We value your privacy and handle your personal data with care. In this privacy policy, you can read which data we process, for which purposes, on which legal bases and how we safeguard your rights in accordance with the General Data Protection Regulation (GDPR).

Data controller

Data controller: Financion Accountants & Adviseurs B.V., Kanaalpark 140, 2321 JV Leiden, the Netherlands, Chamber of Commerce number 95541705. For privacy-related questions, please contact us at info@financion.nl or via our contact page.

Personal data we process

Depending on your relationship with us (client, prospect, supplier, applicant or website visitor), we may process the following data:

• Identification and contact data: name, company name, address, email address, telephone number, position
• Contract and file data: engagements, correspondence, notes
• Financial data: invoice and payment data, records you provide to us
• Tax and legal data: data required for tax returns and regulatory compliance
• Anti-money laundering (Wwft) data: copy of identity document, UBO and sanctions screening (where legally required)
• Website and communication data: form submissions, log data, cookie settings and, with your consent, data about visits via our ads

Purposes and legal bases

• Performance of a contract: delivery of accountancy, tax return and assurance services, quotation processing and client communication
• Legal obligation: fiscal retention obligations, Wwft obligations and other professional and supervisory requirements
• Legitimate interest: quality improvement, file management, security and limited relationship marketing to existing clients
• Consent: specific marketing communications, extended retention of applicant data or measuring advertising results via cookies; consent can be withdrawn at any time

Special and sensitive data

We only process special categories of personal data when this is necessary and permitted, for example citizen service numbers (BSN) and identity document data for tax returns or anti-money laundering purposes. We ask you not to provide medical or other sensitive data unless this is unavoidable for the engagement and legally permitted.

Processing per service

• Accountancy and tax advisory: processing of records, financial statements and tax returns relating to you or your organisation
• Assurance and specific engagements: processing of file and supporting evidence necessary for our reports
• Advisory and support: data necessary to analyse your question and make proposals

Recipients and processors

We only share data where necessary for the purpose of processing or where we are legally obliged to do so. Recipients may include: IT and cloud providers (as processors), software providers, hosting and email providers, (sub)contractors working under our responsibility, banks, civil-law notaries, the Dutch Tax Authority or other authorities. We conclude processing agreements with all processors.

Transfers outside the EEA

We preferably store data within the European Economic Area. If transfers outside the EEA take place, we implement appropriate safeguards, such as standard contractual clauses, to ensure an adequate level of protection.

Retention periods

• Tax and administrative data: 7 years
• Anti-money laundering (Wwft) data: 5 years after end of the relationship or transaction
• Assurance and engagement files: as a rule 7 years after completion of the engagement
• Quotation and contact requests: up to 2 years after last contact, unless earlier removal is requested
• Applicant data: 4 weeks after completion of the procedure, or 1 year with consent

Where a longer statutory retention period applies, we shall observe that period.

Security

We take appropriate technical and organisational measures to protect your data, including access management, encryption where appropriate, logging, periodic updates, restricted authorisations and confidentiality agreements with employees and processors. We evaluate these measures regularly.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You may also withdraw consent. You can exercise these rights via our contact page. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Cookies and similar technologies

We use necessary cookies to keep our website working properly and securely: a cookie that remembers your cookie choice (fncn_consent, 12 months) and Google reCAPTCHA to protect our forms against spam and abuse (_GRECAPTCHA, up to 6 months). Only with your consent do we also place cookies to measure how visitors find us through our ads (_gcl_au and _gcl_aw, up to 90 days). You can change or withdraw your choice at any time via cookie settings. Our full cookie statement is available in Dutch: cookieverklaring.

Advertising measurement (Google Ads)

If you give consent, we use Google Ads to measure whether a visit via one of our ads leads to an enquiry. Google processes data such as your IP address, browser and device information, the ad you clicked and whether you subsequently submitted a form. We only see totals per ad and do not share form data, such as your name or email address, with Google. The legal basis is your consent. Google partly processes this data under its own responsibility and may transfer it to countries outside the EEA; see the Google Privacy Policy.

Spam protection (reCAPTCHA)

This website uses Google reCAPTCHA to protect forms against spam and abuse. The Google Privacy Policy and Terms of Service apply.

Minors

Our services are aimed at organisations and entrepreneurs. We do not process data of minors without the consent of a parent or guardian.

Data breaches

In the event of a security incident that may affect your privacy, we follow our internal procedure. Where necessary, we inform you and report the incident to the Dutch Data Protection Authority.

Liability

We take great care to ensure the accuracy and completeness of the information on our website and in our communications. Financion Accountants & Adviseurs B.V. accepts no liability for damage arising directly or indirectly from incorrect or incomplete information, unless there is wilful misconduct or gross negligence. Personal data is processed in accordance with this privacy policy and within the framework of the law. We are not responsible for the processing of personal data by third parties to whom our website refers.

Changes

We may update this privacy policy when our practices or legislation change. The most recent version is always available on this page.

Version: 23 September 2026

Frequently asked questions

What personal data does Financion store?

We only store data that is necessary to properly perform our services or that we are legally required to retain. This includes contact and identification data, financial information you provide to us, and administrative data required for tax returns, audits or reports.

Is my data shared with other parties?

We only share personal data when strictly necessary, for example with software providers or government authorities involved in our statutory duties. These parties work under our responsibility and are contractually obliged to protect your data and not to use it for their own purposes. If you consent to advertising measurement, Google also receives limited technical data; see Advertising measurement (Google Ads) above.

How does Financion protect my privacy?

Your data is stored on secure servers within the European Economic Area. We use encrypted connections, restricted access rights and internal security procedures. Only employees who need your file for their work have access to your data.

Can I view or have my data deleted?

Yes. You can request at any time which personal data we hold about you, have incorrect data corrected, or request deletion, unless we are legally required to retain the data. You can easily submit a request via our contact page.

Is my data used for marketing?

No, we do not use your data for general advertising or newsletters without your explicit consent. We only contact you with information relevant to our ongoing collaboration or services.

What happens in the event of a data breach?

In the unlikely event of a data breach, we immediately investigate the cause and take measures to prevent recurrence. If the breach may affect your privacy, we will inform you personally and report the incident to the Dutch Data Protection Authority.

Who can I contact with privacy questions or complaints?

For privacy questions or requests, you can contact Financion at info@financion.nl or via our contact page.