Privacy statement

We respect your privacy. This privacy statement applies to all personal data collected or used by de Jong & Laan Beheer B.V. and its (small) subsidiaries (de Jong & Laan), insofar as it qualifies as a ‘controller’ in the sense of the AVG. De Jong & Laan complies with the applicable laws and regulations regarding personal data protection. De Jong & Laan takes appropriate measures to prevent misuse, loss, unauthorised access and other undesired actions with your personal data.

CONTACT DETAILS CONTROLLER

The controller of the processing of your personal data is the entity de Jong & Laan Beheer B.V.. We have our registered office at Koningin Wilhelminaplein 30, 1062 KR in Amsterdam. You can reach us by phone at 085-4018718 and by e-mail at info@jonglaan.nl.

PRIVACY OFFICER CONTACT DETAILS

De Jong & Laan has appointed a privacy officer. This is Mr Steven Akse. His contact details are: privacyofficer@jonglaan.nl and phone number 06-52094281.

This privacy statement applies to all persons whose personal data are processed by de Jong & Laan as data controller (also referred to as data subjects), with the exception of employees of de Jong & Laan. Therefore, this declaration applies in any case to (employees of) customers and (suppliers of) de Jong & Laan, (employees, customers and other relations of) potential customers and other relations of de Jong & Laan, visitors of the website, recipients of newsletters or other (commercial e-mails) of de Jong & Laan. And also former data subjects of the groups and categories mentioned in the previous sentence.

CATEGORIES OF PERSONAL DATA, PURPOSES AND SOURCE

We only process personal data provided to us by you, your employer, your debtor or creditor, or other (official) bodies such as the Tax Office or the Chamber of Commerce. In addition, we process personal data that we can trace from your visit to our website.

We process the following categories of personal data:

- contact details, salary details, personal data in (financial) administration(s), (e-mail) correspondence and other personal data necessary for de Jong & Laan to properly carry out and improve its services;

- contact details you have initially provided to us verbally including details on business cards;

- contact details and other personal data entered in the contact form on our website;

- personal data obtained through or generated by our website, electronic newsletters, commercial e-mails or related technologies such as IP number and your browsing behaviour on the website. Such as data about the first visit, previous visit and current visit, the pages viewed and the way the website is navigated through;

- Whether you open a newsletter or commercial e-mail and which parts of it you click on;

- personal data obtained from other sources, such as: personal data available on public social media platforms such as LinkedIn, personal data obtained from the Trade Register of the Chamber of Commerce and from the Land Registry and personal data available on public (business) websites.

We recognise our responsibility to secure the data you entrust to us. This is evidenced by our ISO 27001 certification (for Information Security). De Jong & Laan uses various techniques to protect your data, including secure servers and firewalls.

RIGHT HERE

We process personal data on the basis of one of the following legal grounds (as listed in the Article 6 AVG):

Permission
- If you have given your consent, we may process your personal data. This includes, for example, sending you newsletters if you are not yet a customer of ours. You have the right to revoke a previously given consent.

Agreement to which you are a party

- If you commission us to provide accountancy or advisory services, we will process personal data if - and to the extent - necessary for the performance of the commission.

Legal obligation
- De Jong & Laan is required under, for example, the Money Laundering and Terrorist Financing (Prevention) Act (WWFT) and the International Tax Assistance Act (WIB) to process certain personal data, collect and record certain information. These include a copy of an identity document (passport).

Legitimate interest
- We may also process personal data if we (or a third party) have a legitimate interest in doing so. Such processing must then not infringe your privacy disproportionately.

THIRTEEN

Only our employees and third parties entrusted with or directing the activities related to or necessarily involved in the processing of the personal data in question will have access to your personal data.

The basic principle is that personal data is not shared with third parties. If data is shared, we only do so if you have given your consent, if this is necessary for the performance of an agreement we have with you or if the law requires us to do so. In exceptional cases, we may also share data because it is vital for the person whose data we share.

Sometimes de Jong & Laan provides you with a service as part of a joint marketing effort with other companies. In such cases, your personal data will be provided to these companies. Please note that these companies often have their own privacy policies regarding the use of your personal data and that those policies may differ from de Jong & Laan's privacy statement. These websites, newsletters or mailings may also contain links to other websites. You should read the privacy policies on those sites carefully; they may differ from de Jong & Laan's privacy statement.

If third parties carry out (part of) the processing on behalf of de Jong & Laan (so-called (sub)processors), de Jong & Laan will conclude a (sub)processor agreement with those parties. Moreover, the Jong & Laan will only engage processors who offer adequate guarantees and take adequate measures so that the protection of the personal data will be guaranteed and that their processing will also comply with the applicable laws and regulations. De Jong & Laan maintains an overview of the (sub)processors it engages.

The (hosting) parties that de Jong & Laan works with, for example, and thus have (partial) access to your personal data are: VWO, Spotler, ADEM, Shoot the Rabbit, Trimm, Webiteers, X, LinkedIn, Google and YouTube.

RETENTION PERIODS

Personal data collected will not be kept longer than necessary. Personal data for which no retention period has been set will be deleted when the data is no longer needed for the purpose for which it was collected.

INFORMATION AND DATA SUBJECTS' RIGHTS

In principle, you have the right to inspect, correct or delete the personal data we process about you. In addition, in principle you have the right to object to the processing of your personal data. You can also, in some cases, ask de Jong & Laan to restrict the processing of your personal data or to transfer your data to you or to a third party. However, these rights are not unlimited. The applicable laws and regulations provide the frameworks within which we may or may not have to honour such requests.

Would you like to exercise (one of) these rights or do you have questions about how we deal with privacy and personal data? If so, you can always contact our privacy officer, Mr Steven Akse at privacyofficer@jonglaan.nl.

Do you disagree with the way we process your personal data? Then you can file a complaint with our privacy officer. If he cannot resolve your complaint, you can file a complaint with the Personal Data Authority.

COOKIES

When you visit one of our websites, a ‘cookie’, a small text file, is stored on your computer. This allows us to recognise your computer when you visit us again and to provide you with a better online experience, for example by remembering your preferences. If you do not wish to receive cookies, you can look in the help file of your internet browser to find out how to block all cookies or how to ensure that you receive a warning before a cookie is stored. However, this may result in the website not functioning optimally. More information on which cookies we store and for what purpose can be found in our detailed Cookie statement.

OTHER

We reserve the right - for example because changing legislation requires us to do so - to amend this privacy statement. We will post any revised versions on this website.

Amsterdam, 24 February 2026