relevant information pursuant to an authorisation granted;
complying with legal obligations;
safeguarding the legitimate interests of Atay Legal;
managing, securing, and improving the website.

Legal Bases for Processing

Atay Legal processes personal data on the basis of one or more of the legal grounds referred to in Article 6 GDPR, namely:

the performance of an agreement for services;
compliance with a legal obligation;
consent of the data subject;
a legitimate interest.

For the processing of special categories of personal data, including medical data, Article 9 GDPR additionally applies, particularly where processing is necessary for the establishment, exercise, or substantiation of legal claims.

Sharing Personal Data with Third Parties

Atay Legal only provides personal data to third parties insofar as this is necessary for the provision of services. This may include:

insurers and opposing parties;
medical advisers, healthcare providers, and experts;
lawyers, bailiffs, and other legal service providers;
IT service providers and other supporting parties.

Where third parties process personal data on behalf of Atay Legal, a data processing agreement shall be concluded with such parties. Third parties acting independently as data controllers are themselves responsible for compliance with the GDPR. In addition, Atay Legal may provide personal data to competent authorities where legally required to do so.

Security of Personal Data

Atay Legal takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, or unlawful processing. In doing so, account is taken of the nature and sensitivity of the data, particularly medical information, and the current state of technology.

Website, Analytics, and Cookies

Atay Legal processes anonymised data regarding the use of its website for statistical and functional purposes. The website uses cookies to improve functionality and ease of use. Atay Legal uses Google Analytics to obtain insight into the use of the website. This service may process data in accordance with Google’s privacy policy. Atay Legal has no control over the manner in which Google processes such data. For more information regarding cookies, reference is made to the cookie statement on the Atay Legal website.

Use of Social Media

The website may contain links or buttons directing users to social media platforms or third-party websites, such as LinkedIn. Atay Legal is not responsible for the processing of personal data by such third parties. We advise you to consult the privacy policies of these parties.

Retention Periods

Atay Legal does not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required pursuant to legal obligations, limitation periods, or the nature of the services provided.

Rights of Data Subjects

Pursuant to the GDPR, you have the right to access, rectify, restrict processing, object to processing, data portability, erasure of your personal data, and withdrawal of previously granted consent.

Requests may be submitted to Atay Legal using the contact details provided above. You will receive a response within four weeks after receipt of your request.

In certain circumstances, Atay Legal may be unable to comply fully or partially with your request, for example due to statutory retention obligations or the necessity of retaining personal data in connection with legal proceedings.

For verification purposes, Atay Legal may request a copy of a valid identity document, with your photograph and citizen service number (BSN) redacted.

Amendments

Atay Legal reserves the right to amend this Privacy Statement. The most recent version shall be published on the Atay Legal website. We recommend consulting this statement regularly.

Contact

If you have any questions regarding this Privacy Statement or the processing of your personal data, you may contact: