Skip to content
EHDS Jurist — Mr. Dr. Antoinette Vlieger
NL/EN

Privacy Statement

This is the privacy statement of Sovara BV (Dutch Chamber of Commerce no. 68850859), Zonnelaan 5, 1217 ND Hilversum, the Netherlands, trading under the names Vlieger Legal and EHDS-jurist.nl. Dr. Antoinette Vlieger acts exclusively through Sovara BV. Sovara BV is the data controller for the processing of personal data as described in this statement. Version: May 2026.

Who are we?

Sovara BV is a legal advisory and research firm specialising in the European Health Data Space (EHDS), the General Data Protection Regulation (GDPR) and Open Data law. For questions about this privacy statement or the processing of your personal data, please contact us here.

What personal data do we process, and for what purpose?

We process your personal data only when necessary. Below we describe our processing activities, their purposes and the applicable legal bases.

Website visits and analytics. We use analytical cookies to measure and improve the use of our website (see also the Cookies section). Purpose: improving the website and our services. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Contact by email or contact form. When you contact us, we process your name, email address and the content of your message. Purpose: responding to your enquiry and assessing whether we can assist you. Legal basis: legitimate interest (pre-contractual phase) or, where applicable, performance of a contract.

Quotations and engagement letters. When you engage us, we process your name, organisation name, contact details, payment details and the content of the assignment. Purpose: entering into and performing the contract. Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Invoicing and financial records. We process your invoicing details for our bookkeeping. Legal basis: legal obligation (Article 6(1)(c) GDPR). As a business, we are legally required to retain invoices and financial records for seven years.

Newsletter or updates (if applicable). If you have signed up for updates or a newsletter, we process your name and email address. Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time.

How long do we retain your data?

We do not retain your personal data longer than necessary for the purpose for which it was collected, and in any event no longer than legally required:

  • Correspondence and assignment files: two years after completion of the assignment, unless a longer retention period is legally required.
  • Invoicing and financial records: seven years under Dutch tax law.
  • Analytical website data: anonymised or deleted in accordance with the settings of the analytics tool used.
  • Newsletter data: until you withdraw your consent.

Who receives your data?

We do not share your personal data with third parties unless necessary for the performance of our services or legally required. Where applicable, we enter into a data processing agreement. Examples:

  • Our accountant (processor), for financial administration.
  • The hosting provider of our website (processor).
  • Email services we use to communicate (processor).

We never sell your data to third parties and do not share it for commercial purposes.

International transfers

We do not in principle transfer your personal data outside the European Economic Area (EEA). If one of our processors (such as a cloud provider) is based outside the EEA, we ensure that appropriate safeguards are in place under Article 46 GDPR, such as the standard contractual clauses approved by the European Commission.

Cookies

Our website uses functional cookies and analytical cookies. Functional cookies are necessary for the proper functioning of the website and do not require consent. Analytical cookies are used to measure and improve website visits. For analytical cookies that are not strictly necessary, we ask for your consent via a cookie notice.

We do not use tracking cookies for advertising purposes and do not share your browsing behaviour with advertising networks.

Your rights under the GDPR

Under the GDPR, you have the following rights with regard to your personal data:

  • Right of access: you may request which data we process about you.
  • Right to rectification: you may have inaccurate or incomplete data corrected.
  • Right to erasure: you may request that your data be deleted, unless we are legally required to retain it.
  • Right to restriction of processing: you may request that processing be temporarily restricted.
  • Right to object: you may object to processing based on legitimate interest.
  • Right to data portability: you may request your data in a commonly used format.
  • Right to withdraw consent: if you have given consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To submit a request, contact us at info@ehds-jurist.nl. We will respond within four weeks. We may ask you to verify your identity.

Right to lodge a complaint

If you believe we are not processing your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) at autoriteitpersoonsgegevens.nl, or with the data protection authority in your country of residence. We would, however, appreciate the opportunity to first discuss your concerns and resolve them if possible.

Changes to this privacy statement

We reserve the right to amend this privacy statement. The most current version is always available at ehds-jurist.nl/privacy-statement/. Material changes will be announced on the website.