Privacy statement

Who processes your data

Valorem Belastingadvies is the controller for the data described in this statement.

If you have a question about your data, or want to exercise one of the rights set out below, send a message to info@valorembelastingadvies.nl. You will have an answer within four weeks.

What we process

What we process depends on the engagement. In practice this means:

• Contact details: name, address, telephone number and email address.
• Business details: legal form, Chamber of Commerce number, VAT identification number and bank account number.
• Tax and financial data: turnover, costs, returns, assessments, accounts and correspondence with the tax authorities.
• Your Dutch citizen service number (BSN), where this is needed for a return or for contact with the tax authorities.
• Identification data: a copy of your identity document, where the law requires us to identify you.
• Correspondence: what you send us and what we send you.
• Technical data from this website, if you use the contact form.

Why, and on what basis

We only process your data where there is a legal basis for it:

• Performance of the engagement: preparing returns, accounts and advice, and the contact that goes with it.
• Legal obligation: the Dutch tax retention obligation, and the client due diligence and reporting duties under the Dutch anti-money laundering act (Wwft).
• Legitimate interest: running our own administration, collecting invoices and securing our systems.
• Consent: where you expressly permit something, for instance sharing data with a third party. You can withdraw consent at any time.

Your citizen service number

We may process your BSN because the law prescribes its use for filing returns and for contact with the Dutch tax authorities. We do not use it for anything else.

How long we keep your data

Data belonging to your file is kept for seven years after the end of the financial year it relates to, in line with the Dutch tax retention obligation.

Messages sent through the contact form that do not lead to an engagement are kept for a maximum of twelve months.

Client due diligence data is kept for five years after the end of the business relationship, as required by the Wwft.

Sharing with others

We share your data only where it is necessary for the engagement or where the law requires it. For example with:

• The Dutch tax authorities, when filing returns and corresponding about your file.
• The Chamber of Commerce, when filing annual accounts.
• Suppliers of our filing, bookkeeping and email software. We have a processing agreement with those parties.
• Another adviser or a firm abroad, but only with your knowledge.

For the website and the app we work with these parties: Cloudflare (hosting and storage of your file), Resend (sending email), Mollie (payments) and Apple (notifications in the App Store app). Every party that processes your data on our behalf is bound by a processing agreement or equivalent terms, and provides at least the same protection as set out in this statement.

We do not sell your data and do not use it for advertising.

This website

This website sets no tracking cookies of its own. Where we advertise through Google, we measure whether an ad leads to an enquiry. That requires a cookie, and we only set it after you have agreed in the bar at the bottom of the page.

If you decline, no advertising cookie is set and Google receives no data that identifies you. Your choice is stored in your own browser; you can clear it at any time by deleting this site's data.

If you submit the contact form, the message reaches us through the party hosting the website. We use what you enter only to respond to your message.

The typefaces on this site are loaded through Google Fonts, which means Google sees your IP address.

The app

In the Valorem app you can see your file, submit documents and send us messages. You can use the app in your browser, from your home screen or as an app from the App Store. For this we process your client number, the documents you submit and the messages you send us.

If you turn on notifications, we store a notification address for your device. For the App Store app this is an Apple device token. Apple or your browser delivers the notification. A notification is a short text, such as “Your adviser has a question”. If you turn notifications off, we delete the notification address as soon as a notification no longer arrives. In the App Store app this also happens when you sign out.

The app uses the camera only when you tap Scan yourself. You choose photos yourself; the app does not read your photo library.

The app uses your location only when you tap Here on a trip yourself. It then asks once where you are and fills in that address as the starting point; in the browser we look up the address with the open address service of the Dutch Kadaster (PDOK). We only store the address and coordinates of that trip in your mileage records. The app does not track you in the background.

If you sign in with Face ID, your phone creates a key that stays on the phone. We only store the public part of that key. Your face and fingerprint never reach us.

The app shows no advertising, does not track you and shares nothing with advertising partners.

You can close your account through the account menu in the app or by email. We then end your access and delete whatever is not subject to the statutory retention obligation.

Security

We take appropriate technical and organisational measures to protect your data: access only for those who need it, encrypted connections and secure document exchange. Please do not send sensitive documents by ordinary email; on request we will set up a secure link.

Your rights

You have the right to access your data and to have it corrected or erased. You can also ask us to restrict processing, object to processing, and request that your data be transferred.

We cannot always meet a request for erasure: part of your file is subject to a statutory retention obligation.

Send a request to info@valorembelastingadvies.nl. We respond within four weeks. If you disagree with the outcome, you can lodge a complaint with the Dutch Data Protection Authority.

Changes

We may amend this statement, for instance if our working methods or the law change. The current version is always on this page.