1. Processing of personal data
As the data controller, Van Heek Medical processes personal data for the logistics involved in medical disposables. 'Personal data' encompasses all data that can be related to an individual, such as name, address and contact details. Van Heek Medical processes personal data for its procurement, sales and supply processes. Van Heek Medical warrants that personal data is processed with due care and is adequately safeguarded.

2. What personal data does Van Heek Medical process?
Data relating to suppliers:

• Supplier's name, address, town and postcode
• Name of contact
• Contact’s email address
• Contact's phone and/or mobile number(s)

Data relating to customers:

• Customer's name, address, town and postcode
• Name of contact
• Contact’s email address
• Contact's phone and/or mobile number(s)

3. What do we use your personal data for?
Van Heek Medical only uses your personal data for the wholesale procurement, sale and supply of medical disposables. In addition to these logistical processes, there are other processes for which we process personal data. These include:

• Debtor and creditor administration
• Dealing with complaints
• Providing mailings to customers and suppliers

4. How do we handle the protection of your data?
Van Heek Medical takes appropriate technical and organisational measures in order to protect your personal data against loss or unlawful use. It concerns measures relating to the way our staff can access your data and how your data is secured against any third-party breach. We reappraise these measures on a regular basis in order to warrant security, observing all relevant legislation and regulations, and we also keep our software up-to-date.

5. Basis for processing
Van Heek Medical processes personal data in accordance with the General Data Protection Regulation (GDPR) and the guidelines issued by the Dutch Personal Data Authority [Autoriteit persoonsgegevens].

Processing personal data for the procurement, sale and supply of medical disposables is based on the contract between us and you or your company, or else a justified interest (processing for direct marketing).

6. Sharing your personal data
We only share your personal data with third parties if this is necessary for our services.

We share your personal data with our service providers, who in turn process that data on the instructions of Van Heek Medical, for instance for payment processing, dispatching goods, managing and maintaining IT systems. We make contractual arrangements with all these suppliers in order to protect any data that is exchanged.

7. Who can access your data?
Staff at Van Heek Medical have access to your data if and to the extent that their job requires this, for the procurement or sale or supply of the medical disposables and/or for the performance of the additional processes. Every employee signs a non-disclosure agreement when joining our company. Our staff are also made aware of the importance of this topic during their internal basic training.

8. How long do we retain your data?
We do not retain your personal data for any longer than necessary for the purposes for which it is processed. Unless we are required by law to retain your personal data for a longer period, we will delete your personal data no later than 2 years after our business relationship comes to an end. If you are no longer employed as a contact person for our business partner, we will delete your personal data as soon as we are notified of that fact.

9. What rights do you have?
You have complete control over your personal data and you are entitled to rely upon the following rights:

Right of access by the data subject (Article 15, GDPR)

You have the right at any time to demand information about exactly what we are doing with your personal data and to influence this.

Right to rectification (Article 16, GDPR)

You have the right to get us to rectify or supplement any inaccurate or incomplete personal data.

Right to erasure (right to be forgotten) (Article 17, GDPR)

Subject to certain conditions, you have the right to have your personal data deleted from our systems. Personal data that Van Heek Medical has to process in order to meet a statutory obligation is excluded from this.

Right to restriction of processing (Article 18, GDPR)

You have the right to restrict the use of your personal data if certain criteria are satisfied.

Right to data portability (transmission of data) (Article 20, GDPR)

Subject to certain conditions, you have the right to obtain a copy of the data you have provided to us and that we process by computer.

Right to object (to processing) (Article 21, GDPR)

You have the right to object to the processing of your personal data if you have a justified interest in doing so.

If you wish to take advantage of any of these rights, send us an email, clearly setting our your name, contact details and the right you want to rely upon. Send it to:

Van Heek Medical
Attn. of the Privacy Officer
Macroweg 10
5804 CL Venray, Netherlands
Email: info@vanheek.com

Or to:
Van Heek Medical, part of the Mosadex Group           
Attn. of the Data Processing Officer
Email address: fg@mosadex.nl

We will reply to you within one month of receiving your request, at the latest.

10. Any questions?
Do you have any questions about our privacy policy? Please email us at fg@mosadex.nl.

You have the right to submit a complaint to the Dutch Personal Data Authority about the way in which Van Heek Medical processes your personal data.