Privacy Statement

We do everything we can to protect your privacy and therefore handle your data with the utmost care. In doing so, we comply with all applicable laws and regulations, including the General Data Protection Regulation (GDPR).

We do not have access to the personal data you have provided to your employer, and we never share the data you provide to us with your employer.

What personal data do we process?

HC Health provides various types of services. By using these services, you enter into an agreement with us. Depending on the service you use, we process the following personal data based on this agreement:

If you use HelloYou, we process the following data:

Required
• First name;
• Last name;
• Email address;
• Company name.

Optional
• Phone number.

The HelloYou well-being platform and our mobile application offer support in finding suitable solutions for your questions. By sharing information from wearables and regarding areas such as lifestyle, complaints, energy balance, exercise, and nutrition, our platform can provide you with more relevant content.

If you use our coaching services, you may share information with your coach.

If you use HelloFysio, we process the following data:
• First name;
• Last name;
• Date of birth;
• Email address;
• Phone number;
• Citizen Service Number (BSN);
• Medical data;
• Insurance information.

If you use our well-being platform or mobile application, certain technical data will also be processed. This may include browser type, operating system, device information, and other technical information automatically collected during your use of our website or services.

If you subscribe to one of our email updates, we process the following data based on your consent:

First name;
Last name;
Email address.

Legal grounds for processing personal data

A legal basis is required for processing personal data. As mentioned above, we process your personal data based on the performance of an agreement with you, and in some cases we specifically ask for your consent to process your data. It is also possible that we must process your personal data due to a legal obligation.

In addition, HC Health processes personal data based on legitimate interest. This may include activities such as marketing, security, IT management, market research, analysis of products or services, business operations, legal matters, and internal management.

Purposes for processing personal data

HC Health processes your personal data for the following purposes:

To perform the agreement;
To communicate with platform users, including answering questions, providing support, and arranging appointments and bookings;
To provide product and service information to customers and interested parties;
To comply with legal obligations;
To diagnose and resolve technical issues;
To analyze trends and user behavior, and improve the overall performance and usability of the well-being platform;
To improve our products and services;
For marketing and promotional purposes, provided consent has been given.

Sharing personal data with third parties

The data you provide to HC Health may also be processed by third parties. This only takes place within the scope of the purposes mentioned above. We have made agreements with these parties (processors) to ensure the security of your personal data. These agreements are laid down in data processing agreements.

We do not share personal data with parties with whom no data processing agreement or confidentiality agreement has been concluded. However, exceptions may apply in the event of a legal obligation. We may also share personal data with third parties if you provide written consent.

Security measures

HC Health takes the necessary measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Among other things, we use encryption technologies and restrict access to authorized personnel only.

In the field of information security, HC Health is ISO 27001 and NEN 7510 certified. This means HC Health complies with the highest national and international standards for information security in healthcare.

Your rights regarding your data

You have the right to access, rectify, or delete the personal data we have received from you. You may also object to the processing of (part of) your personal data by us or by one of our processors. In addition, you have the right to have the data you provided transferred to yourself or directly to another party on your behalf. We may ask you to identify yourself before complying with such requests.

If we process your personal data based on your consent, you always have the right to withdraw that consent.

If you have a complaint regarding the processing of your personal data, we ask that you contact us directly first. The contact person for handling complaints is Reda Mizab ([email protected] or +31 20 412 3006).

If we cannot resolve the matter together, you also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority in the field of privacy protection.

Retention periods

HC Health retains your personal data as long as there is a customer relationship with HC Health or as long as you continue to show interest in HC Health products and services. In addition, your data will be retained in accordance with mandatory legal retention periods or as long as retaining your data is necessary under the circumstances.

Transfer of personal data outside the EU

In principle, your personal data is processed within Europe and therefore falls under the scope of the GDPR.

If personal data is transferred to a recipient in a so-called third country, this will only occur if that country provides an adequate level of protection for personal data according to the European Commission. If personal data is transferred to a country that does not provide an adequate level of protection, HC Health will ensure that appropriate safeguards are implemented as required under the GDPR.

Cookies

HC Health uses Google Analytics to track how visitors use the website. Google Analytics recognizes your (temporary) IP address during each visit to our website and, where applicable, the website from which you came. Google uses this information to track website usage, provide us with reports about website activity, and offer advertisers information about the effectiveness of their campaigns. We use this data to analyze visitor navigation flows in order to provide a better user experience. Google never has access to personal or medical data.

Visiting and postal address
• HC Health
• H.J.E. Wenckebachweg 123, 1096 AM Amsterdam, The Netherlands
• www.hchealth.nl
• +31 20 412 3006

Please feel free to contact our Security and Compliance Officer if you have any questions or comments regarding this Privacy Statement. Contact details: Reda Mizab ([email protected] / +31 20 412 3006).

This Privacy Statement was last amended on: March 1, 2024.