INFORMATION ABOUT THIS PRIVACY STATEMENT

Consumer Justice Foundation is a foundation established under Dutch law and is legally based in Amsterdam with an office address at De Entree 201, 1101 HG in Amsterdam (Chamber of Commerce: 82763828) – hereinafter referred to as 'we', 'us', 'our' or 'the Foundation'.. The Foundation places great importance on your privacy and carefully handles your personal data. In this privacy statement, you will find, among other things, information about which personal data we process, how we do this, and what your rights are.

The General Data Protection Regulation (‘GDPR’) and related legislation apply to our processing of personal data (such as, as far as relevant, the Implementation Act of the General Data Protection Regulation). For the processing of your personal data, the Foundation qualifies as the data controller.

We may change or update this privacy statement. Should there be substantive changes in this privacy statement, we will bring these to your attention or will clearly communicate these changes to you. This version of the privacy statement was published on September 30, 2025.

OVERVIEW OF THIS PRIVACY STATEMENT

This privacy statement answers the following questions:

1. Does this privacy statement apply to me?

2. Which personal data are processed?

3. For what purposes are my personal data processed?

4. On what legal basis are my personal data processed?

5. How long are my personal data retained?

6. What measures are taken to protect my personal data?

7. What rights can I exercise regarding my personal data?

8. Which parties receive my data?

9. Are my personal data transferred to third countries?

10. Does the Foundation use cookies?

11. How can I contact the Foundation if I have questions about privacy?

1. DOES THIS PRIVACY STATEMENT APPLY TO ME?

This privacy statement applies to individuals whose personal data we process for our services. In this context, the Foundation processes the personal data of:

• individuals who visit our website (righttoconsumerjustice.nl) (hereinafter ‘the Website’); and/or

• individuals who participate in, contribute to or are part of (the preparation of) legal procedures instituted by us, including but not limited to proceedings under WAMCA) and for example a request for information from third parties; and/or

• individuals whose data we otherwise process during the preparation, execution or settlement of a legal procedure and related procedures and actions, such as mentioning the names of parties or opponents in our legal documents.

2. WHICH PERSONAL DATA ARE PROCESSED?

We process the following personal data:

• name, address, and contact details;

• copy of your identity document (with passport photo and Personal Identification Number blocked);

• Chamber of Commerce number, if you are using our services on behalf of a company;

• bank account number (IBAN) and payment details;

• data you provide to us in connection with legal procedures;

• data about your use of our website (such as IP address and click behavior).

3. FOR WHAT PURPOSES ARE MY PERSONAL DATA PROCESSED?

We process your personal data for the following purposes:

• to execute the agreement we have entered into with you

• to organize and carry out your participation in legal procedures, and/or other related actions as your (exclusive) representative;

• to comply with legal obligations;

• to ensure the proper functioning and improvement of our Website;

• to inform you about our activities and progress;

• to carry out marketing activities, to the extent you have given consent for this.

4. ON WHAT LEGAL BASIS ARE MY PERSONAL DATA PROCESSED?

Your personal data are processed, where relevant, on the basis of the following legal grounds:

• Performance of an agreement with you;

• Your consent;

• To comply with legal obligations;

• The legitimate interests of us or a third party, i.e.:

  • the successful preparation, execution, and settlement of a procedure and related actions, such as conducting settlement negotiations. Sometimes it is necessary for us to process personal data from individuals with whom we have not entered into an agreement and who have not given consent. Think of mentioning identifiable persons (such as the opposing party) in our legal documents and in the submission of evidence.

  • The proper functioning of the Website, enhancing user convenience, and gaining insight into its use.

If you have given your consent for the processing of certain personal data, you have the right to withdraw your consent at any time.

5. HOW LONG ARE MY PERSONAL DATA RETAINED?

We do not retain your data longer than necessary for the purposes mentioned above or as long as it is legally required. Certain personal data are subject to legal retention periods that obligate us to retain certain data for a longer time.

Data that are no longer needed are deleted or anonymized. We may retain certain anonymized data so that we can maintain statistical insight, for example regarding the type of vehicle for which most claims have been filed.

6. WHAT MEASURES ARE TAKEN TO PROTECT MY PERSONAL DATA?

We will take appropriate technical and organizational measures to secure your personal data against loss or unlawful processing.

 We protect your personal data against unauthorized access and always treat your personal data confidentially.

7. WHAT RIGHTS CAN I EXERCISE REGARDING MY PERSONAL DATA?

You can exercise various rights regarding your personal data. Under the GDPR, you have the following rights:

Right of access

You have the right to access your personal data. This means that you have the right to see which personal data about you are processed and how this data is used.

Right to rectification

We take reasonable measures to ensure that the information we have about you is accurate and complete. However, if you believe this is not the case, you can ask us to update or modify this information.

Right to erasure

You have the right to ask us to delete your personal data, e.g., if your personal data are no longer needed for the original purpose or if you withdraw your consent.

Right to restriction of processing

You have the right to request that we temporarily halt the processing of your personal data, for example, if you believe that the personal data we process about you are incorrect.

Right to object

You have the right to object to the processing of personal data, especially if the processing is based on our legitimate interests. We will then cease the processing of personal data unless we present legitimate grounds for the processing that override your interests, rights and freedoms.

If you wish to exercise any of the above rights, please contact us using the contact details provided under point 11. We kindly ask you to clearly state who you are and what kind of relationship you have with us, so that we can verify your personal data. We may ask you for information that can help us identify you.

8. WHICH PARTIES RECEIVE MY DATA?

To best protect your interests and those of the Foundation, we may utilize the services of third parties. This may mean that these service providers receive your personal data. Most of these service providers qualify as 'processors' and may only process your data according to our instructions. We enter into processing agreements with these parties, which include the obligation for these parties to take appropriate organizational and technical measures to protect your personal data.

Additionally, we may share your personal data with other parties when this is necessary for the purposes described in this privacy statement. For example, we may, if necessary, share personal data with lawyers, opposing parties, litigation funders, courts, bailiffs, experts, similar parties, and parties filing similar claims in other countries. We will anonymize or pseudonymize personal data as much as possible. Finally, it may be necessary for us to share personal data with third parties to comply with a legal obligation.

9. ARE MY PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES?

We, or third parties engaged by us, will only process your personal data within the European Economic Area ('EEA'). If your personal data are processed in countries outside the EEA, we will ensure appropriate safeguards for this transfer.

We will then check whether the European Commission has determined that the third country provides an adequate level of protection or that the protection of your personal data is ensured through the use of standard contractual clauses.

10. DOES THE FOUNDATION USE COOKIES?

The Foundation uses cookies and similar techniques on the Website. Cookies are small text files that the provider of a website places on the device of a visitor.

Cookies can be used to make a website function properly, but they can also provide information about you or your website visit. However, this does not mean that parties can access your device through cookies.

The Website uses two types of cookies:

1. Functional cookies: these cookies ensure that the Website functions properly and that the user experience is enhanced.

2. Analytical cookies: these cookies generate insight into the use of the Website so that we can optimize the Website.

3. Some cookies require your prior consent. We always ask for your consent before using these cookies.

11. HOW CAN I CONTACT THE FOUNDATION IF I HAVE QUESTIONS ABOUT PRIVACY?

1. If you have any questions about this privacy statement, wish to exercise any of the rights mentioned above, or wish to file a complaint with us regarding the processing of your personal data, please contact us at info@righttoconsumerjustice.nl. We are happy to assist you further.

2. You have the right to file a complaint with the supervisory authority regarding the processing of your personal data. In the Netherlands, you can contact the Dutch Data Protection Authority through https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap