Privacy Policy

At OakWorks Medical, we highly value the protection of your personal data. This privacy statement explains how we handle your information in compliance with the General Data Protection Regulation (GDPR) and other relevant European legislation.

Who We Are

OakWorks Medical is responsible for processing your personal data as described in this document. For questions, please contact us via our contact pagina.

What Personal Data Do We Process?

Depending on your interaction with our website and services, we may process the following data:

1. Identity Data: name, address, email address, phone number.
2. Payment Data: bank account details, billing information.
3. Technical Data: IP address, browser information, device type.
4. Usage Data: how you use our website and services.

Purposes of Data Processing

We process your data for the following purposes:

1. Delivering products and services.
2. Processing orders and payments.
3. Improving our website and services.
4. Sending newsletters and marketing communications (only with your consent).
5. Complying with legal obligations.

Legal Basis for Processing

1. We only process your personal data when:
2. It is necessary for the performance of a contract.
3. You have given explicit consent.
4. There is a legal obligation.
5. It is in our legitimate interest (e.g., for marketing or website analytics), provided your rights are not violated.

How Long Do We Retain Your Data?

1. We do not retain your data longer than necessary for the purposes for which it was collected. Legal retention periods are always respected.

Sharing Data with Third Parties

We only share your data with third parties when necessary, such as:

1. Suppliers and service providers performing services on our behalf.
2. Payment providers for processing payments.
3. Government agencies, if legally required.
4. We ensure these parties comply with strict confidentiality and security standards.

International Data Transfers

If we need to process your data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as using standard contractual clauses.

Your Rights

Under the GDPR, you have the following rights:

1. Right of Access: Access your personal data.
2. Right to Rectification: Correct inaccurate data.
3. Right to Erasure: Request deletion of your data (under certain conditions).
4. Right to Restriction: Restrict the processing of your data.
5. Right to Data Portability: Receive your data in a machine-readable format.
6. Right to Object: Object to specific processing activities, such as direct marketing.
7. Right to Withdraw Consent: Withdraw your consent when processing is based on it.

To exercise your rights, contact us via the contact pagina. We will respond within one month.

Data Security

We take appropriate technical and organizational measures to protect your data against loss, theft, and unauthorized access. These include encryption, firewalls, and secure servers.

Cookies and Similar Technologies

Our website uses cookies to enhance the user experience. For more information, please refer to our Cookie Policy.

Complaints

If you believe we have not handled your data carefully, you can file a complaint with the national supervisory authority, such as the Dutch Data Protection Authority. You may also contact us first to seek a resolution together.

Changes to This Privacy Policy

We reserve the right to amend this privacy policy. We encourage you to regularly review our website for the latest version.

Last updated: January 20, 2025