1. PRIVACY STATEMENT FOR LEGAL SERVICES
Effective Date: 12 August 2025

1.1 Welcome to IntelRoots (“we”, “us”, or “our company”).

1.2 IntelRoots (“us”, “we”, or “our”) operates https://intelroots.com and provides legal services via https://intelroots.com/members/ (hereinafter referred to as the “Service”).

1.3 Our Privacy Statement governs your visit to https://intelroots.com and https://intelroots.com/members/, and explains how we collect, protect, and disclose personal data resulting from your use of our Service and the legal services we provide.

1.4 We process your data to provide and improve legal services. By using our Service, you agree to the collection and use of information in accordance with this statement and applicable Dutch law.

1.5 This Privacy Statement is governed by Dutch law. Dutch courts have exclusive jurisdiction in the event of disputes. The agreement for services as referred to in Article 7:400 of the Dutch Civil Code applies to our legal services.

1.6 Our General Terms and Conditions (“Terms”) govern all use of our Service and, together with this Privacy Statement, constitute your agreement with us (“agreement”). This agreement has not only the legal effects agreed upon by the parties, but also those arising from the law, custom, or the requirements of reasonableness and fairness.

2. DEFINITIONS AND LEGAL BASES

2.1 SERVICE means the websites https://intelroots.com and https://intelroots.com/members/ operated by IntelRoots, including all legal services offered through these platforms.

2.2 PERSONAL DATA means any information relating to an identified or identifiable natural person as referred to in Article 4 of the GDPR.

2.3 USAGE DATA means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.

2.4 COOKIES are small files stored on your device (computer or mobile device).

2.5 DATA CONTROLLER means IntelRoots as a natural or legal person who determines the purposes and means of the processing of personal data.

2.6 PROCESSORS means natural or legal persons who process personal data on behalf of the Data Controller.

2.7 DATA SUBJECT means any living individual who is the subject of Personal Data.

2.8 USER means the person using our Service and receiving legal services from us. The User corresponds to the Data Subject.

2.9 LEGAL BASES FOR PROCESSING
We process your personal data solely on the following legal bases in accordance with Article 6 GDPR:

a) Performance of a contract (Art. 6(1)(b) GDPR): For providing legal services and performing our service agreement;

b) Legal obligation (Art. 6(1)(c) GDPR): For compliance with the Dutch Lawyers Act (Advocatenwet), the Prevention of Money Laundering and Terrorist Financing Act (Wet ter voorkoming van witwassen en financieren van terrorisme), and other legal obligations;

c) Legitimate interest (Art. 6(1)(f) GDPR): For direct marketing of legal services, provided you have not objected;

d) Consent (Art. 6(1)(a) GDPR): For newsletters and other communications for which explicit consent has been obtained.

3. PROFESSIONAL DUTY OF CONFIDENTIALITY

3.1 LEGAL PROFESSIONAL PRIVILEGE
In addition to the obligations under the GDPR, we are subject to the heightened duty of confidentiality under Article 11a of the Dutch Lawyers Act (Advocatenwet). As a legal service provider, we are obliged to maintain confidentiality regarding all information obtained in the course of our professional practice.

3.2 This duty of confidentiality remains in force after the termination of our services and also applies to all our staff and personnel.

3.3 We do not share confidential legal information with third parties without your explicit consent, except where required by law.

4. COLLECTION AND USE OF INFORMATION

4.1 We collect different types of information for various purposes to provide and improve our legal Service to you.

4.2 PERSONAL DATA FOR LEGAL SERVICES
When using our legal Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you (“Personal Data”). For the provision of legal services, we specifically collect:
a) Email address
b) First and last name
c) Telephone number
d) Address, Country, Province, Postal Code, City
e) Citizen Service Number (BSN) (only if legally required)
f) Legal case file data and correspondence
g) Financial information for invoicing
h) Cookies and Usage Data

4.3 We may use your Personal Data to contact you with newsletters, marketing materials, or promotional materials relating to legal services and other information that may be of interest to you. You may opt out of receiving all or some of these communications by following the unsubscribe link.

5. RETENTION PERIODS AND PROPORTIONALITY

5.1 SPECIFIC RETENTION PERIODS
We retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Statement and in accordance with Dutch retention obligations for legal files:
a) Legal files: 7 years after the case is closed (in accordance with the Dutch Lawyers Act and tax legislation)
b) Financial administration: 7 years (in accordance with the Dutch Bookkeeping Act)
c) Correspondence: 7 years after the last contact
d) Marketing consents: until withdrawn or 3 years after the last contact
e) Usage Data: up to 2 years for security purposes

5.2 We retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

6. DATA TRANSFER

IntelRoots will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Statement, and no transfer of your Personal Data will take place to any organisation or country unless adequate controls are in place, including the security of your data.

7. RIGHTS OF DATA SUBJECTS UNDER THE GDPR

7.1 YOUR RIGHTS
As a resident of the European Union (EU) and the European Economic Area (EEA), you have certain data protection rights under the GDPR.

7.2 We aim to take reasonable steps to allow you to correct, amend, delete, or restrict the use of your Personal Data.

7.3 If you wish to know what Personal Data we hold about you, or if you want it removed from our systems, please contact us at info@intelroots.com.

7.4 In certain circumstances, you have the following data protection rights:
a) The right to access, update, or delete the information we have about you;
b) The right to rectification;
c) The right to object;
d) The right to restriction of processing;
e) The right to data portability;
f) The right to withdraw consent.

7.5 COMPLAINTS AND SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) regarding our collection and use of your Personal Data:

Autoriteit Persoonsgegevens
P.O. Box 93374
2509 AJ The Hague
Telephone: +31 (0)70 888 85 00
Website: https://autoriteitpersoonsgegevens.nl

8. DATA SECURITY

8.1 The security of your data is important to us, but please remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

8.2 While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

8.3 PROFESSIONAL SECURITY STANDARDS
As a legal service provider, we apply enhanced security measures in accordance with:
a) ISO 27001 information security standards (where practically applicable)
b) Dutch data protection guidelines for the legal profession
c) Encryption of confidential legal correspondence
d) Regular security audits and penetration tests

9. CONSUMER RIGHTS AND GENERAL TERMS AND CONDITIONS

9.1 DUTCH CONSUMER PROTECTION
Additional rights apply to consumers under Dutch law:
a) Right of withdrawal: 14-day cooling-off period for contracts concluded at a distance (Dutch Civil Code, Book 7, Title 1, Section 2A)
b) Protection against unfair terms in general terms and conditions
c) Right to clear and understandable information about services and prices

10. WIJZIGINGEN IN DEZE PRIVACYVERKLARING

10.1 Wij kunnen onze Privacyverklaring van tijd tot tijd bijwerken. Wij zullen u op de hoogte stellen van wijzigingen door de nieuwe Privacyverklaring op deze pagina te plaatsen.

10.2 Wij zullen u via e-mail en/of een prominente kennisgeving op onze Dienst op de hoogte stellen voordat de wijziging van kracht wordt en de “ingangsdatum” bovenaan deze Privacyverklaring bijwerken.

10.3 U wordt geadviseerd deze Privacyverklaring periodiek te bekijken op wijzigingen. Wijzigingen in deze Privacyverklaring zijn van kracht wanneer ze op deze pagina worden
geplaatst.

11. CONTACT INFORMATION

11.1 If you have any questions about this Privacy Statement or our legal services, please contact us:
By email: info@intelroots.com
Chamber of Commerce (KvK) number: 92167

11.2 This Privacy Statement has been prepared for https://intelroots.com and https://intelroots.com/members/ by IntelRoots on 12 August 2025 in accordance with Dutch legislation for legal services.