Privacy Policy

Last updated: December 2024

Orbiox B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our tax advisory services or visit our website at orbiox.world. As the Data Controller, we are responsible for ensuring your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy laws.

Data Controller Information

Orbiox B.V. acts as the Data Controller for all personal data processed through our services. Our company is registered in the Netherlands with registration number 95371248 and VAT number NL868409173B01. Our registered address is Lindelaan 108, 4814 JW Breda, North Brabant, Netherlands.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, postal address, tax identification numbers, financial information, and business details when you use our tax advisory services. We also collect information about your website usage, including IP address, browser type, pages visited, and interaction data through cookies and similar technologies. Additionally, we may collect correspondence records, appointment details, and any other information you voluntarily provide when communicating with us about our services.

Legal Basis for Processing

Under GDPR, we process your personal data based on several legal grounds. For tax advisory services, we rely on contractual necessity to perform our obligations under our service agreement with you. We also process data based on our legitimate interests in providing effective tax advice, improving our services, and maintaining client relationships. Where required by law, such as for tax compliance and reporting obligations, we process data to meet legal requirements. For marketing communications, we rely on your consent, which you can withdraw at any time.

How We Use Your Data

We explain how we use your information in this section to ensure complete transparency about our data processing activities. Your personal data is used to provide tax advisory services, prepare and file tax returns, conduct tax planning and compliance activities, and communicate with you about your tax matters. We also use your data to improve our services, send relevant updates about tax law changes, respond to your inquiries, and maintain accurate records as required by professional and legal obligations. Website usage data helps us enhance user experience and ensure our platform functions effectively.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted service providers who assist us in delivering our services, such as cloud storage providers, accounting software platforms, and professional advisors, all of whom are bound by strict confidentiality agreements. We may also share information with tax authorities and regulatory bodies when required by law or for compliance purposes. In the event of a business transfer, merger, or acquisition, your data may be transferred to the new entity, subject to the same privacy protections.

Data Security

We implement robust security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure server environments, access controls and authentication systems, regular security assessments, and staff training on data protection practices. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and professional obligations. For tax advisory services, we typically retain client records for seven years after the end of our professional relationship, in accordance with Dutch tax law and professional standards. Website usage data is generally retained for up to two years. Marketing consent data is retained until you withdraw your consent. We regularly review our data retention practices and securely delete or anonymise data when it is no longer required.

Your Rights

Under GDPR, you have several rights regarding your personal data. You have the right to access your personal data and receive a copy of the information we hold about you. You can request correction of inaccurate or incomplete data, and in certain circumstances, you may request deletion of your personal data. You also have the right to restrict processing of your data, object to processing based on legitimate interests, and request data portability. If you have given consent for processing, you can withdraw it at any time. To exercise these rights, please contact us using the details provided in this policy.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. Essential cookies are necessary for the website to function properly, while analytics cookies help us understand how visitors use our site. Marketing cookies may be used to provide relevant advertisements. You can manage your cookie preferences through our cookie consent banner or your browser settings. For detailed information about the cookies we use, please refer to our Cookie Policy.

International Transfers

We primarily process your data within the European Economic Area (EEA). If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission, standard contractual clauses, or other approved transfer mechanisms under GDPR. We will inform you of any such transfers and the safeguards applied.

Children's Privacy

Our services are not directed at children under 16 years of age, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. The "Last updated" date at the top of this policy indicates when the most recent changes were made.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us at privacy@orbiox.world or call us at +31 70 807 0719. You can also write to us at Orbiox B.V., Lindelaan 108, 4814 JW Breda, North Brabant, Netherlands. We are committed to addressing your privacy concerns promptly and transparently.

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country of residence. Contact information for the Dutch DPA can be found at autoriteitpersoonsgegevens.nl.