Effective date: 23 October 2026 · Last updated: 23 October 2026
This Privacy Policy explains how Sarfati & Associates (“we”, “us”, “the firm”) collects, uses, and protects personal data when you visit our website or contact us. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data-protection laws.
The data controller responsible for your personal data is Sarfati & Associates, a vennootschap onder firma (general partnership) registered with the Dutch Chamber of Commerce (KvK) under number 80466796, established at Jufferstraat 38E, 3701 AG Zeist, the Netherlands. For any privacy matter, contact us at frank.sarfati@sarfati-associates.com.
Information you give us: when you email us — your name, organisation, email address, and the contents of your message or enquiry.
Technical data: collected automatically when you visit, such as IP address, browser type, device information, and pages viewed, via our hosting platform (see our Cookie Policy). We do not intentionally collect special categories of personal data through this website. Please do not submit confidential or sensitive case information through the website.
To respond to enquiries: based on our legitimate interest in answering prospective clients, or on taking steps at your request prior to an engagement (GDPR Art. 6(1)(b) and 6(1)(f)). To operate and secure the website: legitimate interest (Art. 6(1)(f)). To comply with legal obligations (Art. 6(1)(c)).
We do not sell your personal data. We may share it with service providers acting as our processors (including our website hosting provider); professional advisers under confidentiality; and authorities or third parties where required by law or to protect our legal rights.
Some service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You may request details using the contact details above.
We retain enquiry data only as long as necessary to respond and for our legitimate business records, and thereafter for 24 months, unless a longer period is required by law.
Subject to applicable law, you have the right to access, rectify or erase your data; restrict or object to processing; data portability; and withdraw consent at any time. Contact us at frank.sarfati@sarfati-associates.com. You also have the right to lodge a complaint with a supervisory authority — for example the Autoriteit Persoonsgegevens (NL), CNIL (FR) or CNPD (LU), as applicable.
We take appropriate technical and organisational measures to protect personal data. No transmission over the internet can be guaranteed as fully secure.
This website is not directed at children, and we do not knowingly collect data relating to them.
We may update this Privacy Policy from time to time. The current version, with its effective date, will always be published on this page.