This is the Privacy Statement of POSAS (“POSAS” or “we”). POSAS is part of the Dutch Burns Foundation (Nederlandse Brandwonden Stichting). This Privacy Statement contains information on the categories of personal data we process and how these personal data are used by us. Please read this Privacy Statement carefully to understand how we will process your personal data.

1. Contact details

POSAS is part of the Dutch Burns Foundation (Nederlandse Brandwonden Stichting). The Dutch Burns Foundation is the data controller with respect to the processing of personal data as described in this Privacy Statement. Our contact details are:

Dutch Burns Foundation (Nederlandse Brandwonden Stichting), Attn. POSAS

Zeestraat 29, 1941 AJ Beverwijk, The Netherlands

If you have any question or remarks on this Privacy Statement, you can contact us by e-mail on info@posas.nl or by regular mail on the postal address stated above.

2. Processing of Personal data

We process your personal data in the ways described below.

2.1. License request and management

In the context of the license request and management process for the use of the POSAS we (may) process the following (personal) data:

• First and last of the contact person.

• Email address of the contact person.

• Phone number of the contact person.

• Name company or hospital.

• Department.

• Postal address.

• VAT number.

• Purpose of the use of the POSAS.

• Objective of the measurement.

• Languages of the POSAS.

We process these (personal) data on the following legal grounds and purposes.

Legal grounds:

• Fulfillment of an agreement

• Legitimate interest

• Fulfilment of an agreement

• Legitimate interest

• Legal obligation

Purposes:

• License management for the use of the POSAS, including any translation activities.

• Communication with data subjects.

• Internal management activities.

• Calculating or recording fees or payments.

• Collecting payments due (including usage of other parties with respect to debt collection).

• Dispute resolution, including conducting legal proceedings.

• Auditing or other types of verification.

• Implementation or application of laws or regulations.

3. Cookies

A cookie is a small text file that is placed on your computer, mobile device or other terminal equipment with which you visit a website. Information on your visit may be stored in such text file. This information can be used by a website during your current or subsequent visit. Our website only uses so-called functional cookies. These are cookies that are necessary for the proper functioning of the website, e.g. to make the website faster or to remember that someone is logged into the website. We also place functional cookies to store information that you enter in the forms on the website in order to ensure that you do not immediately lose such information when you go back and forth in the license request process or leave the process accidentally. Our website does not use analytical or tracking cookies. You may choose to disable the placement of cookies through your browser settings, but this may result that the website will not function properly.

4. Retention and aggregation

We will not retain your personal data any longer than is necessary for the purposes for which the personal data are processed (e.g. for the duration of a study or subscription), without prejudice to any statutory retention periods (e.g. the administrative / fiscal retention periods of seven years). Afterwards we will destroy or aggregate/anonymize your personal data.

Notwithstanding the foregoing, we may use non-identifying and aggregated data in general for statistical and scientific purposes regarding the use of the POSAS (e.g. how many commercial or non-commercial licenses have been granted).

5. Data sharing

We may share your (personal) data with POSAS staff, with third parties that provide certain services to use (e.g. website hosting) or with third parties in order to comply with a legal obligation (e.g. government agencies). We will endeavor to have (contractual) safeguards in place to ensure the protection of your personal data. Your personal data may be transferred to a country outside the European Economic Area (EEA). In the event that your personal data is transferred to a country outside the European Economic Area (EEA), we will endeavor that appropriate safeguards will be applied to ensure that such transfer takes place in accordance with applicable privacy laws.

6. Security measures

We will endeavor to protect your personal data. We apply various administrative, technical and physical security measures to protect your personal data against loss, misuse or unauthorized access, disclosure, alteration or destruction of your personal data.

7. Privacy rights

We are aware that under certain conditions you have various privacy rights with respect to the processing of your personal data:

 the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data;

 the right to object to processing of your personal data in the context of direct marketing or on grounds relating to your particular situation if the processing is based on the performance of a task carried out in the public interest or on our legitimate interest;

 the right to obtain the rectification of inaccurate personal data concerning you;

 the right to obtain the erasure or restriction of personal data concerning you; and/or

 the right to data portability if the processing is carried out by automated means based on your consent or on the performance of a contract.

You can submit a request regarding your personal data by email or regular post via the contact details stated above. We may require additional information from you for identification purposes in order to be able to fulfill your request.

You also have the right to lodge a complaint with a supervisory authority if you are of the opinion that our processing of your personal data infringes applicable privacy laws. The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) is the supervisory authority in the Netherlands. You can find more information on the website http://www.autoriteitpersoonsgegevens.nl. If you reside or work in another country of the EEA, you can lodge a complaint with the supervisory authority in that country.

8. Links to third party websites

The POSAS website may contain links to third party websites. We are not responsible for the content or privacy practices of these websites. This Privacy Statement does not apply to information collected from you by these websites. We encourage you to read the privacy statements of each website that collects information from you.

9. Changes to the Privacy Statement

We reserve the right to change this Privacy Statement from time to time. Where appropriate, we will inform you on such changes directly. We will also post any changes on the POSAS website. We encourage you to regularly check the POSAS website for the most recent version of the Privacy Statement.

Last updated in June 2020.