Version:<\/strong> 2.6 Adjust cookie settings<\/a><\/p>\n Signed up through Facebook or Instagram? The short version.<\/strong><\/p>\n naiida Dentists BV (Amstelstroomlaan 184, 1096 GL Amsterdam<\/a>, info@naiidatandartsen.com<\/a>) receives your first name, last name, phone number and e-mail address from the form, plus the form language, the platform (Facebook or Instagram) and the time you sent it. Meta pre-fills your name, phone number and e-mail address from your profile. You can change them before you send the form. We receive nothing else from your profile. We use your details to message you on WhatsApp within one working day to plan a first appointment. If you don't answer, we'll call you once.<\/p>\n The legal basis is GDPR article 6(1)(b): steps at your request before a contract. Meta processes the form data on our behalf and keeps it available to us for 90 days. WhatsApp processes data about your use of its service under its own privacy policy. Meta and WhatsApp may process data in the United States, under the EU-US Data Privacy Framework and the EU standard contractual clauses.<\/p>\n You do not have to give us these details. Without your name and a phone number or e-mail address, we cannot contact you. If you do not become a patient, we delete your details one year after our last contact. If you do become a patient, your details become part of your patient record, which Dutch law requires us to keep for 20 years after the last change to the record. You can ask to access, correct or delete your details, to restrict their use, or to receive them in a portable format, by e-mailing info@naiidatandartsen.com<\/a>. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens,autoriteitpersoonsgegevens.nl). The full policy below is in Dutch.<\/p>\n At naiida, we believe in openness. You entrust your health to us. We take that trust seriously, also when it comes to your personal data. In this statement, we explain what data we collect, why we do so, how long we retain it, and what rights you have.<\/p>\n naiida Tandartsen BV.<\/strong> naiida Tandartsen BV is the controller<\/strong> within the meaning of the General Data Protection Regulation (GDPR). We determine which data is processed, for what purpose, and in what manner.<\/p>\n This privacy statement applies to all persons whose personal data naiida processes:<\/p>\n If you register via our website, we ask:<\/p>\n You are not required to register via the website. If you do, the fields marked with an asterisk are required to submit the form. We need your date of birth and address to register you as a patient.<\/p>\n If you ask us a question via the contact form, we ask for your first name, last name, and email address. Your phone number and your question or comment are not mandatory. We use this information solely to answer your question.<\/p>\n We advertise on Facebook and Instagram. Some advertisements include a sign-up form. If you submit that form, we receive:<\/p>\n Meta pre-fills this information from your Facebook or Instagram profile. You can modify it before submitting the form. We do not receive any other data from your profile. We do not ask about your health or health insurance in the form. Furthermore, we only receive overviews from Meta regarding how often an advertisement has been shown and clicked, not per person.<\/p>\n You are not required to provide this information. Without your name and telephone number or email address, we cannot contact you for an initial appointment.<\/p>\n After registering via Facebook or Instagram, we will send you a WhatsApp message within one business day. If you do not respond, we will call you once. After registering via the website, we will contact you via WhatsApp, by phone, or by email. You can also contact us yourself via WhatsApp. In doing so, we process your phone number, your name as it appears in WhatsApp, and the content of the messages.<\/p>\n At the start of a therapeutic relationship, we process:<\/p>\n During your first visit, we will verify your proof of identity and your BSN. This is required by the Wabvpz. Without your BSN and insurance details, we cannot submit a claim to your health insurer. You will then have to pay the bill yourself. Without the medical data necessary for your treatment, we cannot treat you responsibly.<\/p>\n We process medical data for your dental treatment. These are special personal data<\/strong>: a protected category under the GDPR. We handle this with extra care. This concerns:<\/p>\n The following rules (WGBO) apply to the treatment of minors:<\/p>\n When visiting our website, technical data may be processed, such as the IP address and pages visited. See \u00a7 11 and our cookie statement.<\/p>\n If you sign up for our newsletter, we process your email address and, if you provide it, your first name. In addition, we record when and how you gave consent. You sign up separately, using your own checkbox that is not pre-checked. You then confirm your registration via email. Every newsletter contains a link to unsubscribe. You are not obliged to sign up. Your treatment does not depend on it. If you are under the age of 16, consent from your parent or legal guardian is required.<\/p>\n We process personal data exclusively for well-defined and legitimate purposes. The table below lists the legal basis for each purpose.<\/p>\n Process a registration and contact you for a first appointment (website, Facebook or Instagram, WhatsApp)<\/p>\n<\/div>\n Measures at your request prior to an agreement (Article 1, sub b)<\/p>\n<\/div>\n Only if you share something about your health yourself, for example in the comments field: healthcare (section 2, sub h)<\/p>\n<\/div>\n<\/div>\n Execution of treatment agreement<\/p>\n<\/div>\n Performance of the agreement (Article 1, sub b)<\/p>\n<\/div>\n Healthcare (Article 2, sub h)<\/p>\n<\/div>\n<\/div>\n Maintaining medical records<\/p>\n<\/div>\n Statutory obligation (paragraph 1, sub c)<\/p>\n<\/div>\n Healthcare (Article 2, sub h)<\/p>\n<\/div>\n<\/div>\n Submit a claim to the health insurer<\/p>\n<\/div>\n Execution of the agreement (Article 1, sub b). For the use of your BSN and the NZa performance codes: statutory obligation (Article 1, sub c, Wabvpz and Wmg)<\/p>\n<\/div>\n Healthcare (Article 2, sub h)<\/p>\n<\/div>\n<\/div>\n Financial administration<\/p>\n<\/div>\n Statutory obligation (paragraph 1, sub c)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Communication regarding agreements<\/p>\n<\/div>\n Performance of the agreement (Article 1, sub b)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Send newsletter<\/p>\n<\/div>\n Consent (Article 1, sub a)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Quality control and safety incidents<\/p>\n<\/div>\n Legal obligation \/ legitimate interest (Article 1, sub c\/f)<\/p>\n<\/div>\n Healthcare (Article 2, sub h)<\/p>\n<\/div>\n<\/div>\n Dental spa treatments (forward appointment details to naiida Amsterdam BV)<\/p>\n<\/div>\n Performance of the agreement (Article 1, sub b)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Sharing health data with naiida Amsterdam BV for spa treatment<\/p>\n<\/div>\n Consent (Article 1, sub a)<\/p>\n<\/div>\n Consent (paragraph 2, sub a)<\/p>\n<\/div>\n<\/div>\n Website analysis via Google Analytics<\/p>\n<\/div>\n Consent (Article 1, sub a)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Measuring ad results via Google Ads with conversion events from Google Analytics 4, without hashed contact details from forms<\/p>\n<\/div>\n Consent (Article 1, sub a)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Security monitoring, access control and incident detection<\/p>\n<\/div>\n Legitimate interest (Article 1, sub f)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n Answering a question via the contact form<\/p>\n<\/div>\n Legitimate interest (Article 1, sub f)<\/p>\n<\/div>\n Only if you share something about your health yourself: healthcare (Article 2, sub h)<\/p>\n<\/div>\n<\/div>\n Protecting our forms against spam and abuse (Google reCAPTCHA)<\/p>\n<\/div>\n Legitimate interest (Article 1, sub f)<\/p>\n<\/div>\n not applicable.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n Advertising on Facebook and Instagram.<\/strong> We only choose in which area, in which language, and from what age (18 years) our advertisement is shown. Within that choice, Meta determines to whom the advertisement appears, based on its own data and its own privacy policy. We do not share any patient or applicant data with Meta for this purpose. We do not place a Meta advertising pixel on our website.<\/p>\n We process personal data exclusively for the purposes described in this statement or for purposes compatible therewith under the GDPR.<\/strong><\/p>\n We do not retain data longer than necessary. Statutory retention periods always take precedence.<\/p>\n Medical record<\/p>\n<\/div>\n 20 years<\/strong> after the last change in the file, or longer if necessary for good care.<\/p>\n<\/div>\n Art. 7:454 paragraph 3 of the Dutch Civil Code (WGBO, amended 2020)<\/p>\n<\/div>\n<\/div>\n Financial administration<\/p>\n<\/div>\n 7 years<\/p>\n<\/div>\n Tax legislation (AWR)<\/p>\n<\/div>\n<\/div>\n Appointment details (non-patients)<\/p>\n<\/div>\n 1 year after last contact<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e<\/p>\n<\/div>\n<\/div>\n Newsletter<\/p>\n<\/div>\n Until you unsubscribe. After that, we will remove your email address from the mailing list. We will retain proof of your consent and unsubscribe for 1 year.<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e and Art. 7 paragraph 1<\/p>\n<\/div>\n<\/div>\n Registrations via website, Facebook, Instagram or WhatsApp<\/p>\n<\/div>\n 1 year after the last contact. If you become a patient, we will include your data in your file. We will delete the registration itself within 1 year.<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e<\/p>\n<\/div>\n<\/div>\n Questions via the contact form<\/p>\n<\/div>\n 1 year after the last contact<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e<\/p>\n<\/div>\n<\/div>\n Messages via WhatsApp and email with patients<\/p>\n<\/div>\n We include anything of medical importance in the file. We delete the message itself no later than 1 year after the last contact.<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e<\/p>\n<\/div>\n<\/div>\n Appointment details for the dental spa<\/p>\n<\/div>\n As with appointment details, naiida Amsterdam BV stores them in accordance with its own privacy statement.<\/p>\n<\/div>\n GDPR Art. 5 paragraph 1 sub e<\/p>\n<\/div>\n<\/div>\n Website log files<\/p>\n<\/div>\n 90 days<\/p>\n<\/div>\n Legitimate interest (security)<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n After the retention period has expired, data is securely and demonstrably deleted or irreversibly anonymized.<\/p>\n We only share your data if it is strictly necessary. Below you will find with whom and why.<\/p>\n naiida utilizes digital systems and specialized service providers for practice management, communication, security, planning, analysis, and support of care processes. Below, we list the key categories of external parties and service providers with whom we collaborate.<\/p>\n With your permission, we exchange data with other involved healthcare providers, such as your general practitioner, an oral surgeon, an orthodontist, or a dental hygienist. We do this via a secure channel.<\/p>\n When we submit a claim for your treatment to your health insurer, we include your BSN, your insurance details, and the treatment codes. The law requires us to use your BSN and the NZa's performance descriptions for this purpose.<\/p>\n For processing claims and accounts receivable management, Payt BV.<\/strong> (paytsoftware.com) engaged. This is done via naiida Amsterdam BV, which handles accounts receivable management on our behalf (see further down in this article). Payt provides:<\/p>\n Payt is certified according to ISO 27001<\/strong> (information security) and NEN 7510<\/strong> (information security in healthcare).<\/p>\n VECOZO is the secure communication platform through which claims are exchanged between healthcare providers and health insurers. Following authorization by naiida, Payt has its own connection to VECOZO. To this end, VECOZO processes the necessary claim data, including treatment codes and insurance details.<\/p>\n Your patient file is managed in Exquisite<\/strong>, our dentist-specific practice management software. Data is stored on servers within the European Economic Area (EEA).<\/p>\n To send the newsletter, we use an email sending service that stores the data within the European Economic Area. That service processes your email address, your first name, and the data regarding your registration as a processor on our behalf. We name the service here as soon as the newsletter starts.<\/p>\n Our website was built by TopPraktijk. TopPraktijk manages and hosts the website on Vimexx servers in the Netherlands. In doing so, TopPraktijk, acting as a processor on our behalf, processes the data from the registration form and the contact form, as well as technical visitor data, such as IP addresses in the server logs.<\/p>\n Our email, including info@naiidatandartsen.com<\/a> and the notifications from the website form are handled via Proton AG in Switzerland. Proton processes the content of emails as a processor on our behalf.<\/p>\n To protect our forms against spam and abuse by automated programs, we use Google reCAPTCHA Enterprise<\/strong>, a service of Google Ireland Limited. The service assesses whether a visitor is human. To do this, Google processes, among other things, your IP address, data about your browser and device, and how you use our website. Google processes this data on our behalf, based on the Google Cloud processing terms. In addition, Google uses the data about your device and browser to maintain and improve reCAPTCHA and for the general security of its services. Google is itself responsible for this. Google does not use this data for personalized advertisements.<\/p>\n For website analysis, we use Google Analytics (GA4)<\/strong>, a service of Google Ireland Limited. Google processes pseudonymized visitor data on our behalf as a processor. See \u00a7 7 for information on transfers outside the EEA and \u00a7 11 for the cookie policy.<\/p>\n We use Google Ads<\/strong>, a service of Google Ireland Limited, to evaluate the results of our advertisements. To this end, we import certain conversion events, such as a registration, from Google Analytics 4 into Google Ads. Google Analytics 4 records these events only after your consent for analytical cookies. To the extent that Google Ads uses advertising cookies or other non-essential advertising technology, this is done only with your consent for marketing cookies. We do not use Enhanced Conversions for this measurement, where contact details from our forms (such as name, address, email address, or phone number) are hashed and sent to Google. We do not send the content of completed forms or medical record data as conversion data to Google Ads. You can find more information about the cookies and your choices in \u00a7 11 and our cookie statement.<\/p>\n Processed for the registration forms in our advertisements on Facebook and Instagram Meta Platforms Ireland Limited<\/strong> the data entered on our behalf, based on Meta's terms for sign-up advertisements and Meta's data processing terms. Within the Meta environment, sign-ups are available to us for a maximum of 90 days. We transfer them from there into our own records. For the display of advertisements and for your use of Facebook and Instagram, Meta itself is the data controller, in accordance with Meta's privacy policy.<\/p>\n We use the following for contact regarding your application and appointments: WhatsApp Business<\/strong> from WhatsApp Ireland Limited. Messages are end-to-end encrypted. WhatsApp also processes data regarding your use of the service itself, in accordance with WhatsApp's privacy policy. We coordinate practical matters via WhatsApp, such as scheduling an appointment. If you send us something about your health via WhatsApp, we will record it in your file and discuss it further at the practice.<\/p>\n The dental spa treatments are offered by naiida Amsterdam BV.<\/strong> (KVK 42020148, RSIN 869323611, Amstelstroomlaan 184, 1096 GL Amsterdam<\/a>naiida Amsterdam BV is an independent legal entity and acts for the dental spa as independent controller<\/strong>.<\/p>\n In addition, naiida Amsterdam BV performs accounts receivable management and administrative support on our behalf. To this end, it acts as a processor for naiida Tandartsen BV and works with Payt as a sub-processor.<\/p>\n If you book a dental spa treatment via naiida, naiida Tandartsen shares the necessary basic data (name, contact details, and appointment details) with naiida Amsterdam BV on the basis of the performance of the contract (Art. 6 para. 1 sub b GDPR). Health data is shared exclusively with your explicit prior consent (Art. 6 para. 1 sub a combined with Art. 9 para. 2 sub a GDPR). You can withdraw this consent at any time.<\/p>\n naiida Amsterdam BV is itself the data controller for all further processing of your data in the context of its wellness services. Before the dental spa services commence, naiida Amsterdam BV will publish its own privacy statement. Until then, you can contact naiida Amsterdam BV with privacy questions regarding processing by naiida Amsterdam BV via info@naiidatandartsen.com<\/a>.<\/p>\n In exceptional cases, we are required to provide data to supervisory authorities (e.g. the Health and Youth Care Inspectorate) or investigative agencies. We do this only when required by law.<\/p>\n We never sell your data to third parties. We do not use your data for the commercial purposes of other parties. What Google does for its own purposes with your permission is stated above under Google Ads.<\/strong><\/p>\n In principle, we do not transfer your personal data outside the European Economic Area (EEA). There are three exceptions to this:<\/p>\n Google Analytics, Google Ads and reCAPTCHA (Google LLC, United States)<\/strong><\/p>\n Our website uses Google Analytics (GA4), Google Ads, and Google reCAPTCHA Enterprise, services of Google Ireland Limited. Google Ireland may use the infrastructure of Google LLC in the United States. As a result, data may be processed outside the EEA. For Google Analytics, this includes data on website usage and conversion events; for Google Ads, data for advertising and conversion measurement, including conversion events imported from GA4; for reCAPTCHA, it includes IP addresses and browser and device data. We do not use Enhanced Conversions, where hashed contact information from website forms is sent to Google. We do not send medical record data to these services. We limit the data shared via website URLs and measurement events and verify that it does not contain form content or health information.<\/p>\n Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. In addition, Google uses the European Commission's Standard Contractual Clauses.<\/p>\n Meta and WhatsApp (Meta Platforms, Inc., United States)<\/strong><\/p>\n Meta Platforms Ireland Limited and WhatsApp Ireland Limited use the infrastructure of their parent company, Meta Platforms, Inc., in the United States. As a result, data from registration forms and WhatsApp messages may be processed outside the EEA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. Additionally, Meta uses the European Commission's Standard Contractual Clauses.<\/p>\n Proton (Switzerland)<\/strong><\/p>\n The European Commission has determined that Switzerland offers an adequate level of protection (adequacy decision). Therefore, no additional safeguards are required.<\/p>\n You can request a copy of the standard contractual clauses applicable to these transfers via info@naiidatandartsen.com<\/a>.<\/p>\n All other software partners (Exquise, Payt) store data within the EEA. If this changes, we will inform you via an update to this privacy statement.<\/p>\n We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Specifically, this means:<\/p>\n Technical<\/strong><\/p>\n Organizational<\/strong><\/p>\n Do you suspect that your data has fallen into the wrong hands or that unauthorized access has occurred? Report this immediately via info@naiidatandartsen.com<\/a>. We take every signal seriously.<\/p>\n If there is a data breach that poses a risk to your rights and freedoms, we are obliged to report this within 72 hours<\/strong> to report to the Dutch Data Protection Authority (AP). If the data breach is likely to pose a high risk to you, we will also inform you personally as soon as possible.<\/p>\n Under the GDPR, you have the following rights. You can exercise them by sending a request to info@naiidatandartsen.com<\/a>.<\/p>\n Right of access (Art. 15 GDPR)<\/strong><\/p>\n You can request which personal data we process about you and receive a copy.<\/p>\n Right to rectification (Art. 16 GDPR)<\/strong><\/p>\n Are your details incorrect or incomplete? You can ask us to correct this.<\/p>\n Right to erasure (Art. 17 GDPR)<\/strong><\/p>\n You may request the deletion of your data (\u201cright to be forgotten\u201d). A separate rule applies to your medical record. In principle, we retain it for 20 years (Art. 7:454 BW). You may, however, ask us to destroy it sooner (Art. 7:455 BW). We will do so within 3 months, unless the interests of another party or a legal obligation oppose this. In that case, we will explain why.<\/p>\n Right to restriction of processing (Art. 18 GDPR)<\/strong><\/p>\n You can request that the processing of your data be temporarily paused, for example while your objection or complaint is being processed.<\/p>\n Right to data portability (Art. 20 GDPR)<\/strong><\/p>\n You can request your data in a common, machine-readable format to transfer it to another healthcare provider.<\/p>\n Right of objection (Art. 21 GDPR)<\/strong><\/p>\n You may object to processing based on our legitimate interest, such as the security monitoring of our systems.<\/p>\n Right to withdraw consent<\/strong><\/p>\n Have you given us consent, for example for the newsletter, analytical cookies, or advertising cookies? If so, you can withdraw this at any time. What we did prior to this based on your consent remains lawful. After withdrawal, we will stop new measurements based on that consent and the placement of associated non-essential cookies. Previously lawfully collected data will be processed in accordance with the applicable retention periods. For the newsletter, we will retain proof of your consent and unsubscribe for 1 year (see \u00a7 5).<\/p>\n We respond in principle within one month<\/strong> at your request. In the case of complex or multiple simultaneous requests, we may extend this period by a maximum of 2 months. We will then inform you within the first month why and for how long.<\/p>\n To confirm your identity, we ask you to send the request from the email address known to us. If this is not possible, or if we have doubts, we will ask you to visit the practice with your proof of identity. We never ask you to send a copy of your proof of identity.<\/p>\n Exactly which cookies we use, including name, purpose, and retention period, is stated in our cookie statement.<\/p>\n Our website uses cookies and similar technologies. We distinguish three categories:<\/p>\n Necessary cookies (always active, no consent required)<\/strong><\/p>\n These cookies are technically necessary for the functioning and security of the website, such as remembering your cookie preference and protecting our forms with Google reCAPTCHA. Without these cookies, the cookie banner and our forms will not function properly.<\/p>\n Analytical cookies: Google Analytics (only with your consent)<\/strong><\/p>\n We use Google Analytics (GA4)<\/strong>, a service of Google Ireland Limited, to track how visitors use our website. We only place these cookies after you have given your consent via the cookie banner.<\/p>\n Google Analytics collects, among other things:<\/p>\n Google does not store your full IP address. The data is pseudonymized, not anonymous. We retain the analytics data for a maximum period. 14 months<\/strong> in Google Analytics. Google processes this data partly in the United States (see \u00a7 7).<\/p>\n We use analytical data to understand the usage of our website, improve our website, and measure conversions, such as sign-ups. To this end, certain conversion events are imported from GA4 into Google Ads. We do not link this data to your patient record and do not send completed form content or medical data as analysis or conversion parameters.<\/p>\n Advertising cookies: Google Ads (only with your consent)<\/strong><\/p>\n We use Google Ads to evaluate the results of our advertisements. To do this, we may use conversion events from Google Analytics 4, such as a registration, in Google Ads. GA4 only measures these events after you have given consent for analytical cookies. Advertising cookies or other non-essential advertising technology are only used for marketing cookies with your consent. We do not use Enhanced Conversions, where contact details from website forms are hashed and sent to Google. Which advertising cookies are actually placed and how long they are retained is stated in our cookie statement. You can always adjust your preferences.<\/p>\n We do not place a Meta advertising pixel. Should we decide to do so, we will first amend this statement. We only place such a pixel with your consent via the cookie banner.<\/p>\n You can change or withdraw your choice at any time via the cookie settings on our website. Upon withdrawal, we will stop new measurements requiring consent and stop placing new non-essential cookies. Cookies already placed will be deleted where technically possible or can be cleared via your browser settings.<\/p>\n You can also block Google Analytics yourself via the Google Analytics Opt-out browser extension<\/a>.<\/p>\n Do you believe that we are not handling your personal data correctly? We would like to hear from you first, so that we can resolve this together. Send your complaint to info@naiidatandartsen.com<\/a>.<\/p>\n If we are unable to resolve the matter together, you have the right to file a complaint with the supervisory authority:<\/p>\n Dutch Data Protection Authority (AP)<\/strong> For new digital processes, systems, or data processing, we assess the impact on privacy and information security in advance, in accordance with the principles of privacy by design<\/strong> and privacy by default<\/strong>. Where the impact is significant, we conduct a Data Protection Impact Assessment (DPIA) in accordance with Article 35 of the GDPR.<\/p>\n We do not use exclusively automated decision making<\/strong> which has legal effects or otherwise significantly affects you within the meaning of Article 22 GDPR.<\/p>\n We do not profile you. Medical decisions are always made by the dentist.<\/p>\n We may amend this privacy statement, for example if our services change or if legislation requires it. The most current version is always available on our website, including the date of the last modification. We will notify you of significant changes on our website.<\/p>\n Previous versions are available upon request via
\nDate:<\/strong> October 13, 2026
\nPrevious versions:<\/strong> available upon request via info@naiidatandartsen.com<\/a><\/p>\n1. Who are we?<\/h2>\n
\nAmstelstroomlaan 184, 1096 GL Amsterdam<\/a>
\nChamber of Commerce number: 42020139 | RSIN: 869323532
\nE-mail: info@naiidatandartsen.com<\/a>
\nWebsite: www.naiidatandartsen.com<\/a><\/p>\n2. Whose data do we process?<\/h2>\n
\n
3. What data do we process?<\/h2>\n
3.1 Data via the registration form (website)<\/h3>\n
\n
3.2 Data via a registration form on Facebook or Instagram<\/h3>\n
\n
3.3 Contact via WhatsApp<\/h3>\n
3.4 Patient data<\/h3>\n
\n
3.5 Health data (special personal data)<\/h3>\n
\n
3.6 Minors<\/h3>\n
\n
3.7 Website details<\/h3>\n
3.8 Newsletter<\/h3>\n
4. Why do we process your data?<\/h2>\n
5. How long do we retain your data?<\/h2>\n
6. With whom do we share your data?<\/h2>\n
Other healthcare providers<\/h3>\n
Health insurers<\/h3>\n
Expense claims and accounts receivable management: Payt<\/h3>\n
\n
VECOZO<\/h3>\n
Practice management software: Exquise<\/h3>\n
Newsletter: mailing service<\/h3>\n
Website: TopPraktijk<\/h3>\n
Email: Proton AG<\/h3>\n
Google Ireland Limited: security of our forms<\/h3>\n
Google Ireland Limited: website analysis and ad measurement<\/h3>\n
Meta Platforms Ireland Limited: advertisements and registration forms<\/h3>\n
WhatsApp Ireland Limited: Messages<\/h3>\n
naiida Amsterdam BV: dental spa and wellness services<\/h3>\n
Legal obligations<\/h3>\n
7. International transfer<\/h2>\n
8. Security<\/h2>\n
\n
\n
9. Data breaches<\/h2>\n
10. Your rights<\/h2>\n
How does a request work?<\/h3>\n
11. Cookies<\/h2>\n
\n
12. Complaints<\/h2>\n
\nWebsite: www.autoriteitpersoonsgegevens.nl<\/a>
\nTelephone: 088 180 52 50<\/a><\/p>\n13. Privacy by design<\/h2>\n
14. Automated decision-making and profiling<\/h2>\n
15. Changes<\/h2>\n