Privacy Policy

Last updated: June 2026

1. Who we are

This website is operated by Ciconia Legal, a legal practice registered with the Dutch Chamber of Commerce (KVK) under number 74817566.

For questions about this privacy policy or the processing of your personal data, you can reach us through the contact form on our website.

2. What data we collect

We collect personal data only when you actively provide it to us:

Contact form

When you submit the contact form, we collect your name, email address, phone number (if provided), subject, and message. This data is stored securely and used solely to respond to your inquiry.

Expat scheme pre-assessment tool

The pre-assessment tool runs entirely in your browser. No personal data is collected, stored, or transmitted to our servers. Your answers are not saved and are lost when you close or refresh the page.

Website visits

We do not use cookies for tracking or advertising purposes. We do not use Google Analytics or similar third-party tracking tools. Basic server logs may be generated by our hosting provider (Vercel) for security and performance purposes.

3. Why we process your data

We process your personal data for the following purposes:

  • To respond to your contact form inquiry (legal basis: legitimate interest / pre-contractual measures)
  • To provide the legal services you request (legal basis: performance of a contract)
  • To comply with legal obligations (legal basis: legal obligation)

4. How long we keep your data

Contact form submissions are retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter in case of follow-up questions. If you become a client, your data is retained in accordance with our professional obligations (generally 5 years after the conclusion of the matter, or longer where required by law).

5. Who has access to your data

Your data is not shared with third parties for marketing or commercial purposes. We may share your data with:

  • Our hosting provider (Vercel Inc.) for website hosting
  • Our database provider (Supabase Inc.) for secure storage of contact form submissions

Both providers are subject to appropriate data processing agreements. Data may be transferred to servers outside the EU/EEA, in which case appropriate safeguards (such as Standard Contractual Clauses) are in place.

6. Your rights

Under the General Data Protection Regulation (GDPR / AVG), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict the processing of your data
  • Request data portability
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, please reach us through the contact form on our website.

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Contact form data is transmitted over an encrypted connection (HTTPS) and stored in a secured database.

8. Changes to this policy

We may update this privacy policy from time to time. The most current version will always be available on this page with the date of the last update.