Privacy and cookie statement Websites

At Huisarts om de Hoek, we attach great importance to the privacy of website users. To ensure your privacy to the best of our ability, we adhere to a number of core values.

• Inform: We want to inform you as well as possible how and why we process personal data. We do so through this privacy statement.
• Limiting collection: We take great care to limit our collection of personal data to only what is really necessary for the proper functioning of the website and the services you use.
• No marketing based on personal data: We do not hand over personal data for marketing purposes and send commercial mailings only with your explicit consent.
• Your data stays with us: We do not disclose your personal data to other parties unless necessary to provide the service used or when we are required to do so by law.
• Secure: We take appropriate security measures to protect your personal data and require the same from parties processing personal data on our behalf.
• We respect your legal rights: Based on the law, you have several rights. In this privacy statement, we inform you about them.

In this privacy statement, you can read how we put these core values into practice and respect and protect your right to privacy.

What do we use your personal data for?

Depending on the services offered by us through the website, the personal data you may leave through our website may be used for the purposes below.

• Manage your account and profile: If you choose to create an account, we require some data from you to make this happen. These include your e-mail address, self-selected password, name and address details, gender and your date of birth. This data enables you to use certain services on our website. By creating an account, you do not have to fill in the data every time.
• Register and make appointment: If you register with us or book an appointment via our website, the data you provide in the relevant form or appointment service will only be used to manage your registration and book an appointment.
• Anamnesis or (repeat) prescription form: If you fill in an anamnesis form via our website or request (repeat) medication via a form, the information you provide provides us with a general insight into your health, medication use, conditions and allergies. We treat this information confidentially and only use it to provide you with appropriate care.
• Request medication or repeat prescription: If you request medication via our website by logging into your personal environment, you will be able to see your online medication profile as known to us. You can then order medication and set reminders.
• eConsult: If you use the eConsult for your questions to us, we will treat the data you provide confidentially. To use this service, you must log in to your personal area.
• Your medical records: In case you provide medical data to us, these may be included in your medical records. We will only do this if it is permitted by law or we have obtained your explicit consent.
• Contact form: If you have any questions, you can always contact us by filling in the contact form. You will be asked to enter your name and contact details along with a description of your query. This data is used exclusively to handle your enquiry and to improve our services.
• Ordering via the website: Data you provide when placing an order is used by us to process the order. Where necessary, data will be provided to other parties involved in handling the order, such as the delivery service.
• Newsletter: If you give us permission to send you a newsletter, we will use your e-mail address and name to send the newsletter to you. You can withdraw a previously given consent at any time, for example by clicking on the unsubscribe link included at the bottom of each commercial mailing.
• Improving our services: We may use your data to improve our services. However, we only do so if you have provided the data for that purpose, or have given us permission to do so. For example, your feedback sent to us via a complaint form or the consent you have given for the use of cookies.

We will not process your personal data for purposes other than the above, unless you have given your prior consent or we are allowed or required to do so by law.

On what bases do we process your personal data?

We process your personal data only on a legal basis. For the purposes mentioned above, we process your personal data on the basis of the following bases:

• Execution of the agreement: for the purposes aimed at providing our services, e.g. to complete your registration;
• (Express) consent: for the purposes of providing access to-and using-the functionalities of our website, placing cookies, sending our newsletter, or processing your medical data after we have obtained your (explicit) consent;
• Legitimate interest: in certain cases, we have a legitimate interest in processing your personal data. This is the case, for example, when we use cookies to improve our services and which have no or limited impact on your personal privacy;
• Legal obligation: For the purposes aimed at processing your medical data and keeping your medical records, we may have a legal basis. In addition, we are required by law to retain certain data from the order you placed in our webshop.

What personal data do we need?

By using the website and the services available on it, you leave certain data with us. We store and use only the personal data directly provided by you or which, when provided, it is clear that it is provided to us for processing. Depending on the service you use, we may collect the following data through the website:

• Your contact details (e-mail address, phone number);
• Your name, address a place of residence;
• Account details;
• Insurance details (insurer name, policy number, insurance start date);
• The name of your healthcare providers or pharmacy;
• Time of your appointment;
• Payment details and billing address;
• Data relating to your health;
• Citizen service number (BSN);
• Click and visit behaviour;
• Device data / (pseudonymised) IP address.

Data of persons under 16 years of age

Our website and/or service does not intend to collect data on website visitors who are under 16 years of age. However, we cannot verify whether a visitor is older than 16. We therefore advise parents to be involved in their children's online activities in order to avoid collecting data about children without parental consent. If you are convinced that we have collected personal data about a minor without such consent, please contact us.

Disclosure to third parties

Your data is expressly not disclosed to third parties other than those directly involved in the performance of the agreement between you and us, or unless any legal provision requires us to do so. The parties we may need for the performance of the services you have requested are:

• Hosting parties and our software vendors;
• Payment service providers and delivery services;
• Your health insurer.

Security

We take the protection of your data seriously and take appropriate measures to counter abuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us.

Retention period

Your personal data will never be kept longer than necessary for the purposes described in this privacy statement or on the website, except in cases where any legal obligation precludes removal of the personal data.

Third-party websites

This privacy statement does not apply to third-party websites linked to this website through links. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We therefore recommend that you read the privacy statement of these websites before using them.

Cookies

We use cookies on this website. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone the first time you visit this website. They ensure that the website works properly and that, for example, your preferences are remembered.

These cookies are also used to make the website work properly and to optimise it. On your first visit to our website, we have already informed you about these cookies and asked your permission to place them. You can opt out of cookies by setting your internet browser to stop storing cookies. In addition, you can also delete any information previously stored via your browser's settings.

Use of permanent cookies

Permanent cookies allow us to recognise you when you visit our website again. This allows the website to be set specifically to your preferences. Even if you have given permission for cookies to be placed, we can remember this by means of a cookie. This avoids you having to repeat your preferences each time you visit, thus saving you time and making our website more user-friendly. You can delete permanent cookies via your browser settings.

Use of session cookies

Session cookies allow us to see which parts of the website you have viewed with this visit. This allows us to adapt our service as much as possible to the browsing behaviour of our visitors. These cookies are automatically deleted as soon as you close your web browser.

Use of analytical cookies

We keep statistics on our website, but at all times this is done either completely anonymised or pseudonymised. No statistics are kept on parts of the website where your health data are exchanged. We may use the applications listed below to keep statistics.

Google Analytics

In cases where we have activated the Google Analytics tool, cookies from the US company Google are placed via our website, as part of the Analytics service. We use this service to track and get reports on how visitors use the website. This tool is set to be privacy-friendly. For example, we have not allowed Google to use the Analytics information obtained for other Google services, we have the IP addresses pseudonymised and have concluded a processing agreement with Google.

The information collected by Google is transferred to and stored on servers in the United States. Google states that it adheres to the Privacy Shield principles and is a member of the US Department of Commerce's Privacy Shield programme. This implies an adequate level of protection for the processing of any personal data.

Matomo Analytics (Piwik)

In case we have activated the Matomo Analytics tool, (first-party) cookies are set to track visitor statistics. It allows us to map how visitors use our website (how long you stay on a page, from which page you came here and to count the number of unique visitors). All data remain on our server and are never shared with other parties.

Changes to this privacy and cookie statement

We reserve the right to make changes to this statement. It is recommended that you consult this statement regularly so that you are aware of these changes.

Access, modify and delete your data

You have the right to access, correct or delete your personal data. In addition, you have the right to withdraw your possible consent to data processing or object to the processing of your personal data by Huisarts om de Hoek and you have the right to data portability. This means you can submit a request to us to send the personal data we hold on you in a computer file to you or another organisation named by you. You can send a request for inspection, correction, deletion, data transfer of your personal data or a request to withdraw your consent or object to the processing of your personal data to the contact details below. We will respond to your request as soon as possible. Please make sure you clearly indicate who you are so that we can be sure we are not modifying or deleting data belonging to the wrong person.

Personal Data Authority

Huisarts om de Hoek would also like to inform you that you have the option of filing a complaint with the regulator in the country where you are based. In the Netherlands, the regulator is called the Personal Data Authority.

Questions and feedback

We regularly check our compliance with this privacy policy. If you have any questions about this privacy policy, please contact us using the contact details below.