Privacydeclaraton CDC Complete Dental Care

CDC Complete Dental Care (''we''), established in the Netherlands, is responsible for the processing of personal data as set out in this Privacy Statement.


CDC Complete Dental Care considers careful processing of personal data of utmost importance. Personal data are carefully processed and secured. When processing, we adhere to the requirements of the General Data Protection Regulation (the "AVG"). This Privacy Statement explains how we collect and use your data in accordance with the AVG.


In this Privacy Statement, we explain what personal data we collect and use, and for what purpose. We recommend that you read this Privacy Statement carefully. This Privacy Statement applies to our website, www.cdctandzorg.nl, and related websites and Services.


This Privacy Statement was last amended on: 1 April 2021


Use of Personal Information

If you use websites and related Services offered by CDC Complete Dental Care, you may share personal information with us. We collect and use personal data that you, or your company, share directly with us. We will not use the personal information for purposes other than those described in this statement, unless you have given us your prior consent.


Types of data collected

When you use our Services, we may collect the following data:


  • First and last name
  • Address details
  • Telephone number
  • E-mail address
  • IP address
  • Other personal data that you actively provide, for example by filling in form fields on this website or passed on in correspondence or during telephone calls
  • Data about your activities on our website
  • Data on your surfing behaviour across different websites (e.g. because this company is part of an advertising network)
  • Internet browser and device type

Grounds for processing

We generally process your personal data for the following purposes:


  • Sending you our newsletters and/or appointment reminders
  • To be able to call you or send you an e-mail if this is necessary for us to be able to carry out our services
  • Informing you about changes to our services and products
  • CDC Complete Tandzorg analyses your behaviour on the website in order to improve the website and to tailor the products and services offered to your preferences.
  • CDC Complete Dental Care also processes personal data if we are legally obliged to do so, such as data we need for our tax return. 


We collect your personal data based on legitimate interests or your consent, which you can withdraw at any time.


Retention of personal data

We will retain your personal data for as long as necessary to fulfil the purposes of this Privacy Statement. In general, we will retain personal data of our website visitors for 60 months.


Your Rights

You have the right to access the information we process. If you wish to do so, please contact us directly. We will ensure that we provide you with a copy of the data we process about you. We may need to verify your identity in order to comply with your request. If you believe that any information we are processing about you is incorrect, you may contact us to update your information. You also have the right to object to the data processing. If you want us to delete your information, you can inform us at any time. You may contact us at any time with regard to these requests. We will always respond in a timely manner, in accordance with the AVG. If you are not satisfied with the response you receive, you can take your complaint to the appropriate regulatory authority.


Sharing with others

We will not share your information with others without your permission, unless this is necessary for the execution of the agreement that you, or your organisation, have concluded with us, or unless it is a legal obligation.


Transfer of personal data

In order to fulfil the purposes described in this Privacy Statement, we may transfer your data outside the EEA. When we do so, we will take appropriate steps to ensure that personal data is properly protected. For transfers to the United States, we will ensure that any such US party is Privacy Shield compliant. For other transfers, we may transfer your data to a country recognised by the European Commission as providing an adequate level of protection in relation to Personal Data.


Analytics

Data you provide may be stored for the purpose of statistical analysis, including through Google Analytics, Hotjar and Mailblue. These statistics are used to optimise the Services. This enables us to see how our visitors use the website and to improve the website on that basis. Where possible, we will pseudonymise this data.


Cookies

We want to be able to offer you relevant and personalised information in a user-friendly manner. To this end, we use different types of cookies on our websites. For example, we place cookies that are necessary for the functioning of the site. These include the ability to respond, the operation of spam filters, video playback and caching to make the website faster. We also use analytical cookies that do not infringe on your privacy.


In general, cookies are saved for the duration of the (browser) session. In addition, your IP address may be stored in the log files of our web server if you use our Services. This is necessary to properly administer and secure our Services. We do not use your IP address to track or record your online behaviour. Generally, we are unable to link your IP address to your name, address or other identifying information, except when you provide such information to us and continue to use the same IP address.


You may opt out of cookies by configuring your Internet browser so that it does not store cookies anymore. In addition, you can delete all information previously stored using your browser settings.


Security

We ensure that your personal data is protected against loss or against unlawful processing. Amongst others, we have taken the following technical and organisational measures:


  • Encryption of data;
  • Pseudonymisation of data;
  • The use of Virtual Private Servers (VPN) accessible with the SSH key;
  • Transfers only over SSL
  • Purpose-bound access restrictions;
  • Control of recognised authorisations.