Privacy policy
Date: August 23rd, 2024
Version: August 2024
I. General data.
This privacy policy outlines the information about the protection of the personal data and privacy of the users of the Online Education Platform Surgquest (afterwards mentioned as “the Platform”).
This privacy policy will inform you of which personal data will be collected and/or stored when using the Platform and any associated applications, the reasons why we do this and which control measurements are available to you.
It is important to 4 Health Belgium bv that the terms that are applied by the legislator are correct and explained in an understandable fashion, therefore the different terms used in this privacy policy are explained more elaborately.
A. THE RESPONSIBLE FOR DATA PROCESSING
a.1. Who is responsible for data processing?
4 Health Belgium bv is responsible for the collection and processing of personal data on the Platform. This includes determining the purposes and methods of data processing, in accordance with the GDPR. We have appointed a Data Protection Officer to oversee compliance and address any privacy concerns.
Please find below our contact details:
$bController of processing | 4 Health Belgium bv | |
$bDepartment | Online Platform | Data Protection Officer |
$bAddress | Proefhoevestraat 12 | Kortrijksesteenweg 546 |
$bCity | 9090 Melle | 9000 Gent |
$bKBO | BE0786.525.389 | BE0544.823.957 |
$bE-mail | inge@surgquest.com | gent@trustadvocaten.be |
$bTelephone | +32 475 40 67 41 | +32 9 277 77 20 |
a.2. Acknowledgement and adjustment
By using the Platform, the associated applications and filling in of the forms you acknowledge to have taken cognizance of the provisions and measures in this privacy policy.
We reserve the right to amend this privacy policy periodically. Any changes will be communicated through the Platform or via email, and will become effective immediately upon their posting.
B. APPLICABLE LAW
The processing of personal data within 4 Health Belgium bv is subject to the European regulation 2016/679 of the European Parliament and the Council of April 27th 2016 concerning the protection of the natural person in relation to the processing of personal data and concerning the free traffic of these data, as well as the law of July 30th, 2018 concerning the protection of the natural person with regard to the processing of personal data.
II. COLLECTION OF PERSONAL DATA.
A. DEFINITION PERSONAL DATA.
By 'personal data', we refer to any data or information (such as name, phone number, email address, date of birth, enterprise number, etc.) that pertains to an individual who is either identified or identifiable.
B. THE USE OF OUR PLATFORM AND APPLICATIONS.
When you use our Platform, various personal data are collected through different methods:
- The personal data that are shared by you.
- The personal data we receive when you make use of our services.
The different ways of collecting the personal data is subject to specific provisions and conditions in the applicable legislation with regard to privacy and data protection.
b.1. The personal data that are shared by you
a. With every login- and authentication procedure, you are asked to provide personal data (i.e. user name and password) in order to gain access to the Platform.
b. In addition, you can be asked to provide your name, surname, an image of yourself, your professional function, employer and qualifications. This is necessary to create your user account on the Platform. The user profile is necessary if you want to make use of our services (i.e. subscription for courses, participation in tests and evaluations, publication of executed operations, etc.).
Dependent on the application, the below mentioned categories of personal data can be requested:
$bType of personal data | $bDescription of personal data |
Security | Password |
Personal identification data | Name, surname, professional e-mail address |
Professional experience | Academic and professional interests, expertise, fellowship |
Media use | LinkedIn profile, Twitter profile, PubMed and ResearchGate |
Publications | Books, articles, reports, audiovisual imagery |
Current position | Employer, place of employment, function, fellowship |
The personal data that are provided by you are considered correct and complete.
When sharing incorrect personal data, we reserved the right to deny you, the access to the Platform and its services.
b.2. Automated collection of personal data
By accessing our Platform, various personal and other data are collected automatically using cookies and tracking technologies:
$bType of personal data | $bDescription of personal data |
Electronical identification data | GA4-User-ID, GA4-unique ID, cookies, time of connection, … |
Electronical localization data | Estimated location, setting, … |
Surfing behavior | What pages are being looked at, how long a page is being looked at, clicks, hits, …. |
Through which channel you are accessing our Platform | Search terms, through which webpages our Platform is being accessed |
Which device is being used | PC, smartphone, tablet, … |
Which system software is being used | Windows, Android, Apple, … |
Which browser is being used | IE, Mozilla, Chrome, … |
With this automated collection your direct identification data are not being registered or kept track of.
We will ask for your explicit consent for the use of cookies and tracking technology, where needed. This is according to our cookie policy as described on our webpage: https://www.surgquest.com/cookie-policy
III. JUSTIFICATIONS AND PURPOSES OF THE PROCESSING
A. DEFINITION OF PROCESSING
The processing of your personal data concerns all possible operations or a whole set of operations, whether or not automated, such as e.g. the collection, the structuring, the saving, the consulting, the archiving, the updating, the use, the combining, the erasing or the destroying of personal data.
4 Health Belgium bv can make use of processors for some of these processes, such as natural or legal persons, government agencies, services or other bodies that process personal data, upon documented instructions of 4 Health Belgium bv.
B. EXECUTION OF THE AGREEMENT
b.1. Education, training and mentoring
Before you can subscribe to our services on the Platform, you have to create a profile (i.e. an account) on the Platform. When creating this profile, various personal data will be requested, as previously mentioned in point II.b.1. These personal data are necessary for the provision of our services, i.e. the organization of trainings, education and mentoring.
b.2. Customer management
During the process of contract negotiation and, further, its execution, as case may be, various personal data can be requested and/or collected that are necessary to conclude an agreement, such as:
- Name
- Surname
- Professional address
- Professional e-mail address
- Professional phone number
- Function
- Employer
Without these personal data, there is no possibility to negotiate and/or execute any agreement, therefore all personal data provided by you are required to be correct and complete.
When sharing incorrect personal data or not correcting incorrect personal data and/or updating this data, when needed), we reserve the right terminate any existing agreement with you. We also make a strict reservation for damages of any kind whatsoever.
b.3. Overview of the processing
The below table demonstrates the type of personal data, its description, the purposes of processing, based on the legal basis of “execution of the agreement” and, in brief, indicate what personal data is being processed of you.
Processing of personal data | Type of personal data | Description of personal data | Purpose of processing |
Customer management (including speakers) | Security | Password | Authentication and identification |
Personal identification data | (Account) Name, e-mail address | Set-up of a profile on the Platform with the aim of participation in trainings, education and mentoring mutual sharing of expertise, etc. | |
Professional experience | Academic and professional interests, disciplines, specialties, fellowship | ||
Media use | LinkedIn profile, Twitter profile, PubMed and ResearchGate | ||
Publications | Books, articles, reports, audiovisual imagery | ||
Current position | Employer, place of employment, function, fellowship | ||
Professional contact details | Name, address, professional e-mail, professional phone number | The administration of the client management and the billing | |
Financial identification data | VAT-number, bank account number | ||
Other | Any other information you decide to share with us |
C. LEGITIMATE INTEREST
c.1. Adjustment and regulation of online training, education and mentoring
As user of the Platform, you have the possibility to fill in the “Participant Profile”, in which you are asked to provide various professional personal data, such as personal data that demonstrate your experience, as case may be. These personal data are processed by 4 Health Belgium bv.
Personal data that is being collected from another participant during a training and/or education program, may only be used by another participant to network, but only during this event. It is strictly prohibited to process these personal data for your own purposes, such as direct marketing.
Based on the collected personal data, 4 Health Belgium bv can develop its courses as well as validate the best trainings, education and mentoring for you, on an individual basis.
c.2. Direct Marketing
To keep you informed, 4 Health Belgium bv will keep you in the loop of new courses, trainings, education, etc. that might interest you.
In case you are no longer interested to be informed by us, you can unsubscribe, at all times.
c.3. Overview of the processes
Processing of personal data | Type of personal data | Description personal data | Purposes of processing |
Development of training, education and mentoring | Personal identification data | Name, e-mail address | Adjustment and regulation of the training, education and mentoring to the profile of the participants |
Professional | Academic and professional interests, disciplines, specialties | ||
Direct marketing |
Personal identification data |
Name, e-mail address | Sending of newsletters, offering of courses |
D. CONSENT
d.1. Third Party Marketing
As a user of the platform, you have the option to consent to the transfer of your personal data, as described below, to third-party companies in the medical tech sector during the registration of your 'Participant Profile' or when signing up for any of the livestreams or courses on the platform. This consent enables you to receive newsletters, course invitations, information about new services, and similar communications from these companies.
Should you no longer wish to receive communications from these third parties, you can withdraw your consent at any time.
d.2. Overview of the processes
Processing of personal data | Type of personal data | Description personal data | Purposes of processing |
Transfer to third party companies | Personal identification data | First name, surname, email address, profession, and institution | Sending of newsletters, offering of courses and new services by relevant medical tech companies. |
Professional | Academic and professional interests, disciplines and specialties |
IV. QUALITY AND BALANCING OF INTERESTS
As a data controller, we supervise the quality and legality of the personal data that is being collected and processed. We take every necessary measure to delete or improve the personal data that is inaccurate or incomplete.
When collecting and processing the available personal data we only collect and process the personal data that is useful for obtaining our processing purposes.
V. RETENTION PERIOD OF PERSONAL DATA
The personal data will be collected for the entire period that is necessary for the accomplishment of our processing purposes. A longer retention period or further processing than necessary for reaching our purposes shall not be implemented.
Below you will find a subdivision of the activities to explain these terms more elaborately.
Processing activity |
Retention period* |
Date of commencement term |
Legal basis |
Platform – Participant administration |
20 years |
From January 1st of the year that follows on the last subscription for a training, education and/or mentoring |
Contractually |
Evaluation and tests |
20 years |
From January 1st of the year that follows on the last subscription for a training, education and/or mentoring |
Contractually |
Trainings, education and mentoring |
20 years |
From January 1st of the year that follows on the last subscription for a training, education and/or mentoring | Contractually |
Customer management | 7 years | From January 1st following the invoice date | Art. 354 WIB92 |
Direct marketing | 20 years | From January 1st of the year following the last subscription for a training, education and/or mentoring | Contractually |
Data transfer for direct marketing by third parties | 5 years | From the date on which your consent was received | Consent |
*the duration of the retention period is equal to the periods in the table below, or as long as legally required.
The personal data are collected according to the term as described above, to be deleted or at least anonymized afterwards, after which identification of the data subject is no longer possible, unless this is necessary for the execution of an ongoing agreement or in the context of a legal obligation, judicial or police investigation.
VI. TRANSMISSION OF PERSONAL DATA
4 Health Belgium bv can forward your personal data to third-party sub-processors. For this, a distinction must be made between processors and other third persons (not processors).
A. THE TRANSMISSION OF YOUR PERSONAL DATA TO (SUB-)PROCESSORS.
The transmission is necessary for the achievement of our purposes, namely for the proper functioning of the Platform.
B. THE TRANSMISSION IS NECESSARY IF THERE IS A LEGAL OBLIGATION TO TRANSMIT YOUR PERSONAL DATA OR ON REQUEST OF JUDICIARY AUTHORITIES OR POLICE FORCES.
C. THE TRANSMISSION OF ANONYMIZED DATA FOR SCIENTIFIC PURPOSES
The results of the tests, participant profile and the follow up questionnaires, which were obtained before and after participating in the courses, might be anonymized and afterwards sent to centers for scientific research with the aim of publications of scientific articles, comparative research, …
D. TRANSMISSION TO THIRD PERSONS
We can only pass on your data to other companies (with their own privacy policies), who determine their own purposes for processing your data, if you have given your consent. Some examples are hotels, taxi companies and medical tech companies.
Some of these companies may be situated outside the European Economic Area, in which case we provide sufficient contractual guarantees so that you data enjoys an appropriate level of protection.
You may at any time request, free of charge, a list of all recipients from 4 Health Belgium bv.
VII. RIGHTS OF THE DATA SUBJECT
A. GENERAL
4 Health Belgium bv is responsible, as a data controller, to inform you with regard to the collection and processing of your personal data. This privacy policy hereby applies as a notification.
Depending on the selected legal basis for the processing, certain rights can be executed. In order to offer a clear overview, a schematic summary of your rights under GDPR has been portrayed in the table below.
Legal basis |
Rights of the data subject |
Necessary for the execution of an agreement |
Right to access |
Right to rectify | |
Right to object |
|
Right to restriction of the processing | |
Right to be forgotten |
|
Right of data portability | |
Right to file a complaint |
|
Legitimate interest |
Right to access |
Right to rectify | |
Right to object |
|
Right to be forgotten |
|
Right to restrict the processing | |
Right to file a complaint |
B. RIGHT TO ACCESS
You have the right to obtain information from 4 Health Belgium bv on whether or not your personal data will be processed. If your personal data is processed you can have access to your data in all our files with additional information about the processing purposes, the categories of personal data, possible receivers of your personal data, the retention period, complaints procedure, …
Furthermore, you can request a copy of your personal data, without additional administrative costs. Mind you, when you request multiple copies 4 Health Belgium bv will charge you a fair compensation. You can consult the procedure to exercise this right under section G.
C. RIGHT TO RECTIFY
As a data subject, you are entitled to correct any incomplete or inaccurate personal data pertaining to you. The term 'rectify' means you have the option to amend or delete erroneous personal data.
Ensuring the accuracy and integrity of your personal data is crucial for fulfilling our objectives. For details on how to exercise this right, please refer to Section G.
D. RIGHT TO OBJECT
You have the right to object the processing of your personal data. The legal provisions provide a generic right to object as well as an objection with regard to direct marketing.
d.1. Generic right to object:
You are entitled to object against the processing of your personal data when these data (i) are incomplete in accordance to the processing purposes or not submitted or (ii) when the data of which the registration, the communication or the storage are forbidden or (iii) when the data are saved longer than the specified storing time.
If your personal data are processed lawfully, you can still object to this processing in accordance with legal provisions of privacy laws, due to significant and justified reasons related to your specific situation.
To prevent further processing, you are required to provide us with reasonable justification for your objection.
d.2. Right to object on the data subject of direct marketing:
You can object against processing of your personal data for direct marketing purposes, free of charge and without any motivation. For details on how to exercise this right, please refer to Section G.
E. RIGHT TO BE FORGOTTEN
Under GDPR, you have the right to request the deletion of your personal data without unreasonable delay in certain circumstances. These conditions include:
- The personal data are no longer necessary for the purposes for which they were collected or processed;
- You withdraw your permission for specific purposes;
- The personal data are unlawfully processed;
- The personal data must be erased to meet a legal obligation.
For information on how to exercise this right, please refer to Section G.
F. RIGHT TO RECEIVE PERSONAL DATA
According to the AVG, you have the right to request a copy of the personal data from you, which is being processed by 4 Health Belgium bv, in a structured, common and machine-readable way.
This can be requested for personal use as well as for transmission to a third party other than 4 Health Belgium bv.
If technically feasible for us, you can request the electronical transmission of your personal data to a third party, after providing us the correct contact details, including the details of the transmission, of the latter party.
For details on how to exercise this right, please refer to Section G.
G. PROCEDURE TO EXERCISE RIGHTS
When you wish to exercise one or more of the above mentioned rights, you are required to send your request, by mail or e-mail to:
4 Health Belgium bv
Proefhoevestraat 12
9090 Melle
Belgium
E: inge@surgquest.com
After receival of your request, we will act without undue delay and in any case within one month.
Depending on the complexity of the request, this term can be extended with two months. You are notified when such an extension takes place.
H. DECLARATION AND COMPETENT AUTHORITY IN CASE OF INFRINGEMENT
When you believe that the before mentioned rights are not being respected by us and you wish to file a complaint, you can turn to the Data Protection Authority:
Data Protection Authority
Drukpersstraat 35,
1000 Brussel
T: +32 (0)2 274 48 00
F: +32 (0)2 274 48 35