Privacy Statement

In this privacy statement, we explain what personal data we collect and use, and for what purpose. The privacy statement also outlines your rights. We recommend that you read this statement carefully.

Privacy Policy

The pharmacy processes data to provide quality pharmaceutical care to clients. In doing so, we process sensitive information, also known as personal data. In some cases, we collaborate with other organizations or companies for this purpose.

We consider it of the utmost importance that personal data be handled with care. We therefore process and secure personal data with the utmost care. In doing so, we comply with the requirements of privacy legislation. This means, for example, that we:

• clearly state for what purposes we process personal data. We do this through this privacy statement;
• limit the collection of personal data to only the personal data necessary for the purposes for which it is processed;
• first ask for your explicit consent to process your personal data in cases where your consent is required;
• not share your data with third parties, unless it is necessary to provide the requested service or when we are legally required to do so;
• when we share your data, enter into agreements with third parties to ensure, among other things, that it is not used for other purposes;
• take appropriate security measures to protect your personal data and require the same of parties that process personal data on our behalf;
• respect your right to access, correct, or delete your personal data upon your request.

Use of Personal Data

Purposes
In order to provide quality pharmaceutical care, we collect personal data from you. This is necessary for dispensing medication, contacting you, and handling billing. Because we do not provide all services ourselves but engage other service providers for some services, it is sometimes necessary to share data. For example, if you pick up medication at a partner pharmacy, we will share your medication record. We do this only with your consent.

Who does this privacy statement apply to?

This privacy statement applies to all our clients. In addition, this privacy statement also applies when you visit our website, are a former client, wish to become a client, or intended to become a client but ultimately did not, and we are acting as a substitute for your pharmacy.

Personal Data

Depending on the services you use with us, we may process the following personal data about you:

• Name and address details
• date of birth
• BSN
• age
• phone number
• email address
• gender
• information about medications and medical devices
• medical information
• name of your health insurance provider
• IBAN
• information you provide yourself, for example in the contact form
• login credentials.

For your safety and ours, camera footage of the waiting room is recorded. This footage is deleted after 3 weeks.

Consent

We cannot process your personal data without a valid reason. We need a legitimate reason to do so. This often stems from the treatment agreement or a legal obligation. Sometimes it is based on your explicit consent.

We may ask for your consent for various purposes. We ask for your consent to share your information with other healthcare providers. We also need your consent if you have someone else (such as a family member or caregiver) pick up your medication(s) or medication information. You must give your consent before we share information with a pharmacy so that you can pick up your medication there.

For children under 12 years of age, we ask for consent from one of the parents. For children aged 12 to 16, we ask for consent from the child together with one of the parents.

You can withdraw your consent at any time. If you do not agree or withdraw your consent, we will not be able to serve you properly. Appropriate care can only be provided if all relevant information is available. Furthermore, we are required to create a medication record to ensure the quality of (future) care.

You can give or withdraw consent for the sharing of data with various parties via the LSP (National Exchange Point) data exchange system at www.volgjezorg.nl.

Disclosure to Third Parties

We may share the information you provide with third parties if it is necessary to provide the services you have requested. We may share your information through our exchange system with a pharmacy, the hospital, your primary care physician, a locum physician, or other healthcare providers. We will only share this information if you have given your consent to share it with the relevant party.

It may also be necessary to share data with third parties, such as a supplier or an administrative office. When we disclose your data to a third party, we ensure—including through a contract—that your data is not used for any other purposes. We also agree that your data will be deleted as soon as it is no longer needed.

Furthermore, we will not disclose the data you have provided to other parties, unless required or permitted by law.

Security and Retention

Healthcare providers are bound by professional confidentiality and, as a general rule, may not disclose any information to others. All of our employees who process or have access to client data are bound by a confidentiality agreement.

We take appropriate security measures to limit misuse of and unauthorized access to your personal data. In this way, we ensure that only necessary personnel have access to the data, that access to the data is protected, and that our security measures are regularly reviewed. We use logging to track who has accessed your data. These logs are retained for at least 5 years.

Healthcare providers are required to retain medical records, including medication records, for 20 years. Once the statutory retention period has expired and you are no longer a client of ours, the data will be destroyed. If you remain a client, we will retain your personal data for the purpose of future medication dispensing.

Dutch Data Protection Authority

Of course, we’re happy to assist you if you have any complaints regarding the processing of your personal data. However, if we are unable to resolve the matter together, you also have the right under privacy law to file a complaint with the privacy regulator, the Dutch Data Protection Authority. To do so, please contact the Dutch Data Protection Authority.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on our website. We will never use your data for other purposes without your consent.

We therefore recommend that you review this privacy statement regularly so that you are aware of these changes.

Effective Date

This (updated) privacy statement took effect on June 9, 2022.