Privacy notice

1 Controller and contact

Tamer Mediation & Advies V.O.F., trading as Miras & More International, controls the processing described here within its own services. Chamber of Commerce 17219008; Derde Hambaken 11, 5231 SE ’s-Hertogenbosch, Netherlands; info@mirasandmore.com; +31 6 4811 4495.

This notice covers clients, prospects, heirs, mediation participants, representatives, other case participants and website visitors. Independent lawyers, notaries, banks, authorities and providers may control their own processing and provide separate notices.

2 Data and sources

Depending on the matter, we process names, contact details, language preference, country of residence, correspondence, engagement and payment details. Cases may require family relationships, authority to represent, relevant identity details, property and financial information, succession documents, will information and procedural records.

Sources include you, other entitled participants and, where lawful and necessary, representatives, authorised registers, authorities and professionals. If information is obtained indirectly, we notify you within applicable statutory periods and exceptions: generally within one month, or earlier upon contacting you or onward disclosure.

A full identity-document copy is not routinely necessary. We assess which details are needed and which identifiers should be obscured. A Dutch BSN or Turkish identity number is processed only where an appropriate legal basis and necessity exist.

We explain which information is needed for the engagement or a legal obligation. Without it we may be unable to accept the engagement or perform a task. Optional data, for example marketing details, are not compulsory and refusal does not affect our service.

Sensitive information may occur in files. We request health, religion, criminal or other special-category information only where necessary and lawful for a specific purpose. Special-category processing requires an applicable exception as well as an ordinary legal basis. One relative’s general consent cannot authorise processing for everyone.

3 Purposes and legal bases

Enquiries and engagements: necessary client data are used to prepare a requested offer and perform the contract under GDPR Article 6(1)(b). This does not automatically cover heirs or opponents who are not parties to that contract.

Case contact and other participants: where appropriate we assess a legitimate interest in careful case handling or establishing and defending rights. We balance necessity against individual interests and minimise information. Article 6(1)(f) applies; you may object.

Administration and legal duties: necessary records are processed under Article 6(1)(c). If customer due diligence, sanctions checks or reporting obligations apply to our activities, we process the information required for those obligations.

Security and complaints: legitimate interests may justify security, abuse prevention and complaint handling; a legal duty applies where imposed by law. For legal claims we retain only necessary evidence.

Consent: where relied upon, consent is requested separately, specifically and clearly. It can be withdrawn without invalidating earlier lawful processing. Newsletters and publication of client stories or photographs are not silently included in an engagement. You are not automatically added to marketing lists.

For special-category information we also establish an Article 9 condition, such as necessity for legal claims or genuinely freely given explicit consent. Criminal-offence information is subject to separate restrictions. Without a sufficient basis, we do not process it.

4 Recipients

Only persons who need information for their task receive access: authorised personnel, hosting/email/secure-storage providers and parties properly involved in the case. The engagement determines which recipients are needed.

Necessary information may go to an authorised lawyer, notary, tax adviser, architect, valuer, property provider, bank, municipality, tax office or tapu office. Not every network partner receives access. Relevant parties, roles and countries are identified in the engagement confirmation.

Appropriate processing agreements are made with processors acting solely on our instructions. For independent controllers we assess the disclosure basis and, where needed, agree secure and limited sharing. A commercial “partner” label does not determine the privacy role.

A commissioning or paying third party, employer or school does not automatically receive mediation content. Sharing from private sessions is agreed beforehand, subject to statutory exceptions. Information within inheritance files is similarly restricted according to entitlement.

5 International transfers

Our services may require information exchange with Türkiye, outside the European Economic Area. We assess GDPR transfer requirements beforehand, including remote access from Türkiye to European-hosted files.

Without an adequacy decision, appropriate safeguards are generally needed, for example applicable EU standard contractual clauses, assessment of local risks and additional safeguards where necessary. You may request information and a copy of the safeguards, with confidential details redacted where appropriate.

Exceptions for necessary occasional transfers are assessed individually. Acceptance of our terms is not an exemption for routine transfers. Disclosures to foreign authorities also require assessment of the specific basis and necessity. Turkish outbound-transfer rules are assessed where applicable.

6 How long do we retain data?

We retain data for as long as needed for the stated purposes or a legal obligation. Criteria include the duration of the engagement, necessary accountability, applicable limitation periods and any disputes.

For an enquiry without an engagement, we keep only what remains necessary to answer your question and account for arrangements. After an engagement ends, the file is limited to necessary agreements, approvals, relevant advice and evidence. Not all documents require the same retention period.

Working notes, duplicates and identity copies no longer needed are not eligible for further retention. For a continuing dispute or investigation, only information needed for that purpose is retained. You may ask which period or criteria apply to your file.

Tax records are generally subject to a statutory seven-year period; certain property-related VAT records require ten years. These periods do not automatically apply to the entire client file.

7 Files and document delivery

Client files are kept in local folders. We use Cloud86 for business email and website hosting. An online client portal is not currently part of our services. We agree a suitable method with you before you provide confidential documents.

A client portal becomes part of the service only once expressly arranged and implemented. Confidential files are not shared through public links. Client, heir, participant and partner rights are separately defined, including downloading, forwarding and withdrawal of access.

Initially send only a brief description, not identity documents or full confidential files, until we agree a suitable delivery method. Report misdirected messages or suspected unauthorised access promptly to our contact address.

We do not use case documents to train public AI services. Future AI-tool use requires prior assessment of necessity, terms, data use and security. We make no solely automated decisions producing legal or similarly significant effects.

8 Rights and complaints

You may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and always to direct marketing. Rights may be limited by others’ rights or statutory retention requirements.

Send requests to info@mirasandmore.com. Identity checks are proportionate, without routinely demanding a full identity copy. We generally respond within one month; a lawful extension and its reasons are notified within that first month.

You may complain to the Dutch Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl or, where applicable, the authority in your place of residence, work or the alleged infringement. Our complaint process need not be exhausted first. Applicable Turkish KVKK application and complaint rights also remain available.

9 Website and cookies

The website uses no advertising pixels, visitor analytics or embedded social-media widgets. Language selection uses ordinary page links. We do not place tracking cookies for these functions.

When you request a page, Cloud86 may process technical information such as IP address, time, requested page and errors to deliver and secure the website. Retention depends on necessary operational and security purposes and the applicable hosting settings. Contact us for information.

Links to partners and WhatsApp open another service. Merely visiting our pages does not load a WhatsApp widget. If you follow a link, that service’s privacy rules also apply.

WhatsApp and first contact

You may use +31 6 4811 4495 for business WhatsApp contact, such as an introduction or appointment. We process your phone number, visible profile information and the content you share. WhatsApp processes information under its own privacy terms; this may involve international processing. Do not send identity documents, bank details or complete confidential files through WhatsApp. Relevant arrangements may be recorded in your file.

10 Changes and legal form

We update this notice for relevant changes; the version date appears above. Material changes in purposes, recipients or controller are communicated appropriately. A new consent-based processing purpose requires new consent where necessary.

For a future transition to a BV we inform you of the new controller and data transfer. The present controller is the VOF, not a company yet to be incorporated.