Privacy

Since the introduction of the yes/yes sticker, in a growing number of Dutch municipalities you may only deliver unaddressed advertising material to households that explicitly request it with a sticker. For...

Biometric authentication in the workplace is not easily enforceable in the Netherlands. A fingerprint, iris scan, or facial recognition constitutes special personal data, and under the GDPR, this is subject in principle to...

In many cases, email tracking requires prior, unambiguous consent from the recipient. A tracking pixel processes personal data – such as the IP address and the time of open – that are traceable...

Yes, as a website administrator, you are jointly responsible for the personal data collected and forwarded via a Facebook Like button. The European Court of Justice ruled in the Fashion ID case (July 29...

An employer may not simply use an employee's portrait for advertising or on the website: explicit, preferably written, permission is required for this. If you publish a recognizable photo...

You are allowed to place photos of employees on your website, but not just like that. A recognizable photo is personal data, so you need a valid legal basis. In practice, that is virtually...

A lease agreement for commercial premises is GDPR-compliant as soon as you transparently record therein which personal data you process, on what legal basis, and how long you retain it. As a landlord, you almost always process...

High GDPR fines of up to 20 million euros are possible, but as an ordinary SME, you almost never need to fear those maximum amounts. When determining a...

According to the Dutch Data Protection Authority (AP), a cookie wall that only grants visitors access to your website after they accept tracking cookies violates privacy legislation. The GDPR requires that...

Mr. Jaime Boogaers Privacy/ICT Law Attorney, 16 years of experience. The General Data Protection Regulation (GDPR) initially seems like a hassle to many businesses, but it is actually very important. You want...