Privacy Policy
General
Here you will find the privacy statement of Rehab Lab B.V. You are advised to read this privacy statement carefully before continuing on our website.
Rehab Lab B.V. has developed a platform for healthcare providers. Healthcare providers use the platform to store client files. The platform is also used by healthcare providers to share information about the treatment with the client. Rehab Lab B.V. processes personal data on behalf of the healthcare provider. The healthcare provider is the controller within the meaning of Article 4 of the GDPR. Rehab Lab B.V. is the processor for this service.
This privacy statement explains how Rehab Lab B.V. handles your personal data. Rehab Lab B.V. attaches great importance to the proper security of your personal data and wants to inform you about this as well as possible. This privacy statement indicates which (categories of) personal data can be processed.
This privacy statement consists of two parts:
- Part A concerns the processing of personal data that takes place on behalf of your healthcare provider. Rehab Lab B.V. is a processor for this within the meaning of the GDPR.
- Part B concerns the processing of personal data of customers and relations of Rehab Lab B.V. in the context of the service agreement, and when you contact Rehab Lab B.V. via the web form or by telephone.
Rehab Lab B.V. reserves the right to amend this privacy statement. Amendments may be necessary due to new processing or to comply with the law. Rehab Lab B.V. therefore advises you to consult this privacy statement regularly.
Part A: processing of personal data on behalf of a healthcare provider
Rehab Lab B.V. processes your personal data because your healthcare provider uses its services.
The categories of personal data that Rehab Lab B.V. may process about you on behalf of your healthcare provider:
- name and address details;
- phone number;
- e-mail address;
- account details;
- payment details;
- communication between your healthcare provider and you;
- (health) data in relation to your treatment;
- information about your practitioner;
- other personal data that you actively provide to your practitioner via the platform;
- log data.
Under the GDPR, you as a data subject have rights with regard to the processing of your personal data. Because the processing takes place on behalf of your healthcare provider, you must contact your healthcare provider to exercise these rights.
Part B: processing of personal data by Rehab Lab B.V. as controller
In some cases, Rehab Lab B.V. is itself the controller. This may be the case if you contact Rehab Lab B.V. yourself by telephone or e-mail. Rehab Lab B.V. also processes personal data of healthcare providers and/or their employees who use the services of Rehab Lab B.V. Rehab Lab B.V. is also the controller for the data required to create a personal account.
Below you will find an overview of the personal data that Rehab Lab B.V., as controller, may process about you:
- your name;
- phone number;
- e-mail address;
- details of the healthcare organisation;
- the content of a message when you contact Rehab Lab via the web form;
- log data;
- IP address.
Types, purposes, legal bases and retention of personal data
Rehab Lab B.V. only processes personal data if there is a valid basis for doing so. The basis for processing is underlined in the text.
Firstly, your name, telephone number and e-mail address, together with the content of your message, are processed with your consent when you fill in the contact form on the website, or contact Rehab Lab B.V. via e-mail, social media or telephone. Processing and storing this personal data is necessary in order to respond to your question. After your question has been handled, or if no agreement is reached with Rehab Lab B.V., Rehab Lab B.V. has no interest in keeping your data. Your data will then be deleted shortly.
When entering into an agreement with Rehab Lab B.V., personal data are processed that are necessary for the execution of the agreement with you or the organisation for which you work. This data can be name and address details, telephone number, e-mail address, details of a contact person and additional data necessary to conclude and execute the agreement. Failure to provide necessary information may mean that no agreement can be concluded with Rehab Lab B.V. This data will be kept in the business administration for a minimum of seven (7) years after the agreement has ended, unless otherwise agreed in writing or a different period applies pursuant to legislation.
Rehab Lab B.V. processes your personal data if you create a personal account in connection with the care agreement that you have with your practitioner. Your name, e-mail address and telephone number will be processed for this. Rehab Lab B.V. has a legitimate interest in processing this data for the execution of the agreement with your healthcare provider.
Rehab Lab B.V. has a legitimate interest in processing data in connection with your visit to our website. This concerns the IP address of your computer, the time of retrieval and data that your browser sends. This data is used to analyse website visits and click behaviour in order to optimise our website.
Rehab Lab B.V. also processes personal data where it is legally obliged to do so on the basis of tax legislation. This includes contracts or agreements, invoices, bank statements, correspondence, etc. This data is kept in the company records for seven (7) years.
Transfer to processors and third parties
Some personal data is processed by companies engaged by Rehab Lab B.V. This may be the case in connection with the execution of the agreement with you or your organisation, or for the performance of services for Rehab Lab B.V. Such companies are also referred to as “processors” or “sub-processors”. These (sub-)processors are located within the European Economic Area (EEA). Rehab Lab B.V. concludes a processing agreement with these (sub-)processors that meets the conditions of the General Data Protection Regulation, so that the processing of your personal data takes place lawfully within the EEA. Rehab Lab B.V. remains responsible for the processing carried out by these companies.
Your personal data will only be shared with third parties other than processors engaged by Rehab Lab B.V. if Rehab Lab B.V. is legally obliged to pass on personal data to competent authorities, such as the tax authorities or an investigative agency; if Rehab Lab B.V. has a legitimate interest in processing your data in connection with a legal claim; or if the data is provided to another controller at your request and with your consent.
Security
Rehab Lab B.V. has taken appropriate technical and organisational measures to protect your personal data against loss or unlawful processing.
- The website has an SSL certificate, which means that data is sent encrypted via a secure connection.
- Digital data is backed up frequently.
- Employees of Rehab Lab B.V. only have access to personal data relevant to their role.
- Information stored by Rehab Lab B.V. is encrypted, and the server is protected with a firewall and antivirus software.
- Users must have a strong password and are automatically logged out after a period of inactivity.
- Multi-factor authentication is used for logging in.
- Processing takes place within the EEA.
- A processing agreement is concluded with clients and (sub-)processors.
Data breaches
Where work is done, mistakes can be made. Rehab Lab B.V. will respond adequately to a discovered data breach. Depending on the type of data, the possible risks for the data subject(s) and the number of people involved, Rehab Lab B.V. will inform the data subject(s). On the basis of these considerations, Rehab Lab B.V. will also determine whether the data breach is reported to the Dutch Data Protection Authority.
If a data breach occurs involving personal data processed in the context of a product or service agreement, Rehab Lab B.V. will contact the client without delay for further handling, in accordance with the provisions of the processing agreement.
Cookies
Rehab Lab B.V. uses cookies on its website. When you first visit our website, you have the option to accept cookies. A cookie is a small file that is sent along with pages of this website and stored by your browser on the hard drive of your computer. Cookies can be refused or deleted; however, Rehab Lab B.V. then cannot guarantee optimal functioning of its website and user experience.
Session cookies or necessary cookies are used to make good use of the basic functions of our website. By analysing the surfing behaviour of our visitors, we can adjust our services as well as possible. When you close your browser, these cookies are automatically deleted.
Preference cookies remember information, such as your preferred settings. These can be sent back to our server on a subsequent visit to our website. For a good user experience, accepting these cookies is desirable.
Analytical or statistical cookies are placed by us to analyse the use of our website and to improve its operation.
Marketing cookies can be used to provide you with relevant information and personalised offers.
To delete cookies, go to the settings of your browser.
Links to other websites
This website may contain links to other websites that are not managed and/or owned by Rehab Lab B.V. If you have ended up on another website by clicking on a link, the privacy statement of that website applies. Rehab Lab B.V. is in no way liable or responsible for that website, the privacy statement on that website or the processing of your personal data by the organisation behind that website. Rehab Lab B.V. recommends that you read the privacy statement carefully before continuing on the relevant website.
Your privacy rights
Data that is no longer necessary will be deleted in accordance with the time limits set out in this statement.
You can withdraw any consent you have given at any time. Withdrawing consent has no consequences for personal data already processed before the moment of withdrawal, but may affect the further execution of any agreement with Rehab Lab B.V.
You have the right to inspect, rectify, delete or restrict the processing of your personal data. An explanation of these rights follows below. You can make a request regarding these rights via support@rehablab.nl.
Rehab Lab B.V. will acknowledge receipt of your request and respond within four (4) weeks. To check whether the request is lawful, we will always ask you to identify yourself first. For this, Rehab Lab B.V. will contact you, preferably by telephone, and check whether your request is lawful on the basis of a number of specific questions.
Access
The right of access only applies to your own data. If your access would violate the privacy of another person, the personal data of that person will be deleted or made illegible. You will then receive a digital copy of your data.
Rectification or addition
If you believe that your data is incorrect or incomplete, you can request that it be amended or supplemented.
Erasure
You can request that your personal data be deleted. This may be the case, for example, if you believe that it is kept longer than necessary. If there is no basis for keeping your data, it will be deleted. Erasure may mean that any agreement with Rehab Lab B.V. can no longer be performed properly.
Right to object
You can object to the processing of your personal data on the basis of a legitimate interest. In that case, Rehab Lab B.V. will stop processing your personal data on this basis, or explain why the interest of Rehab Lab B.V. outweighs yours.
Restriction or termination of processing
You can request that the processing of your personal data be restricted or terminated. This may be necessary in the event of a legal claim, or if you believe that your data is being processed unlawfully by Rehab Lab B.V.
No profiling
Rehab Lab B.V. does not use your data for automated profiling.
Complaints
If you have a complaint about the processing of your personal data by Rehab Lab B.V., you can report it by sending an e-mail with a description of your complaint to support@rehablab.nl. Rehab Lab B.V. will make every effort to deal with your complaint as well as possible. You can also submit your complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Responsible disclosure
If, despite the care with which Rehab Lab B.V. processes personal data, you discover that this is not done correctly, please report this to Rehab Lab B.V. immediately via support@rehablab.nl. Rehab Lab B.V. will indemnify you from legal consequences, unless there is a deliberate attempt to hack or another crime.