Privacy & Cookie Statement.
Last updated: 27-05-2026
This Privacy and Cookie Statement explains how Viotta processes personal data when you visit this website, contact us, subscribe to updates, or otherwise interact with us. Viotta is committed to handling personal data carefully, transparently and in accordance with applicable privacy laws, including the General Data Protection Regulation.
1. Who is responsible for your personal data?
For the purposes of this Privacy and Cookie Statement, the controller is:
D.S. de Waard Holding B.V., trading under the name Viotta
Dutch Chamber of Commerce number: 84853549
Email: info@viottalaw.com
For questions about this Privacy and Cookie Statement or the processing of your personal data, you can contact us at the email address above.
2. Personal data we process
We may process the following categories of personal data:
personal and business contact details, such as your name, email address, telephone number, job title, company name and country;
information you provide when contacting us, including the content of your message and any related correspondence;
information relating to a potential client relationship, matter intake or professional engagement, including information required for conflict checks, client acceptance, billing and compliance purposes;
technical and website usage data, such as IP address, browser type, device information, pages visited, time and date of visit, referring website and similar technical information;
cookie identifiers and analytics data, depending on your cookie preferences;
information you provide when subscribing to newsletters, updates or other communications.
We do not intentionally collect special categories of personal data through this website, unless you choose to provide such information yourself.
3. Purposes and legal bases
We process personal data for the following purposes and on the following legal bases:
Responding to enquiries
When you contact us through the website, by email or otherwise, we process your personal data to respond to your enquiry. The legal basis is our legitimate interest in communicating with prospective clients, business contacts and other visitors, or taking steps prior to entering into an agreement.
Providing legal or related professional services
If you become a client or if we assess whether we can act for you, we process personal data for matter intake, conflict checks, client acceptance, performance of services, file management, billing and communication. The legal basis may be performance of a contract, compliance with legal obligations and/or our legitimate interest in managing our professional practice.
Compliance and administration
We may process personal data to comply with legal, regulatory, tax, accounting and professional obligations. The legal basis is compliance with legal obligations and our legitimate interest in maintaining proper business records.
Website security and functionality
We process technical data to operate, secure and improve the website. The legal basis is our legitimate interest in providing a secure and properly functioning website.
Analytics and website improvement
Subject to your cookie preferences, we may use analytics tools to understand how visitors use the website and to improve its content, structure and performance. The legal basis is consent where required, or our legitimate interest where analytics cookies have no or minimal privacy impact and are configured accordingly.
Marketing and business development
If you subscribe to updates or otherwise consent to receive communications, we may use your contact details to send newsletters, legal updates or other relevant information. The legal basis is your consent or, where permitted, our legitimate interest in maintaining business relationships. You can unsubscribe at any time.
4. Cookies and similar technologies
This website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit a website. They help the website function properly, improve user experience, measure website use and, where applicable, support marketing or embedded third-party content.
We distinguish between the following categories:
Strictly necessary cookies
These cookies are required for the website to function properly and cannot be disabled through our cookie settings.
Analytical cookies
These cookies help us understand how visitors use the website, for example which pages are visited and how users navigate the site. Where required, these cookies are only placed with your consent.
Marketing and tracking cookies
These cookies may be used to build visitor profiles, measure campaign performance or display content through third-party platforms. These cookies are only placed with your consent.
Embedded content and third-party cookies
Pages on this website may include embedded content, such as videos, maps, social media posts or external fonts. Embedded content from third-party websites behaves in the same way as if you visited those websites directly. These third parties may collect data, use cookies and track your interaction with the embedded content.
5. Cookie overview
The exact cookies used on this website may change over time. We aim to keep the overview below up to date.
| Cookie / technology | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| Essential website cookies | Viotta / website hosting provider / WordPress | Operating the website, loading pages, maintaining basic website functionality and ensuring website security | Strictly necessary | Session or as long as technically necessary |
| Cookie preference cookie | Viotta / cookie consent provider | Remembering your cookie preferences, such as whether you accepted, rejected or managed non-essential cookies | Strictly necessary | Usually 6 to 12 months |
| Contact form data | Viotta / website provider | Enabling visitors to submit contact requests through the website | Functional | Not stored as a cookie unless technically required; submitted messages are retained as described in this statement |
| Security and spam-prevention technology | Viotta / website provider / security or spam-prevention provider | Protecting the website and contact forms against spam, abuse and unauthorised access | Strictly necessary / functional | Session or as configured by the relevant provider |
| Analytics cookies, if enabled | Analytics provider, such as Google Analytics or a privacy-friendly analytics provider | Measuring website visits and improving the website’s structure, content and performance | Analytics | As configured in the analytics tool, usually between session duration and 26 months |
| Tag management technology, if enabled | Tag management provider, such as Google Tag Manager | Managing website scripts and tags | Functional / analytics | Depends on the tags used; tag management itself usually does not store personal data without related tags |
| Embedded content cookies, if enabled | Third-party providers, such as YouTube, Vimeo, Google Maps, LinkedIn or similar platforms | Displaying embedded third-party content and enabling interaction with that content | Third-party / marketing | Determined by the relevant third-party provider |
| Social media links or plugins, if enabled | Social media platforms, such as LinkedIn | Allowing visitors to access or interact with Viotta’s social media presence | Third-party / marketing | Determined by the relevant third-party provider |
Before placing non-essential cookies, we ask for your consent through our cookie banner. You can change or withdraw your consent at any time by using the “Cookie settings” link on the website.
Where possible, Viotta configures analytics cookies in a privacy-friendly way. Non-essential analytics, marketing or tracking cookies are only placed after consent where consent is required by law.
6. Recipients and service providers
We may share personal data with service providers that support the operation of our website, IT systems, email, hosting, analytics, security, administration or professional services. These parties may only process personal data in accordance with our instructions where they act as processors.
Depending on the tools used on the website, recipients may include website hosting providers, WordPress-related service providers, email providers, analytics providers, CRM providers, security or spam prevention tools, and providers of embedded third-party content.
7. International transfers
Some service providers or third-party tools may process personal data outside the European Economic Area. Where this occurs, we take appropriate safeguards in accordance with applicable privacy laws. These safeguards may include an adequacy decision, standard contractual clauses or other legally recognised transfer mechanisms.
8. Retention periods
We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law or necessary to protect our legitimate interests.
As a general guideline:
- website analytics data is retained for the period configured in the relevant analytics tool;
- contact enquiries are retained as long as necessary to handle the enquiry and for a reasonable period afterwards;
- client and matter-related data is retained in accordance with applicable legal, tax, accounting and professional retention obligations;
- newsletter subscription data is retained until you unsubscribe or withdraw your consent.
9. Your rights
Subject to the conditions under applicable privacy law, you have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent where processing is based on consent;
- request data portability where applicable;
- lodge a complaint with a supervisory authority.
In the Netherlands, the relevant supervisory authority is the Autoriteit Persoonsgegevens.
To exercise your rights, please contact us using the contact details above. We may ask you to provide information necessary to verify your identity.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no website or electronic communication system can be guaranteed to be fully secure.
11. Links to third-party websites
This website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of those websites. We recommend that you read the privacy statements of any third-party websites you visit.
12. Changes to this statement
We may update this Privacy and Cookie Statement from time to time. The most recent version will always be available on this website. The date at the top of this statement indicates when it was last updated.