Choices Support Center Foundation
Privacy Statement Personal Data (Website, App and Service Tent)
This privacy statement ("Privacy Statement") describes how Choices Support Center Foundation ("Choices," "we," "us," "our," "our") processes your personal data that we collect and process through our website www.choicescenter.nl,(the "Website"), or when you fill out our forms and surveys, contact us, use the Choices app (the "App"), register for our support groups, or use our services.
Choices respects your privacy, in particular your rights in relation to the use and processing of your personal data. We believe it is important to be transparent about how we collect and use your personal data. Therefore, we have drafted and implemented this Privacy Statement to provide you with full transparency regarding the processing of your personal data, its purposes and the possibilities for you to exercise your rights in that regard.
Before using our Website, contacting us, filling out our forms or surveys, registering for our support groups, using our App and/or using our services, we ask that you read this Privacy Statement carefully. We will display this Privacy Statement or the link to this Privacy Statement on our Website. If we change this Privacy Statement, we will notify you. We will notify you, for example, by sending you an e-mail (to the extent we have your e-mail address) or by posting a notice on our Website. The most recent version of this Privacy Statement (together with a brief overview of the most important changes from the previous version) will be available on our Website.
If you would like additional information about the protection of your personal data, please contact us. You can find our contact details under "Who is responsible for processing your personal data?".
- What is personal data?
Personal data is any information about an identified or identifiable natural person. This means information that directly relates to a natural person or information that can be traced back to a natural person, for example by combining it with other information. Examples of personal data include your name, e-mail address, phone number, address, IP address, age, gender, sexual orientation and history of drug and alcohol use.
- Who is responsible for processing your personal data?
The party responsible for processing personal data as described in this Privacy Statement is the Choices Support Center Foundation. If you have any questions about this Privacy Statement or how we process your personal data, you can contact us at info@choicescenter.nl or by sending a letter to the address below:
Stichting Choices Support Center
Weesperplein 4b 1018 Amsterdam
- How do we collect your personal data?
Most of the personal data we collect you provide directly to Choices. We collect data and process personal data when you:
- you register online for one of our services, such as when you want to receive our newsletter or when you register to participate in one of our support groups;
- voluntarily complete an intake form (if you wish to participate in one of our support groups or in individual counseling);
- voluntarily completes another form or survey or provides feedback via forms or surveys or emails;
- Contact us (when you have a question or want to make an appointment, for example);
- uses our Website;
- participate in our support group sessions to help you change your drug and alcohol use and help you make the best choices on your path to a healthy lifestyle;
- uses our App.
- What personal data do we collect and process?
See the table below for the personal data we process about you.
| Personal data | Special categories of personal data |
Newsletter subscription | The data you provide to us when you sign up for our newsletter. This includes at least your e-mail address. In addition, we process your IP address as soon as you sign up for our newsletter via the Website. | We do not process special categories of personal data. |
Asking questions through our Website | The data you provide to us when you ask your question . This includes at least your e-mail address. In addition, we process your IP address when you ask your question. | We only process special categories of personal data if you provide them to us as part of your inquiries. |
Signing up for our services (support groups and individual counseling) | The data you provide us when you sign up for our services (support groups and individual assistance (via our Website or by phone). This includes at least your e-mail address, name and telephone number. We also record the date you register and record whether you actually participate in our support groups or whether you indicate that you are no longer interested. In addition, we process your IP address when you submit your application online. | We do not process special categories of personal data as part of your registration.
|
Intake form | The data you provide us when filling out your intake form. This data may include information such as name, gender, email address, address, phone number, date of birth and age, emergency contact person, and for example, your goals and your expectations of your participation. If you complete this form online, we may use third parties, such as Survey Monkey. This third party may also process personal data when processing it, such as your IP address and contact information. | Depending on the information you provide us, we may process special categories of personal data, such as preferred title of address, sexual orientation and history, history and treatment of drug and alcohol use, data related to your mental health, and your goals and expectations of your participation.
|
(Other) forms and survey | The data you provide us when filling out a form or survey at our office or online. This data may include information such as name, gender, email address, address, phone number, date and age of birth, and emergency contact person. Most of our online forms and surveys can be completed anonymously and we do not keep track of them on a personal basis. If you do provide us with your e-mail address for a follow-up survey, for example, the survey will consist of personal data. We may use third parties such as Survey Monkey to process online forms or surveys. Such third party may process personal data when processing them, such as, for example, your IP address and contact information. | If the form is not filled out anonymously and depending on the form and the information you provide to us, we may process special categories of personal data, such as preference designation, sexual orientation and history, drug and alcohol use history and treatment, and data related to your mental health and your goals and expectations of your participation. |
Contact | The information you provide us when you contact us (via email or phone) that allows us to respond to your message or question, keep in touch with you, or notify you about an appointment you have, such as your name, email address and phone number. | We do not process special categories of personal data. |
App | We use GPS information to operate the app. This information is used only for the operation of the app. | We do not process special categories of personal data. |
Financial donations | When you make a donation to us (e.g. via a Tikkie or bank transfer) we process personal data from you such as your name and bank account number. | Not applicable |
Support groups and individual assistance (assistance through our services) | The personal data as provided by you during registration and/or on your intake form, which may include name, contact information and address. The personal data you provide to us during support group sessions and/or individual help sessions. Our staff takes notes during the sessions and creates a personalized care plan to help you change your drug and alcohol use and to help you make the best choices on your way to a healthy lifestyle. | Depending on the information you provide to us, we may process additional special categories of personal data, such as sexual orientation, sexually transmitted diseases and history thereof, drug and alcohol use history and treatment, and data relating to your mental health and your goals and expectations of your participation. |
We also document your attendance at our support groups and when you met with our supervisors. | Not applicable | |
As part of our support, we may ask you to complete forms and surveys, sometimes on a non-anonymous basis. See below under (Other) forms and surveys. | See further under (Other) Forms and Surveys for any forms and surveys completed. | |
Focus group members | Name and phone number of our focus group members. | Not applicable. |
Improving the quality of current and developing future services
| For the improvement of our services, we may send you an e-mail asking you to give us feedback via e-mail or fill out a form or survey. For such forms or surveys see further under (Other) forms and surveys. In the case of feedback by e-mail, the feedback you give us in response to our inquiries. | For such forms and surveys, see further under (Other) Forms and Surveys. Depending on the feedback you give us by e-mail, special categories of personal data may be processed. |
- How do we use your personal data and what is the legal basis for data processing?
We need a purpose for processing personal data. This purpose differs for each processing activity. For example: if you want to receive our newsletter, we need your contact information to send you a copy of our newsletter.
We will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so. Furthermore, we may only process your personal data if we can invoke a legal basis for the data processing. If we cannot invoke such a legal basis, then the data processing is not lawful. Examples of legal bases are:
- you have consented to the processing of your personal data for one or more specific purposes;
- the data processing is necessary for the performance of a contract to which you are a party (or necessary to take steps at your request to enter into a contract with you); or
- the data processing is necessary to comply with a legal obligation incumbent upon us (for example, the obligation to maintain and preserve medical records); and
- data processing is necessary for the protection of our or a third party's legitimate interests, but only if your interests, fundamental rights or freedoms do not outweigh that legitimate interest.
Finally, we are not allowed to process special personal data about you just like that. We may only process such data if we can invoke an exception in the law. See the table below for what purposes we process your personal data, what the legal basis for doing so is, and which legal exception applies to the processing of special personal data.
| Target | Legal Basis | Exception processing special categories |
Newsletter subscription
| Sending our newsletter | Permission | Not applicable |
The IP address is processed for the proper functioning of our Website, troubleshooting and preventing misuse of and/or attacks on our Website. | Justified interest; the maintenance and protection of our Website. | Not applicable | |
Asking questions through our Website
| To answer any questions you may have regarding us or our services. | Justified interest; answering questions. | Permission |
The IP address is processed for the proper functioning of our Website, troubleshooting and preventing misuse of and/or attacks on our Website. | Justified interest; the maintenance and protection of our Website. | Not applicable | |
Signing up for our services (support groups and individual counseling)
| To register that you want to participate in our services (support groups and individual counseling), to maintain contact with you about this and to keep track of the status of your application. In addition, we use the registration data to determine how many people are interested in our support group offerings and individual counseling offerings and actually participate in our support groups or begin individual counseling. | Legitimate interest | Not applicable |
The IP address is processed for the proper functioning of our Website, troubleshooting and preventing misuse of and/or attacks on our Website. | Justified interest; the maintenance and protection of our Website. | Not applicable | |
Intake form
| We want to know who you are and how to contact you if needed. | Justified interest; | Not applicable |
To enable us to provide support, we want to know why you want to participate in our support and what you want to achieve. To help you, we will ask for information about your sexual orientation, history and treatment of sexually transmitted diseases, history and treatment of drug and alcohol use. | Consent.
| Your explicit consent | |
The IP address is processed for the proper functioning of our Website, or those of the third parties we engage for the forms and surveys, to troubleshoot problems, to complete the forms and surveys and, if we wish, to prevent the same survey or questionnaire from being completed twice, and to prevent abuse and/or attacks on our Website and those of the third parties we engage. To the extent that we use third parties to conduct a survey, please also read their privacy statements. | Justifiable interest; the maintenance and protection of our Website and those of the third parties we engage. | Not applicable | |
(Other) forms and surveys | Depends on the form or survey: Collect feedback to improve the quality of our services, provide support to you, and develop future services. | Depends on the form or survey: - Not applicable if no personal data are processed. - Justified interest including the improvement of our services and the development of new services. - Consent. | If applicable, your explicit consent.
|
The IP address is processed for the proper functioning of our Website, or those of the third parties we engage for the forms and surveys, to troubleshoot problems, to complete the forms and surveys and, if we wish, to prevent the same survey or questionnaire from being completed twice, and to prevent abuse and/or attacks on our Website and those of the third parties we engage. To the extent we use third parties to conduct a survey, we also ask that you read their privacy statement. | Legitimate interest; the maintenance and protection of our Website and those of the third parties we employ. | Not applicable | |
Contact | To enable us to respond to your message or question, or to keep in touch with you. | Justified interest, to stay in touch with you | Not applicable |
App | We process GPS data for the proper functioning of our App. | Legitimate interest | Not applicable |
Financial donations
| We can see your personal data only on our bank statements. We further process this data in case you have questions about a donation. | Legitimate interest | Not applicable |
Support groups and individual support (assistance through our services)
| Contact information: to contact you. | Legitimate interest | Not applicable |
Records of attendance at our support groups. | Justified interest, to know who attended a support group session. | Not applicable | |
To help you change your drug and alcohol use and cold help you make the best choices on your way to a healthy lifestyle, our staff takes notes during support group meetings or individual support meetings and creates a personalized care plan for you. | Permission | The processing is based on your explicit consent. | |
To help you, we may ask you to complete forms and surveys, sometimes on a non-anonymous basis. | For non-anonymous forms and surveys: consent. | If applicable, this is based on your express consent. | |
Focus group members
| To keep in touch with our focus group members (and for example to ask for or provide information or to ask to fill out a form or survey). | Legitimate interest | Not applicable |
Improving the quality of current and developing future services
| In order to improve the quality of our services, we may send you an e-mail asking you to give us feedback or fill out a form or survey. For such forms or surveys see further under (Other) forms and surveys. | Legitimate interest | For forms or surveys, see further under (Other) Forms and Surveys. To the extent that your e-mail feedback contains special categories of personal data, we process it on the basis of express consent. |
- How do we store and protect your personal data?
We are committed to the security of your personal data and have implemented administrative, technical, organizational and physical security measures to adequately protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, modification, access, disclosure or use. Specific measures include, but are not limited to, technical measures consistent with industry standards, such as encryption techniques and access control. All personal data is stored in encrypted files and access to our computers is protected by passwords. Access to your personal data is further restricted to only those individuals who need access to your personal data. All personal data is automatically backed up daily, using encryption and storing the backups securely. Access to backups is restricted to a limited number of individuals. We document who has access to personal data (including backups).
We store your personal data on servers located in the European Economic Area (EEA). We do not store or process your personal data outside the European Economic Area (EEA).
- Sharing of personal data
We share your personal data with our external service providers ("processors") who carry out some of the processing of your personal data on our instructions and under our responsibility. We have clear written agreements with all processors about how they process your personal data on our behalf. We monitor compliance with these agreements. Processors may not process your data for their own purposes and must destroy it or return it to us when we request it. We use the following processors.
- Newsletter registration and sending: Mailchimp
- Conducting online surveys and forms: Monkey Survey
- Application maintenance and hosting: Roon Automatisering
- Application backups: Hi-tech Hilversum
- Website Hosting: Yourhosting
- Website Maintenance: Yourhosting.
- How long do we keep your personal data?
We do not keep your personal data longer than is necessary for the purpose for which your personal data is processed. The retention period may vary depending on the purpose.
| Retention period |
Newsletter subscription | If you register for our newsletter, we will keep your personal data until you unsubscribe. |
Asking questions through our Website | We delete your personal data after your question has been answered, no later than one year after the last contact related to your question. |
Registration for our services (support groups and individual support) | One year after the end of your participation in our services (support groups or individual support) or, if you have not participated, at the latest one year after the date of your registration. In general, we delete this type of personal data once a year (after we have fulfilled our information obligation to our donors). |
Intake form | One year after the end of your participation in our services (support groups or individual support services) or, if you have not participated, at the latest one year after the date of your registration. In general, we delete this type of personal data once a year (after we have fulfilled our information obligation to our donors). |
(Other) forms and surveys | Various forms and surveys do not contain personal data. To the extent that forms and surveys do contain personal data, we retain copies of forms and surveys for one year after they are completed. Forms and surveys from participants in our support groups or individual support services may be retained for up to one year after their participation ends. In general, we delete this type of personal data once a year (after we have fulfilled our information obligation to our donors). |
Contact | One year. |
IP addresses | As long as necessary, but no longer than a year. |
App | The information is deleted after closing the App. |
Financial data | We delete this data after 10 years. |
Support groups and individual support (assistance through our services) | One year after the end of your participation in our services. In general, we delete this type of personal data once a year (after we have fulfilled our obligation to inform our donors). |
Focus group members | We keep this data for up to one year after your focus group membership ends. |
Improving the quality of current and developing future services | One year. |
- Newsletter
You can subscribe to our newsletter. If you agree to receive our newsletter, you can always unsubscribe later and you have the right to stop sending our newsletter at any time. If you no longer wish to receive our newsletter, you can click on the unsubscribe link in the relevant email, send an email to info@choicescenter.nl or send a letter to the address under "Who is responsible for processing your personal data?" - Privacy Statements of Other Websites
Our Website does not contain links to other websites, but when you complete our online forms or surveys you may be directed to another party's website. Our Privacy Statement only applies to our Website. Therefore, if you fill out an online form or survey on another website, you should read their Privacy Statement.
- What are your data protection rights?
We want to make sure that you are fully aware of all your data protection rights. You have the right to access the personal data we process about you, the right to have your data rectified or deleted, the right to restrict the processing of your personal data, the right to have your personal data transferred (to a third party) and the right to object to processing. Most of these rights are not absolute and you can only exercise them if you meet the legal requirements.
Below we describe your rights in more detail. You can exercise your rights by sending an e-mail to info@choicescenter.nl. or a letter to the above under "Who is responsible for processing your personal data?" . We will respond within one month of receiving a request from you at the latest, but have the right to extend this deadline by two months (for example, if your request is very complicated). If we extend the response time, we will tell you within one month of your request.
Please note that in order to protect your privacy and maintain security, we may take steps to verify your identity before fulfilling your request.
Right of inspection - You can ask us to confirm whether we are processing your personal data. If this is the case, you can ask us for access to that personal data. In that case, we will provide you with a copy of the personal data we process. Please note that the rights and freedoms of others may prevent us from fulfilling or fully complying with your request. We may ask you to specify to which information or which processing activities the request relates.
Right to rectification - You have the right to ask us to correct your personal data if you believe it is inaccurate or incorrect. You can also ask us to attack personal data that you think is incomplete.
Right to erasure ("right to oblivion") - You have the right to ask us to delete your personal data. This right is not absolute. That is, we are not always obliged to comply with your request. We must delete your personal data if any of the following situations apply:
- your personal data are no longer needed for the purposes for which we collected or processed them;
- you withdraw your consent and there is no other legal basis for further processing the personal data. This only applies if we process your personal data on the basis of consent; for more information, see under "How do we use your personal data and what is the legal basis for processing?"
- You object to the processing and there are no compelling legitimate grounds for the processing that outweigh your interests;
- we have processed your personal data unlawfully; or
- to comply with a legal duty under European Union or Dutch law:
We are not obliged to comply with a deletion request to the extent that the processing of your personal data is necessary for, among other things;
- the exercise of the right to freedom of expression and information;
- the fulfillment of a legal duty laid down in European Union law or Dutch law; or
- establishing, exercising or substantiating a legal claim.
Right to restrict processing - You may request us to restrict our processing of your personal data. If we comply with your request, in addition to storage, we will only process your personal data (i) with your consent; (ii) for the establishment, enforcement or support of legal claims; (iii) to protect the rights of others; or (iv) for important public interest reasons for the European Union or for a Member State of the European Union.
We will restrict processing if:
- you dispute the accuracy of your personal data, and for the period of time that allows us to verify the accuracy of your data;
- our processing of your personal data is unlawful and you oppose the erasure of your personal data, and instead of erasure you ask us to restrict the processing of your personal data;
- we no longer need the personal data, but you need it to establish, exercise or support a legal claim; and
- you object to the processing of your personal data by us, for the period we need to assess whether our legitimate grounds for processing outweigh your interests.
If we have restricted the processing of your personal data, we will inform you before lifting the restriction.
Right to object to processing -- You have the right to object to the processing of your personal data. You have this right only if we process your personal data on the basis that it is necessary for our legitimate purposes (see section "How do we use your personal data and what is the legal basis of data processing?" for more information).
We will comply with your request and stop processing unless we:
- have compelling legitimate grounds to continue processing and these grounds outweigh your interests, rights and freedoms; or
- need the personal data in connection with the institution, exercise or substantiation of a legal claim.
Right to object to direct marketing - If we process your personal data for sending newsletters, you have the right to ask us to stop processing your personal data for this purpose. In that case we will stop processing your personal data for this purpose and you will no longer receive our newsletters.
Right to data transfer - You have a right to obtain a copy of your personal data or to have it transferred to a third party (if this is technically possible). You have this right only if the processing is based on your consent or is necessary for the performance of a contract between you and us, and only insofar as the processing is carried out by automated means. If we comply with your request, we will provide your personal data in a structured, common and machine-readable form. If we believe that complying with your request for data transfer would infringe the rights and freedoms of others, we do not have to comply with your request.
Right to file a complaint with a regulator - We always strive to meet requests and any complaints. In addition, you have the right to turn to the Personal Data Authority with requests and complaints. If you do not live in the Netherlands, you can also contact your local supervisor. In addition, you can contact the supervisor of the Member State in which you work or where the alleged breach of the processing of your personal data took place. The details of the Personal Data Authority are: Authority Persoonsgegevens, Postbus 93374, 2509 AJ DEN HAAG -.
088 - 1805 250 www.autoriteitpersoonsgegevens.nl
Choose a better lifestyle!
Follow Choices
