Privacy Policy

Privacy statement Rehab Lab B.V. (April 2022 version)

Trade name:                           Rehab Lab B.V.
Business address:              Raaimoeren 38 4824 KD Breda
Email:                                  support@rehablab.nl

 

General 

Here you will find the privacy statement of Rehab Lab B.V. at. You are advised to read this privacy statement carefully before continuing on our website.

Rehab Lab B.V. has developed a platform for healthcare providers. Healthcare providers use the platform to store client files. The platform is also used by healthcare providers to share information about the treatment with the client. Rehab Lab B.V. processes personal data on behalf of the healthcare provider. The healthcare provider is the controller within the meaning of Article 4 of the GDPR. Rehab Lab B.V. is the processor for this service.

This privacy statement explains how Rehab Lab B.V. handles your personal data. Rehab Lab B.V. attaches great importance to the proper security of your personal data and wants to inform you about this as well as possible. This privacy statement indicates which (categories of) your personal data can be processed.

This Privacy Statement consists of two parts:

• Part A concerns the processing of personal data that takes place on behalf of your healthcare provider. Rehab Lab B.V. is a processor for this within the meaning of the GDPR.

• Part B concerns the processing of personal data of customers and relations of Rehab Lab B.V. in the context of the service agreement and if you contact Rehab Lab B.V. via the web form or by telephone. picks up.

Rehab Lab B.V. reserves the right to amend this privacy statement. The adjustment may be necessary due to new processing or to comply with the law. Rehab Lab B.V. therefore advises you to consult this privacy statement regularly.

PART A, processing of personal data on behalf of a healthcare provider

Rehab Lab B.V. processes your personal data because your healthcare provider uses its services.

The categories of personal data that Rehab Lab B.V. may have been processed by you on behalf of your healthcare provider:

• name and address details;

• phone number;

• e-mail address;

• account details;

• payment details;

• communication between your healthcare provider and you;

• (health) data in relation to your treatment;

• information about your practitioner;

• other personal data that you actively provide to your practitioner via the platform;

• log data.

Under the GDPR, you as a data subject have rights with regard to the processing of your personal data. Because the processing takes place on behalf of your healthcare provider, you must contact your healthcare provider to exercise these rights.

PART B, processing of personal data by Rehab Lab B.V. as responsible

In some cases, Rehab Lab B.V. own controller. This may be the case if you contact Rehab Lab B.V. yourself by telephone or e-mail. Rehab Lab B.V. also processes personal data of healthcare providers and/or their employee(s) who use the services of Rehab Lab B.V. Rehab Lab B.V. is also the controller for the data required to create a personal account.

Below you will find an overview of personal data that Rehab Lab B.V. as a controller may process from you:

• your name;

• phone number;

• e-mail address;

• details of the healthcare organization;

• the content of a message when you contact Rehab via the web form.

• log data;

• IP address.

Types, purposes, legal bases and term of processing of personal data

Rehab Lab B.V. only processes personal data if there is a valid basis for doing so. The basis for processing is underlined in the text.

In the first place, your name, telephone number and e-mail address in combination with the content of your message will be processed with your permission when you fill in the contact form on the website, or via e-mail, social media or telephone contact with Rehab Lab B.V. picks up. Processing/storing this personal data is necessary in order to be able to contact you in response to your question. After handling your question or if no agreement is reached with Rehab Lab B.V., Rehab Lab B.V. no interest in keeping your data. Your data will then be deleted shortly.

When entering into an agreement with Rehab Lab B.V. personal data are processed that are necessary for the execution of the agreement with you or the organization for which you work. This data can be name and address details, telephone number, e-mail address, details of a contact person and additional data that are necessary to conclude and execute the agreement. Failure to provide necessary information may result in no agreement with Rehab Lab B.V. can be closed. This data will be kept in the business administration for a minimum of seven (7) years after the agreement has ended, unless otherwise agreed in writing or a different period applies pursuant to legislation.

Rehab Lab B.V. processes your personal data if you create a personal account in connection with the care agreement that you have with your practitioner. Your name, e-mail address and telephone number will be processed for this. Rehab Lab B.V. has a legitimate interest in processing this data for the execution of the agreement with your healthcare provider.

Rehab Lab B.V. has a legitimate interest in processing data in connection with your visit to our website. This concerns the IP address of your computer, the time of retrieval and data that your browser sends. This data is used to analyze website visits and click behavior to optimize our website.

Rehab Lab B.V. also processes personal data for which it is legally obliged on the basis of tax legislation. This includes contracts or agreements, invoices, bank statements, correspondence, etc. This data is kept in the company records for seven (7) years.

Transfer to processors and third parties

Some personal data is processed by companies that Rehab Lab B.V. are enabled. This may be the case in connection with the execution of the agreement with you or your organization or for the performance of services for Rehab Lab B.V. Such companies are also referred to as “processors” or sub-processors. These (sub-)processors are located within the European Economic Area (EEA). Rehab Lab B.V. conclude a processing agreement with these (sub) processors that meets the conditions of the General Data Protection Regulation, so that the processing of your personal data takes place lawfully within the EEA. Rehab Lab B.V. remains responsible for the processing operations carried out by these companies.

Your personal data will only be shared with third parties, not being by Rehab Lab B.V. engaged processors, shared as Rehab Lab B.V. is obliged to pass on personal data to competent authorities on the basis of a legal obligation. This can be, for example, the tax authorities or an investigative agency. Or if Rehab Lab B.V. has a legitimate interest in processing your data in connection with a legal claim or provided the data with your consent to another controller at your request.

Security

Rehab Lab B.V. has taken appropriate technical and organizational measures to protect your personal data against loss or unlawful processing.

• The website has an SSL certificate, which means that the data