Privacy statement Corporate Vitality B.V.

Introduction

Corporate Vitality is a company health service and its goal is to keep the employees of its customers healthy and fit. Corporate Vitality uses the online computer program ‘Informens’. Informens is for employers and employees to map out the age, health and fitness, and thus the degree of employability of employees.

For this we request your personal data (including health data) and other personal data. We also use your personal data to give you personal advice. The employer will only receive an anonymous group report. We also use your personal data for benchmarking and scientific research.

Corporate Vitality will process personal data of each person in a secure manner and treat it with the utmost confidentially. Corporate Vitality processes personal data on the basis of the obligations under the applicable legislation and regulations regarding the protection of personal data, including the General Data Protection Regulation (GDPR).

Corporate Vitality has drawn up this privacy statement to inform you about how we process personal data. In this privacy statement we describe which personal data we collect, why we collect this data, how we process this data and where we store this data.

This privacy statement applies to Corporate Vitality's service ‘Informens’. We would like to emphasize that we are not responsible for the privacy policy of other parties.

Informens B.V. is together with Corporate Vitality B.V. joint controller for the personal data processed in Informens. Click here to view the privacy statement of Informens B.V.

Identity

Why do we process your personal data?

• To provide the employee of personal health advice;
• To provide our client with anonymous management statistics;
• For a benchmark;
• For scientific research.

What personal data do we process about you?

Corporate Vitality employs certified health professionals who carry out Preventive Medical Examination (PMO) for our clients (employers). We sometimes receive names, dates of birth, positions and e-mail addresses from our clients. With this e-mail address / data we can make Informens available to you and communicate with you about this. You can then enter your name, gender, data of birth and telephone number in Informens yourself. This data is needed to provide feedback on the results. We also (sometimes) receive information regarding the company name / department or position, which is used to provide anonymous group reports for your employer.

By completing questionnaires you provide us with information regarding your gender, data of birth, education, position and other personal information about your health. This information is necessary for us to be able to advice you on lifestyle, health and work ability.

You will receive individual advice from us based on the data entered. We will prepare an anonymous group report for your employer. We ensure that the information provided in an anonymous group report cannot be traced back to you. For this it is necessary that at least fifteen (15) participants participate at your employer. The group report can never be traced back to you.

Informens also uses your data for statistical purposes. Informens B.V. does this for its own benchmark and / or for scientific research. This processing is completely anonymous. Afterwards, the data can no longer be traced back to a natural person.

On what legal basis do we process your personal data?

• For the performance of a contract with our client.
• Based on your consent.

We will not process your personal data without your consent. Without your permission you cannot use Informens. You can always withdraw your consent.

Participants participate on a voluntary basis and the personal data provided always belongs to the individual. We will not share your personal data with our client or insurer. We will not use your personal data for commercial purposes.

With your explicit consent, we will make your data accessible to our certified health professionals. They can then use your data for personal coaching purposes to support your health and / or employability.

How long do we keep your personal data?

We process your personal data for a predetermined purpose. When a purpose has been achieved, we will delete the data we have collected for that purpose.

We will keep the personal data collected from you for as long as your account is active. To keep your account active, you must log in to Informens at least once every two (2) years. During these two (2) years, we will send you notifications by e-mail, so that you are reminded of the existence of the account. If you do not log in within two (2) years, your account will be automatically deleted. Unless you request us to delete your account, we will keep your account active as you may require further advice on your lifestyle, health and work ability in the future.

With who do we share your personal data?

Corporate Vitality uses the online computer program ‘Informens’ from Informens B.V. The Informens technology was developed by Peercode B.V. She also takes care of the maintenance of Informens. Via Peercode B.V. data storage and management is also regulated. Peercode B.V. uses Cloud VPS for this. These companies do not have access to your data. Both companies are ISO 27001 certified. For more information about these companies, see https://www.peercode.nl/en/welcome/ and https://www.cloudvps.com/.

Processing of the questionnaire results in advices and reports is carried out by Immens Advies VOF. Your data is managed in the database of Informens DATA B.V. These are both affiliates of Informens B.V. Immens VOF can also engage third parties who carry out these processing operations under its supervision and responsibility.

The results of the questionnaire(s) will be used by the certified health professionals of Corporate Vitality. Anonymised data can be used by Informens for scientific research and benchmarks. Informens makes anonymous data available to, among others, the Knowledge Center for Medical Examinations in Labor (KMKA], TNO, Saxion University of Applied Sciences and the University of Groningen. For the sake of clarity: These are no longer your personal data.

The categories of parties are described below from which Corporate Vitality purchases services and / or products. Written agreements have been made with these parties about the processing and protection of personal data in a so-called "processor agreement":

• With a third party who is responsible for delivering the online computer program ‘Informens’;
• With a third party who is responsible for making appointments for the employees.

What rights do you have?

The right to withdraw consent

The processing is based on the legal basis consent. You can withdraw the given consent at any time. Withdrawing your consent will not affect the legality of any previously performed processes which were conducted based on the consent prior to your withdrawal.

Right to request, rectification and erasure

When Corporate Vitality processes your personal data, you have the right to reasonable access.

You can view the personal data registered about you via your account. You can change the personal data you provided yourself at any time. If you wish to view your entire personal data processing and / or want to change or delete data that you cannot adjust yourself, please contact Corporate Vitality. If you do not have an account and would like to view / change your data or have it deleted, please contact Corporate Vitality.

Right to restriction of processing

If you dispute the accuracy of your personal data, you have the right to restrict that processing for a period that Corporate Vitality can verify the accuracy of your personal data. If your personal data is incorrect, Corporate Vitality will correct this as soon as possible.

Notification of your rights

Corporate Vitality will at all times inform you about your request, after your personal data has been corrected, after the deletion of your personal data and when the processing of your personal data is restricted.

Right to data portability

You have the right to receive the personal data that you have provided to Corporate Vitality. Corporate Vitality ensures that you receive your personal data in a structured, commonly used and machine-readable format. You also have the right to send your personal data to a third party without any hindrance from Corporate Vitality.

How do you exercise your rights?

Send an e-mail to fg@corporate-vitality.nl with the request of which right you wish to exercise and which data processing is involved. Make sure to include your personal information so that Corporate Vitality can identify you.

Pay attention! Corporate Vitality applies the following policy: If you do not log in in Informens within two (2) years, your account will be automatically deleted.

After your request to use one or more of your rights, Corporate Vitality will notify you of the request. Corporate Vitality strives to answer and to execute the request within four (4) weeks of receiving the request.

Questions and or complaints?

If you have a question about our privacy policy and / or a complaint, you can contact the Corporate Vitality data protection officer via fg@corporate-vitality.nl or by sending a letter to:

Data protection officer
Corporate Vitality
High Tech Campus 5
First floor
5656 AE Eindhoven

If you are not satisfied with the handling of your complaint, you can submit a complaint to the Dutch Data Protection Authority at any time.

Changing the privacy statement

Corporate Vitality has the right to change the content of this privacy statement at any time. Changes will be published on https://corporate-vitality.informens.nl/en.