Your data, your control
1. Who are we (data controller)?
Healthcard24.com is responsible for processing your personal data. We are based at Kerklaan 48, 2451 CG Leimuiden (Netherlands), reachable at info@healthcard24.com and +31 6 33 04 02 13.
2. What data do we process?
- Account and contact data: name, email address, phone number.
- Order and delivery data: address, order history and payment status. Your payment details themselves are processed by our payment provider and not stored by us.
- Medical emergency data (special category data): the details you enter yourself in your medical profile, such as conditions, allergies, medication, blood type, implants, GP/insurer and emergency contacts. You decide per item what you enter and what is publicly visible.
3. On what legal basis and why?
- Performance of the contract (Art. 6(1)(b) GDPR): making, delivering and managing your card and profile, and payment handling.
- Explicit consent (Art. 9(2)(a) GDPR): processing your medical emergency data. You give this consent by entering the data yourself and can withdraw it at any time (see section 7).
- Legal obligation (Art. 6(1)(c) GDPR): including retaining invoices for the statutory tax period.
- Legitimate interest (Art. 6(1)(f) GDPR): protection against abuse and limited customer support.
4. Who do we share your data with (processors)?
Only with parties needed for our service, under data processing agreements and solely for the purposes above: Mollie (payment handling), PostNL (delivery), Vercel (hosting) and Neon (database, stored within the EU), and SendLayer (transactional emails). Our AI chat assistant only processes what you type into the chat yourself; no medical profile data is sent to the AI; if you are logged in, the assistant only knows your first name so it can address you. We keep the text of chat conversations for at most 90 days (with e-mail addresses, postal addresses and numbers automatically masked) for quality review; a contact address for follow-up for at most 14 days; after that only anonymised statistics, for at most 12 months. We use Google to display reviews, without sharing customer data. We never sell your data to third parties and do not use it for automated decision-making or profiling.
5. How do we protect your data?
Secure, encrypted connections, storage on servers within the EU and access limited to authorised staff. Your medical emergency data is additionally stored encrypted. Your medical emergency profile is not indexed by search engines and, for an NFC card, only opens by holding the physical card against a phone; a shared or saved link does not work.
6. How long do we keep your data?
No longer than needed: order and account data for the duration of the customer relationship, invoices for as long as the statutory tax retention period requires, and your medical profile data until you have the profile or account deleted. After that we delete it securely.
7. Your rights
You have the right to access, rectification, erasure, restriction, objection, data portability and to withdraw your consent. You can update and disable your medical profile online yourself. For access, a copy/export or permanent deletion of your data, send a request to info@healthcard24.com; we handle it within the statutory period (no later than one month). You can also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
8. Cookies and statistics
We only use functional cookies needed to run the site, such as your login session and cart. For visit statistics we use a cookieless, privacy-friendly method without tracking or profiling.
9. Contact
Questions about your privacy or want to submit a request? - Healthcard24.com - Kerklaan 48, 2451 CG Leimuiden - info@healthcard24.com - +31 6 33 04 02 13