Privacy statement

Although the following is obvious to us and is already clearly stated in our Code of Ethics, the law requires us to describe how we handle your personal data. That is why it is described in detail below.

Overview

Privacy and the law in general
Processing of personal data:
….- from customers or suppliers
….- of students and clients
….- of newsletter and/or announcements subscribers
We do not collect information about
DPIA (Data protection impact assessment)
Provision to third parties
Cookies and visit data from our website
Within the EU
Minors
Retention period
Security
Rights regarding your data
Link to our Privacy Statement
Complaints
Questions

Privacy and the law in general

Reikicentrum & spirituele winkel de Oorsprong v.o.f. (hereinafter abbreviated as ‘de Oorsprong’) has been treating personal data with respect for many years and will certainly continue to do so. In this privacy statement we want to provide clear and transparent information about how we handle personal data.

We do everything we can to guarantee your privacy and therefore handle personal data with care. De Oorsprong complies in all cases with applicable laws and regulations, including the General Data Protection Regulation. This means that we at least:

• Process your personal data in accordance with the purpose for which it was provided, these goals and type of personal data are described in this privacy statement.
• Processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed.
• Ask for your explicit consent if we need it for the processing of your personal data.
• Have taken appropriate technical and organizational measures to ensure the security of your personal data.
• Do not pass on personal data to other parties, unless this is necessary for the purposes for which they were provided.
• To be aware of your rights regarding your personal data, to point this out to you and to respect them.

As de Oorsprong, we are responsible for the processing of your personal data. If, after reading our Privacy Statement, or in a more general sense, you have questions about this or wish to contact us, you can do so via the contact details.

Processing of personal data of customers or suppliers
Personal data of customers or suppliers are processed by De Oorsprong for the following purpose(s):

• Administrative purpose.
• Communication about the assignment and/or invitations.
• Executing or issuing an order.

The basis for this personal data is:

• The agreed assignment.

For the above objective(s), de Oorsprong may request the following personal data from you:

• First name
• Infix
• Last name
• Address
• (Business) Phone number
• (Business) email address

Your personal data will be stored by De Oorsprong for the above-mentioned processing(s) for the period:

• During the term of the agreement and thereafter only in the financial administration for a minimum of 7 years.

Processing of personal data of students and clients

Personal data of students and clients are processed by De Oorsprong for the following purpose(s):

• Administrative purpose
• Communication/post about the course/training and/or practice appointments and/or invitations/confirmations
• Creating a certificate
• Care and avoidance of health risks
• Administration with regard to follow-up course/training
• For long-term courses where, for example, practice teams must be formed, a simplified list (name, telephone number and e-mail address) is provided to each participant of the course at the start of the course. We ask for your permission in advance.
• When you register for a course/training, we also put you on the list for our newsletter and announcements. We will also inform you of this and you can unsubscribe at any time.

The basis for this personal data is:

• The agreed assignment.

For the above objective(s), de Oorsprong may request the following personal data from you:

• First name
• Infix
• Last name
• Address
• (Business) Phone number
• (Business) email address
• Date of birth
• Information about your health (mental and physical) and medication use (only in case of practice appointments or long-term courses)

Your personal data will be stored by De Oorsprong for the above-mentioned processing(s) for the period:

• In the case of practice agreements during the term of the agreement and afterwards – with the exception of information about your health – only in the financial administration for a minimum of 7 years.
• In the case of courses and training, at least during the duration of the activity. We then save your data to be able to see when you did which course. There is no maximum retention period. A minimum retention period of 7 years applies to the financial administration.

If a student requests information about a fellow student, this will only be provided after the explicit permission of that fellow student.

Processing of personal data of newsletter and/or announcements subscribers

Personal data of newsletter subscribers are processed by De Oorsprong for the following purpose(s):

• Informing the person by means of news releases.

The basis for this personal data is:

• The registration form Newsletter and/or Announcements DVD evenings.

For the above objective(s), de Oorsprong may request the following personal data from you:

• First name
• Infix
• Last name
• email address

Your personal data will be stored by De Oorsprong for the above-mentioned processing(s) for the period:

• until you indicate by email that you wish to be removed from the mailing list. We always point out this option at the bottom of all emails.

Our newsletters are not tailored to personal data provided to us and are the same for every reader.

We do not collect information about:

• Political preference
• Sexual preference
• Gender
• Financial situation / salary etc. unless this would be relevant for a financial arrangement, repayment and the like
• Form of cohabitation
• Assets
• Criminal record
• Social media
• Bank details (unless required for a refund or payment tracking)

DPIA (Data protection impact assessment)

A DPIA is only mandatory when data processing is likely to pose a high privacy risk, such as large-scale processing of special personal data or the processing of sensitive data. The privacy regulators indicate that individual doctors do not have to perform a DPIA. It goes without saying that this is also not necessary for the data processing by the individual Reiki Practitioner/Reiki Master. De Oorsprong will therefore not perform a DPIA. However, the associates within De Oorsprong are aware that there may be special personal data. The content of an intake form for Reiki treatments is sensitive to the client and requires a high degree of confidentiality. De Oorsprong will therefore make every effort to ensure that this information remains confidential. The data as De Oorsprong registers it is intended for internal use only. The personal data is used to ensure that the practitioner can provide the client with the best possible service in healing the complaints and, where necessary, to provide advice or a referral.

Provision to third parties
We never give (or sell) data to third parties in any way whatsoever, unless this is necessary for the purposes described above.

For example, we use a third party for:

• Taking care of the (financial) administration.
• Sending parcels (for example post.nl).
• a collection agency if this is necessary in the event of non-payment.

Furthermore, we will not provide the data that you (have) provided to us to other parties, unless this is legally required and permitted. An example of this is that a government agency requests (personal) data from us in the context of an investigation. In such a case, we must cooperate and are therefore obliged to provide this information. We can also share personal data with third parties if you give us written permission to do so.

Information about cookies and visit data from our website

De Oorsprong does not use cookies on its website.
Also, no visitor data is kept.

Within the EU

We do not provide personal data to parties located outside the EU.

Minors
We only process personal data of minors (persons under the age of 16) if written permission has been given by the parent, caregiver or legal representative.

retention period
De Oorsprong does not store personal data longer than necessary for the purpose for which it was provided or as required by law.
Correspondence with students or clients is kept until there is no longer any reason to keep it.

Security
We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing, for example we have taken the following measures;

• All persons who can take cognizance of your data on behalf of De Oorsprong are bound to maintain their confidentiality.
• All employees within De Oorsprong only have access to that part of the data that he or she needs.
• We only store your data offline. Your data is not stored on our website or anywhere else on the internet. We do not use an online program (such as facebook or gmail) to send e-mail, where your data will be stored and used by this company.
• We have a password policy on all our systems.
• We make offline backups of the personal data in order to restore it in the event of physical or technical incidents.
• The people we work with within De Oorsprong have been informed about the importance of protecting personal data.
• Your data is only temporarily stored on paper: – an intake form for the practice, for as long as you come to us for treatments. – a registration form for a course or training, until after completion and payment of the course or training.

Rights regarding your data

You have the right to inspect, modify or delete the personal data that we have received from you. You can also object to the processing of your personal data (or part of it) by us or by one of our processors. You also have the right to have the data provided by you transferred by us to yourself or, on your behalf, directly to another party. We may ask you to identify yourself before we can comply with the aforementioned requests.

The condition for adjusting or deleting your data is that the data you have adjusted is not necessary for us in connection with a course/training you are following or registered for with us and is not necessary in connection with any financial obligations. You may first have to fulfill current obligations before the data can be adjusted, because otherwise we no longer know how and what.

If we are allowed to process your personal data on the basis of a permission given by you, you always have the right to withdraw this permission.

Link to our Privacy Statement
The confirmation (email) you receive after an information request or registration always contains a link at the bottom of this page about our privacy statement. We can always send this link on request.

Complaints
If you have a complaint about the processing of your personal data, we ask you to contact us directly. If we cannot find a solution together with you, we will of course find this very unfortunate. You always have the right to submit a complaint to the Dutch Data Protection Authority, which is the supervisory authority in the field of privacy protection.

Questions
If you have any questions or comments regarding our Privacy Statement, please contact us.

We also work together with Reiki Works