Privacy Statement
Firm of the Future attaches great importance to protecting personal data. In this privacy statement, we explain which personal data we collect, why we process it, how long we keep it and what rights you have.
Who are we?
Firm of the Future is a specialised sustainability consultancy. When you visit our website, contact us or use our services, we may process your personal data.
Our details:
Firm of the Future BV
Utrechtseweg 263
6862 AK Oosterbeek, the Netherlands
Chamber of Commerce (KvK) number: 68936745
Email: info@firmofthefuture.nl
Firm of the Future is the controller for the processing of personal data as described in this privacy statement.
What personal data do we process?
The personal data we process depends on how you get in touch with us or use our services. This may include:
- Name and contact details, such as email address and phone number
- Company name, job title and business contact details
- Information you provide yourself via a contact form, email or other communication
- Information needed to deliver our services and perform agreements
- Invoicing and payment details
- Information about participation in meetings, workshops or other activities
- Technical information about your use of our website, such as IP address, browser type and device information
- Cookie data, where applicable
We only process personal data that is necessary for the purpose concerned.
Why do we process personal data?
We may process personal data for the following purposes:
- To answer questions and contact requests;
- To prepare quotations and perform agreements;
- To provide our consultancy and other services;
- To process and deliver orders from our webshop;
- To inform our clients and contacts about our services, activities and developments;
- To organise meetings, workshops and other activities;
- For our administration, invoicing and financial obligations;
- To keep our website working properly and securely;
- To comply with legal obligations.
On what legal basis do we process personal data?
We only process personal data when there is a valid legal basis for doing so. Depending on the situation, this may be:
- The performance of an agreement or taking steps prior to entering into an agreement;
- Compliance with a legal obligation;
- A legitimate interest of Firm of the Future, for example for relationship management and improving and securing our services;
- Your consent, where consent is required by law.
Where processing is based on consent, you can withdraw that consent at any time.
Contact form and email
When you contact us through our website, by email or in any other way, we process the information you provide. We use it to answer your question, get in touch with you or follow up on your request.
We do not keep this information longer than necessary for the purpose for which it was provided, unless we are legally required to keep it longer.
Webshop and orders
When you place an order in our webshop, we use your name, email address, (company) details and, for a physical product, your delivery address to process, deliver and invoice the order. Payments are handled by our payment service provider Mollie; we do not receive or store payment details such as your account or card number ourselves.
The contents of your shopping cart are stored only in your own browser until you check out.
Newsletters and other communication
If you sign up for a newsletter or other regular communication, we use your name and email address to send it to you. You can unsubscribe at any time via the unsubscribe option in the email concerned or by contacting us.
Cookies
Cookies are small text files that are stored on your computer, tablet or smartphone when you visit a website. Our website only uses functional cookies and similar techniques that are needed for the website to work properly, such as:
- remembering your cookie choice (for six months);
- remembering your language preference;
- the contents of your shopping cart and your answers in the self-scan, which are stored only in your own browser;
- keeping staff logged in to the admin area of the website.
We use no analytics cookies and no marketing or tracking cookies. If you choose “necessary only” during your visit, we also do not load any third-party content that could set cookies. You can change your choice at any time via the link in the website footer.
Third-party content and services
Our website uses content from other parties:
- YouTube – videos are only loaded when you click on a video, and then through YouTube’s privacy-enhanced mode (youtube-nocookie.com). The preview image of a video is fetched from YouTube’s servers.
- LinkedIn via Elfsight – our LinkedIn posts are only shown if you have consented to third-party content.
- Google Maps, LinkedIn and Instagram – we only link to these; nothing is loaded until you follow the link.
When you use such features, these external parties may process personal data and use cookies or similar techniques. Their own privacy terms apply to the processing of personal data by these parties.
Who do we share personal data with?
We do not sell your personal data to third parties. We may share personal data with parties that support our operations and services, such as IT and hosting providers (including Vercel and Supabase), our email service (Resend), our newsletter service (Mailchimp), our payment service provider (Mollie), administrative service providers and other suppliers.
When an external party processes personal data on our behalf, we make agreements about the protection and security of that data where necessary.
We may also disclose personal data when we are legally required to do so.
Transfers outside the European Economic Area
When personal data is processed by a party outside the European Economic Area (EEA), we make sure there is a valid legal basis and appropriate safeguards in place, as required by the GDPR.
How long do we keep personal data?
We do not keep personal data longer than necessary for the purpose for which it was collected, unless a statutory retention period applies.
Statutory retention periods apply to some data, for example for our financial records. We delete or anonymise other personal data as soon as it is no longer needed for the purpose for which it was collected.
Security of personal data
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration or unlawful disclosure.
What are your rights?
Under the GDPR, you have several rights regarding your personal data. Among other things, you can ask us for:
- Access to the personal data we process about you;
- Correction of inaccurate or incomplete personal data;
- Erasure of your personal data;
- Restriction of processing;
- Transfer of your data, where the right to data portability applies;
- Objection to certain processing of your personal data.
Where processing is based on your consent, you also have the right to withdraw that consent.
Would you like to exercise any of these rights? Please contact us at info@firmofthefuture.nl. We may ask you for additional information to verify your identity before we respond to a request.
Making a complaint
Do you have a question or complaint about how we handle your personal data? Please contact us first. We will do our best to resolve your question or complaint.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We may update this privacy statement when our services, website or laws and regulations change. This page always shows the most recent version.
Last updated: 16 September 2026
