Privacy Statement Pharmacy Website

1. GENERAL

1.1 This privacy statement applies to this Pharmacy website.

1.2 The person responsible for this Website is your Pharmacy, whose details can be found under the heading 'contact' on this Website.

1.3 Your Pharmacy attaches great importance to the protection of privacy and personal data. Your Pharmacy handles the personal data of customers and visitors with the utmost care and in compliance with relevant laws and regulations, including the General Data Protection Regulation (GDPR), the Medical Treatment Agreement Act (WGBO) and other applicable laws and regulations.

1.4 The processor for this Website is NControl B.V. which processes your data exclusively on behalf of and for the benefit of your Pharmacy, to the extent necessary to offer the products and services referred to in Article 2 (hosting, technical support and helpdesk).

1.5 In this privacy statement you can read which personal data your Pharmacy processes, for what purposes and how we protect your data. By using this Website and agreeing to the terms of this privacy statement, you consent to the processing of your personal data as described herein. If you do not (no longer) agree to the processing of your personal data as described in this privacy statement, this automatically means that you can no longer use the products and services on this Website.

2. PROCESSING OF PERSONAL DATA

2.1 If you use the products and services of your Pharmacy via this Website, your personal data will be processed. The following products and services are distinguished:

Online forms:

Registration form for registration at the Pharmacy (or changes thereto) Repeat prescription form for submitting a repeat prescription to the Pharmacy

Online services via the online personal account on this Website: Registration process for the online account

Online Repeat Module

Medicine Safe App

Recommendations based on profile preferences

2.2 Your personal data is available to your Pharmacy and the necessary data is provided by NControl B.V., as processor of your Pharmacy, which provides hosting and technical support for the Website and acts as a helpdesk for the Website. Your personal data will not be provided to other third parties unless you give explicit permission for this.

2.3 In addition, your Pharmacy can use the data to make recommendations for products and services from the Leef.nl B.V. webshop. You can go here to purchase products. Read more about the Leef.nl B.V. webshop. on www.leef.nl and in the Privacy Statement of this webshop (add hyperlink).

2.4 When you choose to use the repeat medication module on the Website or whether or not to receive recommendations from your Pharmacy, the (special) personal data from the

patient file and the data that you provided when registering your online account and later in your online account (including test results) are used to provide this service. Partly for this reason, after registering for your online account, you must have your account verified offline with your Pharmacy before you can use this service so that your Pharmacy can determine that the medication data is linked to the correct person.

2.5 If you have given permission for the processing of your (special) personal data, it is possible to withdraw your permission at any time. You can do this by contacting the information desk of NControl B.V., by sending a letter for the attention of NControl B.V. PO Box 1707, 3800 BS Amersfoort, or by sending an e-mail to info@ncontrol.nl with the request to delete your personal data.

3. WHAT DATA DOES YOUR PHARMACY PROCESS?

3.1 If you want to order medicines via this Website or use the services offered on this Website, your Pharmacy can register various data. We distinguish the following data:

a. Online Forms:

i. Information regarding the 'Registration and change' form:

I. Name, address, zip code, place of residence II. E-mail

III. Telephone, mobile phone number IV. Date of birth, gender

V. Citizen Service Number

VI. Name of general practitioner, name of pharmacy, name of health insurer, policy number, start date of insurance

ii. Data regarding 'Repeat prescription form'

I. Name, address, zip code, place of residence II. E-mail

III. Telephone, mobile phone number IV. Date of birth, gender

V. Name of GP

VI. Medication (drug, prescription number, quantity)

b. Registration Online account on the Pharmacy Website for access to personal account, Online Repeat Module, Medicine Safe App and Recommendations based on. profile preferences

i. Name, address, zip code, place of residence ii. E-mail

iii. Telephone, mobile phone number iv. Date of birth, gender

v. Name of GP

vi. Login details (username and password)

After creating the online personal account, you will be linked to your medication file at the Pharmacy. This concerns the medication data that is known in the Pharmacy System and shown in the online account.

3.2 The registration data referred to in Article 3.1 sub b regarding the online personal account are recorded for the benefit of your Pharmacy. Using the login details at your Pharmacy (username and password of the online personal account), it is also possible to log in to the Leef.nl B.V. webshop. In that case, your name and address details from your online account will be shared with Leef.nl B.V.

3.3 Your special personal data are only available to your Pharmacy and will not be provided to third parties unless you give explicit permission for this. Your (special) personal data are necessarily available to the Pharmacy to whom you submit a request via the Online Repeat Module for a repeat prescription as well as your GP. Your Pharmacy can link and check your special personal data with the available personal data in the patient file at your Pharmacy.

4. WHAT DO WE USE YOUR PERSONAL DATA FOR?

4.1 The registration data and (special) personal data are necessary for the (maintained) provision of the services offered and the administrative handling thereof, such as, but not limited to:

a. Online Forms: accepting, processing and handling the Online Forms sent by you to your Pharmacy with your request for registration or change, or processing and delivering your (repeat) prescriptions.

b. Online Repeat Module the acceptance, processing and delivery of your (repeat) prescriptions via the Online Repeat Module and the exchange of data with and addition to your patient file.

c. Medicine Kluis App: accepting, processing and delivering your (repeat) prescriptions via the Medicine Kluis App and the exchange of data with and addition to your patient file.

d. Patient file: improving and supplementing your Pharmacy's patient file regarding medication based on the data from your online account.

e. Recommendations: making, with your consent, general and personalized recommendations regarding your health and well-being for the purchase of products and services by analyzing the online account registered by you with your Pharmacy, the patient file and the results of tests you perform on the website. Website can do and the other registered data.

f. Important notices: to keep you informed of important notices (changes to terms and conditions, this privacy statement and other policies) and to make announcements regarding our software updates.

g. Control and research (audits): for carrying out (internal or external) privacy/security audits.

h. Legal obligation: the provision of data to third parties on the basis of legal obligations.

4.2 Your personal data may also be used by your own Pharmacy to send newsletters. If you do not wish to receive our recommendations or newsletters, you can indicate via your account settings that you no longer wish to receive them or withdraw your consent in accordance with the provisions of article 2.5 of this privacy statement.

4.3 As the 'Important Notices' service is very important to us for your interaction with us, you cannot opt out of receiving these communications.

5. HOW DO WE DEAL WITH THE SECURITY OF YOUR DATA?

5.1 Your Pharmacy implements appropriate technical and organizational measures to protect your personal data against loss or any form of unlawful processing, taking into account the state of the art and the costs of implementation and privacy risks.

5.2 To ensure safety, we regularly evaluate the measures mentioned in Article 5.1 in compliance with the relevant laws and regulations and keep our software up to date.

6. CHILDREN

Your Pharmacy believes that the privacy of children should be protected online. By 'children' we mean minors under the age of 16. We do not knowingly collect or use personal information from children.

We do allow children to register through a legal representative and to use our online products and services through this representative and have taken measures to reasonably prevent use of our online products and services by children without the intervention of a legal representative.

7. RESELLING

Your Pharmacy will never sell your personal data recorded for Your Pharmacy to third parties. Any third parties engaged by your Pharmacy in accordance with the provisions of Article 2.2 are bound by confidentiality and obliged to respect the confidentiality of your personal data.

8. WHAT ARE YOUR RIGHTS?

8.1 You have the option to request your Pharmacy for access to and rectification or deletion of your personal data or restriction of processing concerning you, as well as the right to object to the processing and the right to data portability. You can contact the information desk of NControl B.V. for this. on telephone number 0800-555 43 21 (free), send a letter to NControl B.V. PO Box 1707, 3800 BS Amersfoort, or send an e-mail to info@ncontrol.nl.

8.2 You also have the right to submit a complaint about the processing of your personal data by your Pharmacy to the Dutch Data Protection Authority.

9. COOKIES

9.1. We use 'cookies' on this Website. A cookie is a very small text file that is automatically placed on your equipment, for example your computer, when you visit the Website. The text file stores information about your use of our Website. By using cookies, the Website can temporarily store information about visits and visitors. Other websites can also recognize your device via the same cookies. Various types of cookies can be used per visit. This allows us to better tailor the offering and navigation of the Website to the preferences and user experience of our Website visitors.

9.2. Your Pharmacy uses various types of cookies:

a. Strictly necessary cookies (functional cookies): cookies that enable users to view and use the Website and access secure areas. The information collected by these cookies will not be used for marketing purposes. If the use of this type of cookie is not permitted, several parts of the Website cannot be used.

b. Performance-enhancing cookies (analytical cookies): cookies with which NControl B.V. can improve the Website. These cookies collect information about the way visitors use the Website, such as information about the most visited pages or the number of error messages displayed. An example of this type is WebAnalytics cookies. The information collected by these cookies will not be used for marketing purposes and will not be passed on in a recognizable form to third parties other than the provider of the relevant software.

9.3 Cookies from the American company Google are placed via the Website as part of the "Google Analytics" service. In connection with the use of Google Analytics, NControl B.V. concluded a processing agreement with Google. The settings "Share data with Google" and "Share data with Google for advertising purposes" are disabled.

NControl B.V. uses Google Analytics for the necessary statistics about the use of the Website. More specifically, this concerns data about:

a. information about the type of browser you use;

b. when and for how long you visit or use the Website;
c. details of the web pages you viewed;

d. your IP address, which is anonymized;

e. the hyperlinks you have clicked; and

f. information about how you arrived at the Website.

The information that Google collects is anonymized as much as possible. The last octet of your IP address is removed with the 'Anonymize IP' functionality. The information obtained is transferred to and stored by Google on servers in the United States. Google may provide this information to third parties if Google is legally obliged to do so, or if third parties process the information on behalf of Google. We have no influence on this. We have not allowed Google to use the obtained analytics information for other Google services.

For more information, we refer to Google's privacy policy and the specific privacy policy of Google Analytics.

10. HOW LONG WILL YOUR DATA BE KEPT?

The collected personal data will not be kept longer than necessary for the purpose of the processing. The personal data collected will be retained for as long as you have registered to use the Website. Thereafter, the data collected may be retained for historical, statistical or scientific purposes, in which case your Pharmacy will endeavor to keep it in a form that no longer allows you to be identified.

11. CHANGES TO THIS PRIVACY STATEMENT

Your Pharmacy reserves the right to make changes to its privacy statement. We advise you to consult this privacy statement regularly so that you are aware of these changes. Naturally, we will also report changes to this privacy statement in our news items on the Website.

12. CONTACT INFORMATION

If you have any questions about this privacy statement or our privacy policy, you can call telephone number 0800-555 43 21 (free) or write a letter to NControl B.V., PO Box 1707, 3800 BS Amersfoort or send an e-mail to nsite@ncontrol.NL .