Privacy statement
Draft text – to be reviewed before the website goes live.
Who we are
PraktijkWerkt is a service of Van der Wegen Beheer. We are responsible for the data you give us as a customer (sign-up, invoices).
Which data, and what for
- Name, company name, address, email, phone and KVK (Chamber of Commerce) number: for your subscription, invoices and contact.
- Payment details (via Mollie): for the monthly direct debit.
- Technical data (IP address, login times): for security and to prevent misuse.
Chat on this website
If you use the chat, we store your messages (encrypted) and what you tell us, such as the software you use now and, if you give them, your name and email address: to answer your questions and to follow up on your sign-up or idea. Answers come from a digital assistant (Claude by Anthropic, which processes the messages for us and doesn't use them to train its models); our team reads along and can take over. Please don't share data of your clients in the chat. If you don't become a customer, we delete the conversation at the latest 180 days after the last message. The chat remembers your conversation in your browser (local storage), not with a tracking cookie.
When you open the chat we also record, for our team only (not for the assistant): your IP address and the approximate location and network derived from it (looked up in a database on our own server, not with an outside service), your browser, device and screen size, language and time zone, and a few facts about this visit that the chat button keeps in your browser: the first page you saw, the website or campaign you came from (without search terms), how many pages you viewed and how long you had been on the site, and whether you visited before. We use this to help you better, to understand where our visitors come from and to recognise misuse by bots. Without opening the chat, we do not link these facts to a conversation. They are deleted together with the conversation.
Visitor statistics
This website counts how it is used itself, without Google Analytics or other parties: which pages you view and for how long, which website, search engine or campaign you came from (only the name of the website, no search terms), your country, region and city (derived from your IP address in a database on our own server; we do not store the IP address itself), your type of device, browser, screen size and language, and whether you sign up or use the chat. To tell new and returning visitors apart we place one cookie of our own (pw_v, 13 months) with a random number; we only keep a one-way derivative of it. We use these statistics only to improve our website and service, share them with no one and delete them after 24 months. It is an analytical cookie with little impact on your privacy; no consent is needed for it.
Testing texts
On some pages we test two versions of a text (an A/B test). Which version you see is stored in our own cookie pw_ab (90 days, only a test number and the letter A or B), so that you keep seeing the same version; our statistics count how many visitors of each version sign up. This is also an analytical cookie with little impact on your privacy; no consent is needed for it.
Ad measurement (only with your consent)
If you come to this website through one of our ads on Google, Facebook, Instagram or LinkedIn, we ask whether we may measure which ad brought you here. Only if you click "Yes" do we keep the click code that the ad adds to the web address (for example gclid, fbclid or li_fat_id). When you then sign up, confirm your account or pay your first invoice, our server reports that to the company of that ad, and only to that one: the click code, the time, the value and your email address made unrecognisable with a one-way hash (SHA-256). This lets us see which ads work, so that we spend less on ads that don't. We place no cookies of these companies and load no scripts from them. Google Ireland, Meta Platforms Ireland and LinkedIn Ireland process this data under their own terms for advertisers; they may also process it outside the European Economic Area under the EU-US Data Privacy Framework or standard contractual clauses. We delete the click code after 90 days. Your choice is stored in our own cookie pw_consent (13 months) and recorded with the date, without your name, to show that you gave consent. You can change your choice at any time with "Privacy settings" at the bottom of every page; withdrawing consent does not affect reports sent earlier. If you click "No" or make no choice, nothing is sent and our own statistics only note which campaign you came from.
Introduction call
If you plan an introduction call, we store your name, email address, phone number, business and what you would like to discuss, the moment you chose and which website or campaign you came from. We use this only for the call: a confirmation with a calendar invitation and, if we call you, your phone number. We delete these details 12 months after the call.
How you found us
With your sign-up we store which page you started on, which website or campaign you came from and, if you answer it, the question "How did you find us?". We use this only to see which of our activities bring in customers.
Recommendations
If you sign up through the personal link of a customer who recommended us, we store which customer that was, and we tell you so when you sign up. That customer sees the name of your practice and whether you have become a customer in their customer portal, and gets a discount on their invoice; your practice name is also on that invoice. You get extra free days. As a customer you can find your own link in the customer portal.
Reviews and quotes
About two months after your first paid invoice we may email you once to ask whether you want to write a review on Google, at most once a year and never with a reward in return. Every email has a link to stop these requests. If you also leave a short quote for our website, we only publish it with your permission and with the name you give; you can withdraw it at any time. Reviews you place on Google are subject to Google's privacy policy; we reply to them under our company name.
Data of your clients
The data you record about your clients in your own environment (including health data) belongs to you. We only process it on your instructions, as a processor; for this we enter into a data processing agreement with you. Every practice has its own database; health data is stored encrypted. We don't look at your data, unless you ask us to when something goes wrong. The website of your practice counts its own visitors in the same way as this website; those statistics are in your own environment. We only receive anonymous visit data from it (without the number from the cookie and without IP address, time rounded to the hour) to improve our service, to compare you with similar businesses and to show totals of all businesses together on this website (only with at least five businesses, never a business name).
Retention
We keep invoices and accounting records for 7 years (legal obligation). After you cancel your subscription you can receive an export of your data if you wish; we then delete your environment.
Cookies
This website uses functional cookies (session, security and the language you chose), one analytical cookie of its own for the visitor statistics (pw_v, see above), the cookie pw_ab on pages with a text test (see testing texts) and, if you came through an ad and made a choice, the cookie pw_consent with that choice (see ad measurement). No cookies of advertising companies or other parties.
Your rights
You can view your data, have it corrected or have it deleted.