1. Introduction
FourTax B.V. ("FourTax", "we", "us" or "our") attaches great importance to the protection of personal data. We therefore process personal data carefully, confidentially and in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.
This privacy statement describes which personal data we process, why we do so, how long we retain it, with whom we may share data and which rights you have.
FourTax B.V. is the controller within the meaning of the GDPR for the processing of personal data described in this privacy statement.
2. Which personal data do we process?
Depending on your relationship with FourTax, we may process the following personal data.
Contact and identification details
- name
- address details
- place of residence
- telephone number
- email address
- job title
- company name
- Chamber of Commerce registration number
- VAT identification number
Data you provide to us
When you contact us, instruct us, provide documents or use our services, we may process data that is necessary to perform our work.
Financial and tax data
In connection with our tax services, we may process, among other things:
- financial data;
- tax data;
- data from tax returns;
- data concerning businesses, shareholders, directors and employees;
- data originating from or intended for the Dutch Tax and Customs Administration and other government authorities.
Website data
When you visit our website, we may process, among other things:
- IP address;
- browser data;
- device data;
- cookie preferences;
- data about your use of our website;
- location data to the extent made available through your browser.
3. Special categories of personal data and minors
Our services and website are not directed at persons under the age of 16.
We do not intend to collect personal data from minors without the consent of their parents or legal representatives. Because we cannot verify whether a visitor is over the age of 16, we advise parents to be involved in their children’s online activities.
If you suspect that we have inadvertently collected personal data from a minor, please contact us. We will delete this data as soon as possible.
4. Why do we process personal data?
We process personal data solely for legitimate purposes, including:
Provision of services
- performing tax advisory engagements
- preparing tax returns
- assisting in tax proceedings
- performing tax compliance activities
- preparing advice, reports and correspondence
Relationship management
- maintaining contact with clients and business relations
- answering questions and requests
- scheduling appointments and meetings
Legal obligations
- complying with tax, administrative and legal obligations
- complying with requests from supervisory bodies and competent authorities
Administration
- preparing quotations
- entering into and performing agreements
- invoicing and accounts receivable management
Newsletters and events
- sending newsletters
- sending invitations to seminars, webinars and other events
Website management and security
- securing our website;
- analysing website use;
- improving our services.
5. On which legal basis do we process personal data?
We process personal data only where a lawful basis exists.
This may be:
- performance of an agreement
- a legal obligation
- a legitimate interest
- your consent
Where processing is based on consent, you may withdraw that consent at any time.
6. Retention periods
We do not retain personal data longer than necessary for the purposes for which it was collected.
Client files are, in principle, retained for at least seven years after the client relationship ends, to the extent required by statutory retention obligations.
In specific cases, data may be retained for longer, for example:
- where required by a legal obligation
- in connection with ongoing proceedings or a dispute
- where necessary for the defence of legal claims
7. Disclosure to third parties
We treat your personal data as strictly confidential.
Personal data is not sold to third parties or provided for third parties’ commercial purposes.
We may share personal data with third parties where necessary for:
- the provision of our services
- compliance with legal obligations
- the protection of the legitimate interests of FourTax or our clients
Examples include:
Where third parties process personal data on our behalf, we enter into a data processing agreement where legally required.
- the Dutch Tax and Customs Administration
- other government authorities
- accountants, civil-law notaries and legal advisers
- IT service providers
- software and cloud solution providers
- professional service providers involved in an engagement
8. Microsoft 365 and digital services
For our business operations, FourTax uses modern digital systems, including Microsoft 365 services such as Outlook, Teams, SharePoint and OneDrive.
Personal data may be stored and processed within these systems for:
- communication;
- file management;
- collaboration;
- security;
- backup purposes.
We select our suppliers carefully and, where possible, ensure appropriate contractual and technical safeguards.
9. Cookies
Our website uses cookies and similar technologies.
Functional cookies
These cookies are necessary for the website to function properly.
Analytics cookies
We use analytics cookies to understand how our website is used and to improve it.
Marketing and tracking cookies
To the extent that marketing or tracking cookies are used, we request your prior consent.
You may change your cookie preferences at any time.
10. Security
FourTax considers the protection of personal data important.
We take appropriate technical and organisational measures to prevent the loss, unauthorised access, misuse or unauthorised disclosure of personal data.
These measures include:
- secure SSL/TLS connections
- access controls
- multi-factor authentication
- encrypted storage where appropriate
- periodic software updates
- monitoring of our systems
- backup facilities
Although we take appropriate security measures, no system can guarantee complete security.
If you suspect that data is not properly secured or is being misused, please contact us immediately.
11. Links to third-party websites
Our website may contain links to third-party websites. This privacy statement applies exclusively to the processing of personal data by FourTax B.V. We have no control over the content of third-party websites or how those parties process personal data.
FourTax accepts no responsibility or liability for the processing of personal data by such third parties. We advise you to consult the privacy statement of the relevant website before using it or providing personal data.
12. Your rights
Under the GDPR, you have various rights with regard to your personal data.
You have the right to:
- request access to your personal data
- have personal data corrected
- have personal data deleted
- restrict processing
- object to processing
- withdraw your consent
- transfer your personal data to another party
To prevent misuse, we may ask for additional information to establish your identity.
13. Complaints
If you have a complaint about the processing of your personal data, we ask you to contact us first so that we can seek a solution together.
You also have the right to lodge a complaint with the Dutch Data Protection Authority through the website of the Dutch Data Protection Authority.
14. Changes to this privacy statement
FourTax reserves the right to amend this privacy statement.
The most recent version will always be published on our website.
We advise you to consult this statement regularly.
15. Contact details
FourTax B.V.
Chamber of Commerce: 42129770
VAT: NL869857587B01
Email: info@fourtax.nl