Privacy statement

MIP Desk is a specialist unit of Roes Advisory B.V., an independent advisory firm registered in the Netherlands. This statement explains what personal data we collect when you visit mipdesk.com or interact with us, and how we handle it under the EU General Data Protection Regulation (GDPR).

1. Who we are

The controller of personal data collected through this website is:

2. What we collect

We only collect personal data that you actively provide to us, or that is necessary for the website to function. Specifically:

• Contact form data — when you fill in our contact form, we collect your name, email address, organisation (optional), and the content of your message.
• Email correspondence — when you email us directly, we receive your email address and the content of your message.

We do not operate a mailing list and we do not capture data from downloadable resources — files such as the MIP Waterfall Calculator are offered as direct downloads, no registration required. We do not collect special categories of personal data (such as health, ethnicity, or political opinions), and we do not knowingly collect data from minors.

3. Why we collect it

• To respond to your enquiries and provide the services you request.
• To conduct ordinary business correspondence.
• To comply with our legal and regulatory obligations.

4. Legal basis

Under the GDPR, we process your personal data on one of the following legal bases:

• Legitimate interest — to respond to contact form enquiries and conduct ordinary business correspondence.
• Legal obligation — to comply with applicable Dutch and EU law (for example, retention obligations under tax or financial regulation).

5. Who we share it with

We do not sell or rent your personal data. We share it only with the service providers that are necessary to operate the website:

• Netlify, Inc. — hosting of the website and processing of contact form submissions. Netlify acts as a data processor on our behalf.
• Google LLC — only for search indexing through Google Search Console, which does not involve your personal data.

Some of these providers are based outside the European Economic Area. In that case, transfers are protected by the EU Standard Contractual Clauses or an equivalent transfer mechanism recognised under the GDPR.

6. How long we keep it

We keep your personal data only as long as needed for the purposes for which it was collected:

• Contact form submissions: up to 24 months after the last contact, then deleted.
• Business correspondence: as required under Dutch retention obligations (typically up to 7 years for records with tax relevance).

7. Your rights

Under the GDPR you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (the "right to be forgotten").
• Object to or restrict our processing of your data.
• Request transfer of your data to another controller (data portability).
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

To exercise any of these rights, email contact@roesadvisory.com. We respond within one month.

8. Cookies

This website does not use tracking cookies or third-party analytics for advertising purposes. The only cookies that may be set are strictly necessary cookies required by our hosting provider for the website to function correctly. We do not need to ask for your consent to set these cookies under the GDPR.

9. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. The website runs over HTTPS, and access to subscriber data is restricted to authorised personnel.

If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and report it to the Dutch Data Protection Authority within 72 hours.

10. Contact

If you have any questions about this privacy statement or how we handle your personal data, contact us at:

This privacy statement was last updated on 17 May 2026. We may update it from time to time to reflect changes in our practices or in the law. The current version is always available at mipdesk.com/privacy.html.