Date: August 19, 2019
This Privacy Statement summarizes when and how your personal data is being collected, used, protected and disclosed in connection with your access to and use of our applications, websites and all functions, software and services offered through the applications and website, to be called “the Service”.
Chipmunk Healthcare Solutions B.V., trading under the name Chipmunk Health, is a Dutch company. Our business activities take place in the European Economic Area (EEA) and unless otherwise stated we store our data and that of our users on servers in EEA.
Chipmunk Health reserves the right to change the provisions of this privacy statement. If we make changes to the privacy statement, we will inform you accordingly. Most recent change stems from August 19, 2019.
The Service: a care platform consisting of individual measuring devices (as specified in the Chipmunk Health Loan Agreement), a communication hub and a web portal for the user, to which this Privacy Statement applies (the Chipmunk Platform).
User: Patient or healthcare provider who uses the Service.
Third parties: means any natural or legal person other than Chipmunk Health, the patient or healthcare provider.
(User) account: the right of access to a user interface, with which the user can manage certain aspects of the Service.
User agreement: The agreement concluded between User and Chipmunk Health, whereby User gains access to the Chipmunk Platform, to which this Privacy Statement applies.
Loan agreement: An agreement between User and Chipmunk Health, in which User is given permission to use the items as described in the Agreement, to which this Privacy Statement applies. Care provider: the party with whom User enters into a Treatment Agreement with regard to the provision of certain care for which the Service is used as means of communication. Personal information: all information about an identified or identifiable person.
Personal data can be collected in a number of ways when you use the Service. The appendix contains an overview of the information that Chipmunk Health can collect. It is thereby indicated what personal information is or can be processed. A distinction is also made between the data that we process from users and data from care providers who use the Service. The overview shows which personal data are processed, for what purpose, on which legal basis the processing is based and how long the personal data is stored.
If you do not provide your personal details to Chipmunk Health or if you object in any other way to the use of your personal details by Chipmunk Health, this may cause you to be prevented from using the Service. Below is indicated per processing basis what the consequences are of not providing or objecting to the processing of personal data. You can find which personal data fall under which processing basis in the annex per service.
Processing based on a legal obligation of Chipmunk Health:
The personal information provided in this section is required to meet our legal obligations. Your access to the Service may be blocked or restricted and we may even terminate the agreement in accordance with our general (user) conditions.
Processing necessary for the execution of the agreement:
The personal information specified in this section is required for the Service to function properly or to be able to perform. You may be prevented from using the Service and the Service may not function properly. Your access to the Service may be blocked or restricted and we may even terminate the agreement in accordance with our general (user) conditions.
Processing necessary for the legitimate interests of Chipmunk Health:
The personal information provided in this section is required to meet the legitimate interests of Chipmunk Health and to prevent abuse of the Service and security incidents.
Your access to the Service may be blocked or restricted and we may even terminate the agreement in accordance with our general (user) conditions.
Processing that requires your explicit consent:
The personal information specified in this section is required for the Service to function properly or to be able to perform. However, since it concerns sensitive personal data, your explicit consent is required for the processing of this personal data. For that reason you have signed the form “Permission to Chipmunk Health to share / and use my medical data with third parties”. You may be prevented from using the Service, the Service may not function properly.
Unless stated otherwise in this privacy statement, we do not describe, sell or trade personal information about and from our visitors and users to third parties.
Chipmunk Health may engage third parties, such as hosting providers, to assist us in providing the Service. Those third parties may, in the context of their role in providing the Service, process your personal data. In this regard, such a third party is hereinafter referred to as “Processor.” We conclude processing agreements with these Processors.
Chipmunk Health uses the following types of Processors:
In some cases, the Processor may collect your personal information on our behalf. We inform
Processors that they are not allowed to use personal data they receive from us, except for the purpose of providing the Service. We are of course not responsible for any additional information that you provide directly to Processors. In such cases, you must inform yourself about the Processor and its organization before disclosing personal data to such Processors.
Chipmunk Health may share personal information with third parties if you give us explicit permission to do so. For example, we can work with other parties to offer specific services directly to you. If you register for these third-party services, we may share the personal information you provide for it, such as name or other contact information that we reasonably consider necessary, with these third parties so that our partner can provide the services or contact you.
We are allowed share personal information if we can trust that this is legally permitted or if we are legally required to do so. We are also allowed to share personal information with third parties if this is reasonably necessary or appropriate in complying with the law, if this is necessary to comply with legal requests from authorities, to respond to any claims or to the rights, property or security to protect us, our users, our employees or the public and to, without limitation, protect ourselves or our users against fraudulent, abusive, inappropriate or illegal use of the Service. We will immediately notify you of requests from an executive, administrative or other government agency that we receive that are related to your personal information, unless prohibited by applicable law.
Please note that nothing in this article limits the sharing of anonymized data. It may also be shared with third parties without your permission.
Chipmunk Health provides appropriate technical and organizational security measures for the processing of personal data. We follow generally accepted standards for the protection of personal data (ISO 27001 and 27002, NEN 7510), both during the transfer thereof and as soon as we have received the personal data.
At a minimum, we have taken the following measures:
You must bear in mind that our Processors are responsible for processing, managing or storing (part of) the personal data that we receive. Processors are not authorized to use this data for a purpose other than contributing to the Service. These Processors are contractually obliged, through a processing agreement that they have with us, to secure the personal data they receive from us. Despite all the measures, there is no way of transferring over the internet or an electronic storage method that is always 100% secure. 100% Safety can therefore never be guaranteed.
Links from our website to third parties or to other sites are only made available to you. We encourage you to study their privacy and security practices and policies before you provide personal information to them.
Before we share your personal data with third parties in ways not covered by this privacy statement, including use for direct marketing purposes, you will be notified and asked to give consent when such information is collected.
Chipmunk Health can send you marketing and promotional material about our products and services. If you no longer wish for your information to be used for direct marketing, you can contact us at the email address as listed under ‘Contact’.
You can also unsubscribe by following the unsubscribe instructions included with each promotional email. This does not affect our right and our ability to send you Services account related emails or use personal information as described in this privacy statement.
We will respond to your requests as soon as possible after receiving the request.
Should you have questions, problems or comments about this privacy statement, you can contact us per email at email@example.com.