+31(0)10 - 456 46 77
( 17:00)
Login Loket

Privacy statement

Privacy Statement

 

  1. Who We Are

Steens & Partners Accountants & Adviseurs
Thomas Mannplaats 311
3069 NJ Rotterdam
The Netherlands

T: +31 (0)10 456 46 77
E: info@steens.nl
Chamber of Commerce (KvK): 24491181

Steens & Partners is the data controller responsible for the processing of personal data as described in this Privacy Statement.

For privacy-related questions, please contact us at info@steens.nl.

  1. What Personal Data Do We Process?

We process personal data when you:

  • Visit our website
  • Contact us
  • Use our services
  • Apply for a position with us
  • Subscribe to our newsletter

As part of our services, we may also receive personal data from third parties, such as your employer, business partners, financial institutions, or government authorities, where necessary for the performance of our work.

Depending on the situation, we may process the following data:

General Personal Data

  • First and last name
  • Address details
  • Telephone number
  • Email address
  • Date of birth
  • Job title/company name
  • IBAN/bank account number
  • Financial information
  • Correspondence

Website Data

  • IP address
  • Information about your activities on our website
  • Internet browser and device type
  • Location data

Recruitment Data

  • Personal and address details
  • CV and cover letter
  • Education and work experience
  • Salary expectations
  • References (if provided)
  • Certificate of Good Conduct (VOG), where required for the position

Special Categories of Personal Data

We do not intentionally collect special categories of personal data through our website unless you voluntarily provide them.

As part of our professional services, we may process special categories of personal data where legally required or necessary, such as citizen service numbers (BSN) or information arising from tax or employment law obligations. Such processing only takes place when a valid legal basis exists.

  1. Legal Basis for Processing Personal Data

We process personal data exclusively on one or more of the following legal bases under Article 6 GDPR:

  • Performance of a Contract

For the provision of our accounting, advisory, and related services.

  • Legal Obligation

For example, compliance with tax retention requirements, administrative obligations, and obligations under anti-money laundering legislation (Wwft).

  • Legitimate Interest

Such as:

  • Efficient provision of our services
  • Improving our website
  • Relationship management
  • Securing our systems

When relying on legitimate interests, we carefully balance our interests against your privacy rights.

  • Consent

For sending newsletters or placing tracking cookies.

You may withdraw your consent at any time.

  1. Why Do We Process Your Data?

We process personal data for the following purposes:

  • Providing accounting and advisory services
  • Maintaining client relationships
  • Complying with legal obligations
  • Sending newsletters (where you have subscribed)
  • Improving and securing our website
  • Recruitment and selection activities
  • Managing and securing our IT systems

We do not process more data than necessary for these purposes.

  1. Retention Periods

We do not retain personal data longer than necessary for the purposes for which it was collected.

When determining retention periods, we consider:

  • The nature of the services provided
  • The duration of the contractual relationship
  • Applicable legal retention obligations (such as tax and administrative requirements)
  • Statutory limitation periods
  • Our legitimate interests, such as substantiating our services

Where statutory retention periods apply (for example under tax legislation or the Wwft), personal data will be retained for the legally prescribed period.

Recruitment data is not retained longer than necessary to complete the recruitment process unless you have given consent for longer retention for future vacancies.

Website-related data is retained only as long as necessary for analysis, security, and website optimization, in accordance with applicable legal requirements.

After the applicable retention period has expired, personal data will be deleted or anonymized.

  1. Do We Share Data with Third Parties?

We only share personal data where necessary for:

  • Delivering our services
  • IT and hosting services
  • Payroll processing
  • Compliance with legal obligations

We enter into data processing agreements with processors to ensure an appropriate level of security.

  1. International Data Transfers

If personal data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards are in place.

This may include:

  • Reliance on the EU–US Data Privacy Framework (where applicable), or
  • The use of Standard Contractual Clauses (SCCs) approved by the European Commission.
  1. Cookies

Our website uses:

  • Functional cookies (necessary for website functionality)
  • Analytical cookies (anonymized where possible)
  • Tracking cookies (only with your consent)

During your first visit, we request your consent via a cookie banner for the placement of non-essential cookies. You may adjust your preferences at any time through the cookie settings on our website.

We may use Google Analytics. Where data is transferred to the United States, this will be done in accordance with applicable European regulations.

  1. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

  1. Security

We implement appropriate technical and organizational measures, including:

  • Secure servers and encrypted connections (TLS)
  • Access controls and two-factor authentication
  • Backup and recovery procedures
  • Confidentiality obligations for employees
  • Regular security updates
  1. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Receive your data in a portable format (data portability)

To exercise any of these rights, please contact us at info@steens.nl.

We will respond to your request within one month. If necessary, we may request additional information to verify your identity.

  1. Filing a Complaint

If you have a complaint regarding the processing of your personal data, please contact us first.

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
www.autoriteitpersoonsgegevens.nl

  1. Changes to This Privacy Statement

We reserve the right to amend this Privacy Statement. The most current version is always available on our website.