Privacy statement

Privacy legislation

We comply with the requirements of privacy legislation. This means, for example, that we:

do not process data for which we have no legal basis
clearly state the purposes for which we process personal data via this privacy statement
limit the collection of personal data to only the personal data necessary for the purposes for which they are processed
do not pass on your data to third parties, unless this is necessary to provide the requested service or when we are legally obliged to do so
when we share your data, make agreements with third parties to ensure, for example, that they are not used for other purposes
take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf
respect your right to offer your personal data for inspection, correction, or deletion upon your request

N.B. This only applies to personal data for which the NTS is the data controller. This means that if another party is the data controller, the NTS is not liable for the processing of your data.

What personal data do we process?

personal data that we process from you when you register for a training
we offer healthcare professionals the opportunity to register for training via the website. For this, we process your name, email address, place of residence, and other information that you provide yourself
personal data that we process from you when you place an order
if you place an order via the website, we register personal data necessary to execute your order, such as: email address, name, delivery address, place of residence, telephone number, and any other information you provide to us in the context of your order.
personal data that we process from you when you request a guest speaker
if you request a guest speaker from us, we register personal data to handle your request, such as: email address, name, telephone number, address of the information meeting, and any other information you provide to us in the context of your request.
personal data that we process from you when you work for us as a volunteer or are in our media file
if you work for us as a volunteer or if you are in our media file to make organ donation a topic of discussion in the press and at meetings, we register your personal data such as name, address, date of birth, email address, telephone number, and a short biography stating, for example, which organ or tissue you received or for which organ you are on the waiting list. For volunteers, we also register bank account number and BSN (citizen service number) so that we can transfer reimbursements.

Personal data after contact with the NTS

If you provide your personal data via telephone or email, we will register it. For example, your name, email address, place of residence, and other information you provide yourself, such as the content of your question, request, or complaint.

Personal data after job application

If you respond to a vacancy or send an unsolicited application, we may process personal data that you provide to us for the application procedure. This may include your name, email address, and information in your CV or cover letter, data regarding your professional or academic background such as references, grade transcripts, and testimonials, and data you provide during the procedure, such as reports of interviews we have with you.

Newsletters, mailings, and websites

When you read our digital newsletters or digital press releases, we can see from your email address whether you open these messages and what you click on.
When you visit our website transplantatiestichting.nl, we do not collect IP addresses and we do not placetracking cookies. We can analyze your online behavior anonymously, but we have made it impossible to trace it back to an IP address on all our analysis platforms.

Personal data as a business relationship

If you are a supplier of ours, we may record your personal data such as first and last name, work and private email address, work and private telephone number, the name of the organization where you work, data about the goods and services supplied, and the processing thereof.

Personal data for member site account

We offer healthcare professionals the opportunity to log in to the NTS member site via the website. Before you can use this, you must create an account. For this, we process your name, initials, job title, and email address. We keep track of when a specific email address is used to log in.

Personal data from public sources

When you contact us or place an order with us, we may process personal data about you that we obtain from (public) sources, for example, business websites such as LinkedIn, the Commercial Register of the Chamber of Commerce, and the Land Registry.

Why is it necessary?

We use your data to:

offer you the possibility to create an account on our website
be able to offer our products and services
keep you informed about our services, to invite you to our events, and to maintain further contact
comply with applicable laws and regulations or to be able to comply with norms and standards from our industry

How long do we store personal data?

We do not store your personal data for longer than is necessary for the purposes for which it is processed. The retention period we apply depends on the purpose for which we process your personal data and whether there are specific legal retention obligations imposed on us.

Rights

You have the right to access, correct, and delete personal data relating to you. You may also object to the use of your personal data or request that this use be restricted. If you have any complaints about how we handle your personal data, please contact us. We are happy to help you find a solution. If that does not work out, you can always turn to the privacy regulator, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We may update this privacy statement from time to time. We recommend that you consult it regularly.

Publishing and sharing data

NTS collects a lot of data. We publish and share this data within legal boundaries and ensure the privacy of both donor and recipient. We take into account:

General Data Protection Regulation (GDPR)
Organ Donation Act (Wod). This states that organ and tissue donation is anonymous. The donor's surviving relatives do not know who received the organs and tissues. The recipient also does not know from whom their new organ originated. Data that we publish is never very specific and is always aggregated into categories or larger numbers.

Questions

If you have a question about the processing of personal data or wish to report a data breach, you can contact our Data Protection Officer via privacy@transplantatiestichting.nl.