1. WHO WE ARE
Dandelion Vision is a trade name of Dandelion Holding B.V., a company incorporated in the Netherlands.
Dandelion provides fractional and interim General Counsel services, strategic legal advice and related professional services to businesses, founders and management teams.
For questions about privacy or the use of your personal data, you can contact us at:
Dandelion Holding B.V.trading as Dandelion Vision
Singravenlaan 9
7531 JB Enschede
The Netherlands
Email: privacy@dandelion.vision
2. SCOPE AND OUR ROLE
This Privacy Notice applies to personal data processed in connection with:
- enquiries and other communications with Dandelion;
- prospective and existing client relationships;
- the provision of professional services;
- invoicing and business administration; and
- use of the Dandelion Vision website.
For its own business operations, Dandelion generally acts as controller.
Where personal data is processed as part of professional services for a client, Dandelion's role will depend on the nature of the engagement and the relevant processing activity. Where appropriate, specific contractual arrangements with the client may apply.
3. PERSONAL DATA WE PROCESS
Because Dandelion is a small professional advisory business, the amount of personal data we process is generally limited.
Depending on how you interact with us, this may include:
- your name, job title, company and business contact details;
- information contained in emails, correspondence and other communications;
- information provided in connection with an enquiry, engagement or professional matter;
- contracts, corporate records and other documents provided by or on behalf of a client;
- billing, payment and transaction information;
- information required for legal, tax and administrative purposes; and
- limited technical information relating to use of our website.
Professional materials supplied by clients may contain personal data relating to employees, directors, customers, suppliers or other individuals. The nature of that information depends on the particular engagement.
Dandelion does not generally seek to process special categories of personal data. Such information may, however, form part of documents or other information provided to us where relevant to a professional matter.
4. WHY WE PROCESS PERSONAL DATA
We process personal data where reasonably necessary to:
- respond to enquiries and communicate with you;
- assess, establish and manage client relationships;
- provide legal, strategic and other professional services;
- prepare, review and negotiate documents;
- administer engagements, invoices and payments;
- maintain appropriate business and professional records;
- protect our business and information systems;
- establish, exercise or defend legal claims; and
- comply with legal, tax, accounting and other regulatory obligations.
Depending on the circumstances, our legal basis for processing will generally be performance of a contract or steps taken at your request before entering into a contract, compliance with a legal obligation, or our legitimate interests in operating and protecting our professional advisory business and providing services to clients.
Where consent is legally required for a particular processing activity, we will rely on consent.
5. PROFESSIONAL SERVICES AND CLIENT INFORMATION
Clients may provide Dandelion with documents and other information containing personal data where this is relevant to the services requested.
We use that information only to the extent reasonably necessary to perform the relevant engagement, administer the client relationship, comply with applicable obligations or protect legitimate legal interests.
Dandelion does not sell client information or personal data and does not use information contained in client matters for advertising or unrelated marketing purposes.
Our professional services may involve confidential and commercially sensitive information. Such information is also handled in accordance with our contractual confidentiality obligations.
6. USE OF AI-ASSISTED TOOLS
Dandelion may use artificial-intelligence-assisted tools as part of its professional working methods, including to assist with research, analysis, drafting, document review and the organisation of information.
AI is used as a working tool, not as a substitute for professional judgement. Advice and work product provided by Dandelion remain subject to human review and professional assessment.
Where client information is processed using an AI-assisted service, Dandelion takes reasonable steps to use appropriate privacy and data controls and to limit the information provided to what is appropriate for the task.
Dandelion does not intentionally provide client information to AI service providers for the purpose of training publicly available AI models.
7. WEBSITE ANALYTICS AND COOKIES
Cookies can be tough. So we keep ours to a minimum.
We use privacy-friendly website analytics to understand, at an aggregate level, how the Dandelion Vision website is used and how it performs.
Our analytics are intended to provide information such as overall visitor numbers, traffic sources, pages visited and website performance. They are not used to build profiles of individual visitors.
Where Cloudflare Web Analytics is used, it operates without placing analytics cookies or using local storage to track visitors and is designed to provide website usage and performance information without tracking individual visitors across websites.
We do not use website analytics for behavioural advertising, retargeting or individual visitor profiling.
If we introduce technologies in the future that require consent under applicable law, we will provide appropriate information and, where required, obtain consent before using them.
8. SHARING PERSONAL DATA
We may share personal data where reasonably necessary with service providers supporting our business, including providers of:
- email, communications and cloud storage;
- IT, hosting and website services;
- accounting and financial administration;
- professional software and productivity tools; and
- AI-assisted services used in accordance with section 6.
We may also disclose information to accountants, legal or other professional advisers, public authorities or other parties where required by law or reasonably necessary to establish, exercise or defend legal rights.
We limit disclosures to what is reasonably necessary for the relevant purpose.
We do not sell personal data.
9. INTERNATIONAL TRANSFERS
Some technology and service providers used by Dandelion may process personal data outside the European Economic Area.
Where applicable data protection law requires safeguards for such transfers, we rely on appropriate transfer mechanisms, which may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.
10. DATA RETENTION
We do not keep personal data for longer than reasonably necessary for the purposes for which it is processed.
As a general policy:
- information relating to enquiries that do not result in an engagement is normally retained for up to 12 months;
- client files and related professional correspondence are normally retained for 5 years after the relevant engagement or client relationship ends; and
- financial and tax administration is generally retained for 7 years, or longer where required by law.
Information may be retained for longer where required by law or where reasonably necessary in connection with an ongoing matter or the establishment, exercise or defence of legal claims.
At the end of the applicable retention period, information will be deleted or otherwise disposed of in the ordinary course of our information-management processes.
11. SECURITY
We take reasonable technical and organisational measures designed to protect personal data and confidential information against accidental or unlawful loss, alteration, disclosure, access or destruction.
The measures used depend on the nature and sensitivity of the information and the systems through which it is processed.
No information system can be guaranteed to be completely secure.
12. YOUR RIGHTS
Subject to applicable data protection law, you may have the right to:
- request access to personal data we hold about you;
- ask us to correct inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- receive certain personal data in a portable format; and
- withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to conditions or exceptions under applicable law.
If you wish to exercise a privacy right, please contact us using the details in section 1.
We may ask for additional information where reasonably necessary to verify your identity or understand your request. We will not ask for more information than reasonably necessary for that purpose.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
13. CONTACT
Questions about this Privacy Notice or about how Dandelion handles personal data can be sent to:
Dandelion Holding B.V.trading as Dandelion Vision
Singravenlaan 9
7531 JB Enschede
The Netherlands
Email: privacy@dandelion.vision
We would appreciate the opportunity to address any concern directly.
14. CHANGES TO THIS NOTICE
We may update this Privacy Notice from time to time, for example if our services, working methods, technology or legal obligations change.
The current version will be published on the Dandelion Vision website together with the date of the latest update.