Privacy Statement

Privacy legislation

We adhere to the requirements of privacy legislation. This means, for example, that we:

do not process data for which we have no legal basis
clearly state the purposes for which we process personal data via this privacy statement
limit the collection of personal data to only the personal data necessary for the purposes for which they are processed
do not pass on your data to third parties, unless this is necessary to provide the requested service or when we are legally obliged to do so
when we share your data, make agreements with third parties to ensure, for example, that they are not used for other purposes
take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf
respect your right to access, correct, or delete your personal data upon your request

N.B. This only applies to personal data for which NTS is the data controller. This means that if another party is the data controller, NTS is not liable for the processing of your data.

What personal data do we process?

personal data that we process from you when you register for a training
we offer healthcare professionals the opportunity to sign up for training courses via the website. For this purpose, we process your name, e-mail address, place of residence, and other information that you provide yourself
personal data that we process from you when you place an order
if you place an order via the website, we register personal data necessary to execute your order, such as: e-mail address, name, delivery address, place of residence, telephone number, and all other information you provide to us in the context of your order.
personal data that we process from you when you request a guest speaker
if you request a guest speaker from us, we register personal data to process your request, such as: e-mail address, name, telephone number, address of the information meeting, and all other information you provide to us in the context of your request.
personal data that we process from you when you work for us as a volunteer or are included in our media file
if you work for us as a volunteer or if you are included in our media file to make organ donation open to discussion in the press and at meetings, we register your personal data such as name, address, date of birth, e-mail address, telephone number, and a short biography stating, for example, which organ or tissue you received or for which organ you are on the waiting list. For volunteers, we also register bank account numbers and BSN (citizen service) numbers so that we can transfer reimbursements.

Personal data after contact with the NTS

If you provide your personal data via telephone or e-mail, we will register it. For example, your name, e-mail address, place of residence and other information that you provide yourself, such as the content of your question, request or complaint.

Personal data after job application

If you apply for a vacancy or send an open application, we may process personal data from you that you provide to us in connection with the application procedure. This may include your name, e-mail address and information in your CV or cover letter, information about your professional or academic background such as references, transcripts and certificates, and information you provide during the procedure, such as reports of conversations we have with you.

Newsletters, mailings and websites

when you read our digital newsletters or digital press releases, we can see from your e-mail address whether you open these messages and what you click on
when you visit our website transplantatiestichting.nl, we do not collect IP addresses and we do not place any tracking cookies. We can analyze your online behavior anonymously, but we have made tracing it back to an IP address impossible on all our analysis platforms.

Personal data as a business relation

If you are a supplier of ours, we may record your personal data such as first and last name, work and private e-mail address, work and private telephone number, name of the organization you work for, data regarding the goods and services delivered and the handling thereof.

Personal data for account membersite

We offer healthcare professionals the opportunity to log in to the NTS membersite via the website. Before you can make use of this, you must create an account. For this purpose, we process your name, initials, job title and e-mail address. We keep track of when a login occurs with a specific e-mail address.

Personal data from public sources

When you contact us or place an order with us, we may process personal data about you that we obtain from (public) sources, for example business websites such as LinkedIn, the Commercial Register of the Chamber of Commerce and the Land Registry.

What is it needed for?

We use your data to:

offer you the opportunity to create an account on our website
be able to offer our products and services
keep you informed of our services, to invite you to our events and to maintain further contact
comply with applicable laws and regulations or to meet norms and standards from our industry

How long do we retain personal data?

We do not retain your personal data longer than is necessary for the purposes for which they are processed. The retention period we apply depends on the purpose for which we process your personal data and whether any specific statutory retention obligations apply to us.

Rights

You have the right to access, replace, and delete personal data relating to you. You can also object to the use of your personal data or ask to restrict this use. If you have any complaints about how we handle your personal data, please contact us. We are happy to help you find a solution. Should that fail, you can always turn to the privacy regulator, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We may update this privacy statement from time to time. We advise you to consult it regularly.

Publishing and sharing data

NTS collects a lot of data. We publish and share this data within legal limits while safeguarding the privacy of both donor and recipient. We take into account:

General Data Protection Regulation (GDPR)
Organ Donation Act (Wod). This stipulates that organ and tissue donation is anonymous. The surviving relatives of the donor do not know who received the organs and tissues. Nor does the recipient know from whom their new organ came. The data we publish is never very specific and is always aggregated into categories or larger numbers.

Questions

If you have a question about the processing of personal data or wish to report a data breach, you can contact our Data Protection Officer via privacy@transplantatiestichting.nl.