Privacy Policy

Introduction

This Privacy Policy explains how underworks B.V. ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit our website underworks.pro or use our tax advisory services. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

underworks B.V. (Registration Number: 60328497) acts as the Data Controller for the personal information we collect and process through our services.

Data Collection

The data we collect includes personal information that you voluntarily provide to us and information that is automatically collected when you use our website or services. We collect this information to provide our tax advisory services and improve your experience with underworks.

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Business information (company name, registration details, VAT numbers)
• Financial information necessary for tax advisory services
• Communication records (emails, messages, consultation notes)
• Service preferences and requirements

Automatically Collected Information

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral sources and website performance metrics

How We Use Your Information

We explain how we use your information to provide our tax advisory services, improve our offerings, and comply with legal obligations. The use of your data is always based on a valid legal basis under GDPR.

Primary Uses

• Providing tax advisory services and consultations
• Preparing and filing tax returns and related documents
• Communicating about your tax matters and service updates
• Processing payments and managing client relationships
• Complying with legal and regulatory requirements

Secondary Uses

• Improving our website and service offerings
• Sending relevant tax updates and newsletters (with consent)
• Conducting internal research and analytics
• Protecting against fraud and ensuring security

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to perform our tax advisory services
• Legal Obligation: Compliance with tax laws and regulatory requirements
• Legitimate Interest: Improving our services and website functionality
• Consent: Marketing communications and non-essential cookies (where applicable)

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• With Dutch tax authorities as required by law
• With trusted service providers who assist in delivering our services
• With professional advisors (lawyers, auditors) when necessary
• In response to valid legal requests or court orders
• To protect the rights and safety of underworks, our clients, or others

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal requirements. Our retention periods include:

• Client files and tax documents: 7 years after the end of the tax year (Dutch legal requirement)
• Communication records: 3 years after the end of the client relationship
• Website analytics data: 26 months from collection
• Marketing consent records: Until consent is withdrawn

After the retention period expires, we securely delete or anonymize your personal data unless longer retention is required by law.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us using the information provided in the Contact section below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encrypted data transmission and storage
• Regular security assessments and updates
• Access controls and employee training
• Secure backup and disaster recovery procedures
• Regular monitoring for security incidents

International Data Transfers

We primarily process your data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with appropriate protection levels
• Binding Corporate Rules for multinational service providers

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the following information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.