OorCare Privacy Policy

OorCare is the data controller for the processing of personal data related to its own care services: the removal of earwax.

OorCare, Hendrik Casimirstraat 151, 3136 BD Vlaardingen. Chamber of Commerce (KvK): 85995932. Email: info@oorcare.nl.

Depending on the situation, the following categories may be processed:

• Regular contact and appointment data: name, email address, telephone number, chosen appointment time and payment details.
• Health data (special categories of personal data): findings from the ear assessment, relevant medical history and the treatment carried out.

These two categories are deliberately kept separate. Health data are not requested via general website or contact channels, but are recorded in the medical record during the appointment.

• Scheduling and managing appointments — necessary for the performance of the contract (Art. 6(1)(b) GDPR).
• Carrying out the treatment and keeping records — necessary for the performance of the contract and to comply with legal obligations under the Dutch Medical Treatment Contracts Act (WGBO) (Art. 6(1)(b) and (c) GDPR). For health data, the exception for processing by a healthcare provider bound by professional secrecy applies (Art. 9(2)(h) GDPR in conjunction with Art. 30 of the Dutch GDPR Implementation Act (UAVG)).
• Invoicing and administration — legal obligation (Art. 6(1)(c) GDPR).
• Answering practical questions — legitimate interest in providing good service or performance of the contract (Art. 6(1)(f) or (b) GDPR respectively).

Consent is not used as a general legal basis for all medical processing; the appropriate legal basis is applied for each purpose.

Appointments are scheduled and managed online via the TidyCal booking system. The data you enter when booking an appointment are processed via TidyCal. Only contact and appointment details are requested. The website contains no medical intake form and no medical data are collected via TidyCal.

Email is used for appointment confirmations and practical correspondence. Please do not send medical information by email; email is not intended for that purpose.

Via WhatsApp Business, you can book, change or cancel an appointment and ask practical questions. Messages are processed in order to handle your request. WhatsApp is not a channel for medical advice and is not intended for acute or urgent complaints; in those cases, please contact your GP or the out-of-hours GP service.

WhatsApp is provided by a third party with its own terms and privacy policy. Please do not share medical information via WhatsApp.

Findings and treatment data are recorded in the electronic health record (EHR) of Earwaxshop, the records provider OorCare works with. Access to the record is limited to the healthcare providers involved and is subject to medical confidentiality.

Payments are processed via a payment service provider. Transaction and invoice data are processed for this purpose. No medical information is included in the payment description other than what is strictly necessary for administration.

Reviews from Google may be displayed on the website. Reviews are posted on Google by patients themselves; OorCare does not ask for medical information in this context and does not post reviews itself. If displaying reviews requires a Google script that places non-essential cookies, it is only loaded after you have given consent.

A professional hosting provider is used for the website and hosting. Data processing agreements are concluded with parties that process personal data on behalf of OorCare, such as the booking, EHR, payment and hosting providers. Data are not sold and are not used for advertising purposes.

OorCare takes appropriate technical and organisational measures to protect personal data, including encrypted connections, need-to-know access and carefully selected suppliers.

Personal data are not kept longer than necessary or than required by law. Medical records are subject to the statutory retention period under the Dutch Medical Treatment Contracts Act (WGBO); financial records are subject to the statutory tax retention obligation. Other correspondence is deleted as soon as it is no longer needed.

• access to the data recorded about you;
• correction or completion of inaccurate or incomplete data;
• erasure of data, insofar as no statutory retention obligation applies;
• restriction of processing and objection, where applicable;
• portability of data you have provided yourself.

You can send a request via the email address or WhatsApp number stated on this website. To prevent data from ending up with the wrong person, you may be asked to verify your identity. You will in principle receive a response within one month.

This website does not use advertising trackers, Meta Pixel or marketing cookies. Only functional and technically necessary storage is used to make the website work. Consent is requested first for non-essential cookies or third-party scripts.

This privacy policy may be amended, for example in the event of changes to services or legislation. The current version is always available on this page.