Privacy statement of Medisch Handelen

This privacy statement is that of Konstrui B.V., trading as Medisch Handelen, established at Grote Beer 57, 3893 DJ Zeewolde, the Netherlands, registered with the Dutch Chamber of Commerce under number 70356882, VAT number NL858287006B01. In this statement we refer to ourselves as "Medisch Handelen" or "we". This is a translation of the Dutch privacy statement; in case of any difference, the Dutch version applies.

1. What this statement covers

1.1 This statement describes which personal data we process through the website medischhandelen.nl and through our online document system for quotations, why we do so, and what you can ask of us.

1.2 Medisch Handelen is the controller of this data. For questions about privacy, you can reach us at [email protected] or by post at the address above.

1.3 For the data we use to perform an agreement, article 12 of our terms and conditions also applies.

2. The contact form

2.1 Through the contact form we receive your name, your email address, your telephone number if you fill it in, and your question or comment.

2.2 We store the submission in the website's management system and receive it by email at [email protected]. You receive a confirmation with a copy of what you filled in at the email address you provided.

2.3 We only use this data to answer your question.

3. The quotation form

3.1 Through the quotation form on a product page we receive the product concerned, your name, the name of your organisation, your email address, your telephone number if you fill it in, and your message if you fill it in.

3.2 We store the submission in the website's management system and receive it by email at [email protected].

3.3 With a request, the website creates a customer in the management system with the name of your organisation, your name as contact person, your email address and your telephone number, unless your organisation is already listed under the same name. The website also creates a draft quotation with your name, your email address, the product and your message.

3.4 We use this data to prepare a quotation for you, to be in contact with you about it, and to prepare an agreement.

4. Quotations in our online document system

4.1 A quotation from us is online behind a personal link. Each time someone opens that link, the document system records the time, the IP address and the browser details in a log file for that document. This shows us whether and when the quotation was opened.

4.2 If you accept a quotation through the document system, the system records the name you enter, the time, the IP address, the browser details, and the version and date of the terms and conditions you accept. We receive a notification by email with the title of the document, the name of the customer, your name and the time. We keep this data as proof of the agreement, as article 12.3 of the terms and conditions describes.

4.3 If you have the quotation sent to an email address, we use that address to send the email with the quotation and the terms and conditions as PDF. The address is not stored with the document; it is only kept temporarily in the queue for sending.

4.4 The PDF of a quotation is made for us by Cloudflare (Cloudflare Browser Rendering). For this, the content of the quotation, including the customer details in it, is sent to Cloudflare.

5. Third-party services

5.1 Fonts. The website loads fonts from Google Fonts. Your browser fetches them directly from Google; Google receives your IP address and your browser details.

5.2 Statistics. We measure visits to the website with Pirsch Analytics. Your browser loads the Pirsch script and, for every page you visit, sends Pirsch your IP address, your browser details, the page visited and the website you came from, among other things. Pirsch does not use cookies for this and does not store your IP address.

5.3 Captcha. The contact form and the quotation form use Cloudflare Turnstile to check that a person, and not an automated program, fills in the form. For this, Cloudflare receives your IP address and your browser details, among other things.

5.4 Email. Email from the website, such as the confirmation of the contact form and the quotation as PDF, is sent through a service for sending email.

5.5 Errors and performance. To find errors and faults in the website, the website records technical data in Laravel Nightwatch: about requests to the website, such as the address of the page, your IP address and your browser details, about sent emails and about errors.

5.6 Storage. The website, the management system and the data in this section are on a server of a hosting provider. We keep a copy of the content of the management system, including form submissions, customers and quotations, in a protected repository using version control.

6. Cookies

6.1 The website places two cookies: a session cookie and a cookie that protects forms against misuse (XSRF-TOKEN). Both are needed for the website and the forms to work, and they expire after two hours.

6.2 The website does not place cookies for statistics or advertising.

7. Legal basis

7.1 We process data from the quotation form and the document system to prepare and perform an agreement with you.

7.2 We process data from the contact form, the statistics, the captcha and the recording of errors on the basis of our legitimate interest: answering questions, improving the website, and protecting the website and the forms against misuse.

7.3 We process data that we must keep for our administration because the law requires it.

8. Retention

8.1 We do not keep personal data longer than necessary for the purpose for which we received it, and as long as the law requires for our administration.

8.2 We keep the data of an acceptance of a quotation as proof of the agreement.

9. Your rights

9.1 You can ask us which data we hold about you, and have it corrected or deleted. You can also object to processing, ask us to restrict it, or request your data in order to give it to someone else.

9.2 Send your request to [email protected]. We may ask you to confirm who you are. We respond within one month.

9.3 Data that we must keep by law, or that we need as proof of an agreement, we only delete once that reason no longer applies.

9.4 If you do not agree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes

10.1 We may change this statement. The version and date of the statement that currently applies are shown at the top.