This is the privacy statement of the Urimon study. The Urimon study is conducted by You2yourself BV (Y2Y) located at Colosseum 65, 7521 PP in Enschede. Chamber of Commerce registration number: 71501975 with VAT number 858739781B01. Protecting the privacy of participants and healthcare professionals has high priority for Urimon. Personal data is therefore handled and secured with the highest possible care.
In all cases, Urimon observes the requirements of the Personal Data Protection Act. The treating physician and Urimon are responsible for data processing. For questions or contact, please mail email@example.com. Where we refer to ‘personal data’ in this privacy statement, we mean the information you provide to us about yourself. For example, your name, mail address and phone number. You do this entirely voluntarily. Where in this privacy statement we refer to ‘health data’, we mean the information you provide to us about yourself. For example, your medication use or any hereditary conditions. You do this entirely voluntarily.
Purpose of data processing and storage
Your personal data are used solely to inform and contact you for the purpose for which you filled in the relevant contact form. The content of the requested data is adapted for each form so that we do not ask you for and/or store any information that is not relevant to the purpose for which you share your data. By definition, sharing your data is completely voluntary. We distinguish 4 types of personal data that we process on this website:
- Information request: one of the forms on the website aims to inform you about our study or a specific question you have asked yourself. The data requested is limited to name, mail address and phone number in order to reach you for the requested information.
- Registration form: In the registration form, we ask for more personal data than name, mail address and phone number. The registration form serves to give you the opportunity to participate in the Urimon study and complies with all relevant legislation. You always have the right to cancel your registration within the legally defined period of consideration. After receiving your data, we will then contact you by email, SMS and/or phone to provide you with the requested information.
- Study participation: if you participate in the study, we need more information than is provided in the registration form. In addition to a urine and possibly blood sample that you hand in at the blood collection centre, we ask you to voluntarily answer a number of questions about your health once every three months. Your (contact) data in combination with these answers and the data after analysis of your urine/blood samples will only be used for what you have consented to in the consent form.
- Newsletter: you may sign up for the newsletter. After signing up, you will periodically receive the newsletter by mail to provide you with services and general information around the Urimon study.
Duration of storage of personal data
Personal data is stored no longer than absolutely necessary. For contact form 1, data will be deleted 12 months after being provided. After this time we are sure that there has been sufficient opportunity to inform you about what you left your personal data for. For newsletter subscriptions, we keep your data for as long as you are subscribed. You can actively unsubscribe at any time via a link in the newsletter. When registering to participate in our study, we save your personal data during participation in order to be able to perform the agreement. Even if your data is removed from the information and/or newsletter database.
Your personal data are stored securely. The data entrusted to us is protected by technical and administrative security measures to minimise the risk of loss, misuse, unauthorised access, disclosure and modification. These security measures include firewalls, data encryption, secure connections and physical and administrative access controls to the data and servers.
Provision of personal data to third parties
To make the information you request accessible, Urimon works together with third parties. These include a mail/parcel processor, a website administrator, a party managing the cloud server (hosting), automatic telephone connection, newsletter system and administration software. A key partner is Amazon’s AVG-compliant cloud environment (AWS) www.aws.amazon.com. This cloud infrastructure is certified to ISO 27001 for technical measures, ISO 27017 for cloud security, and ISO 27018 for cloud privacy. This ensures that Urimon can connect with you as a participant. Within this cloud infrastructure, Urimon has taken all possible measures to ensure that your data is sent, processed and stored securely (encrypted). STIBION (Stichting Biobank Oost Nederland) has the only access to these servers and the data stored on them. Physically, all data is processed and stored on servers located within the EU in Ireland. Another important partner is Daklapack/How Are You Diagnostics BV. They are responsible for sending the urine kits and use your address data for this purpose. Your e-mail address is used to inform you about the shipping status of your package.
A so-called Processor Agreement has been reached with all parties involved. Through this agreement, among other things, the security and timely deletion of your personal data is guaranteed.
Right to inspection, rectification, withdrawal or deletion of personal data
We would like to draw your attention to the possibility of inspecting, rectifying, withdrawing and/or deleting personal data stored by us from our database upon request. To do so, please send an email to firstname.lastname@example.org.
The right to file a complaint with the Personal Data Authority
Do you disagree with the privacy statement described above or the way we handle your data? If so, you have the right to file a complaint with the Personal Data Authority. You can do so at https://autoriteitpersoonsgegevens.nl/en.
This privacy statement may be adjusted at any time. We advise you to consult the privacy statement regularly.