Privacy statement ZekerArbo
With this privacy statement, ZekerArbo informs you about the personal data that are processed and how they are protected to the fullest extent possible. This privacy statement describes the processing of personal data of clients, customers (employers), and visitors of ZekerArbo websites.
ZekerArbo 's vision of privacy
As part of Colbe, the work wellbeing network, ZekerArbo offers services to employers and employees, focusing on keeping employees healthy and employable. Protection of your privacy in this process is the basis of the trust relationship that ZekerArbo enters into with you. You can therefore trust the diligence and professionalism of ZekerArbo . To ensure this, ZekerArbo has appointed a Data Protection Officer, who ensures that ZekerArbo acts in accordance with privacy legislation. Below you can read what the principles of ZekerArbo are in the field of privacy protection.
Minimal collection of personal data
ZekerArbo collects only the personal data necessary to best serve you as an applicant, job seeker and website visitor. The collection of these personal data serves the implementation of the job search and application procedure. No data will therefore be collected for other purposes without your consent. ZekerArbo only asks for certain data, such as your citizen service number, when it is really necessary.
Protection of your data
ZekerArbo makes every effort to optimally secure your personal data. To this end, it actively maintains a system of information security measures. ZekerArbo regularly performs risk analyses, works according to information security policies and regularly checks the operation of security measures.
For the storage of personal data, only highly secured data centers within the Netherlands are used.
What is personal data and what is meant by processing?
Personal data
Personal data is data that tells something about you, or that can be associated with you. It is information that says something about you as a person. Examples of personal data are your name, your address and your contact information such as e-mail address and telephone number. Your citizen service number (BSN), date of birth and the IP address of your computer are also personal data. Data that tell something about your personality, such as your interests, are also personal data.
In addition, the law has the category of special personal data. These are data about you that are extra confidential. Examples of special personal data are data about your health, financial position, race, sexual orientation, religious beliefs and political affiliations.
Process
Processing is a term from European privacy legislation (AVG). Processing includes virtually everything that can be done with personal data, from collection to consultation and destruction. The General Data Protection Regulation (AVG), Article 4, describes processing as "collecting, recording, organizing, structuring, storing, updating or modifying, retrieving, consulting, using, transmitting, disseminating or otherwise making available, aligning (bringing together) or combining, blocking, erasing and destroying data."
What does ZekerArbo use personal data for?
Provide professional care to prevent dropout
Working together on your recovery, functioning and reintegration
Supporting the absence management process.
Perform PAGO, PMO, occupational examinations, appointment examinations, Health Checks, rail safety examinations and occupational vaccinations
Telephone and video calling
ZekerArbo , if you have given explicit permission, makes use of telephony or video calling when it is not possible to make a physical appointment due to circumstances. For example, customer appointments, consultation hours or examinations can be taken via video calls. ZekerArbo makes use of carefully selected IT facilities. Contractual arrangements are made with suppliers in the field of privacy protection and information security. Where necessary, extra measures are taken in the field of sending and storing personal data and security. For more information, see the webpage on video calling.
Service evaluation and (financial) management
ZekerArbo generates reports for internal analysis to comply with the legal obligation to evaluate services and for the purpose of the (financial) management of ZekerArbo.
The generation of reports for internal analysis to evaluate our services is performed on the basis of legal obligation. The generation of reports for internal analysis for the (financial) management of ZekerArbo is performed on the basis of the basis of justified interest.
For maintaining customer contacts
Personal data for quality testing & scientific research
For our occupational health and safety services and occupational health care, we constantly strive to improve our services and promote the health and well-being of employees. To achieve these goals, it is necessary to use customer and client data for (internal) quality tests. In addition, we may process personal data to conduct scientific research.
Quality tests
Use of customer and client data for quality reviews includes analyzing the effectiveness and efficiency of our service. This analysis enables us to improve our processes, identify bottlenecks and provide our clients and customers with an even better service. Quality reviews are conducted on the basis of "presumed consent". This means that ZekerArbo performs quality tests because it has a duty of care to clients and customers. Processing or providing health data is permitted if it is necessary for the management of professional practice. 'Management' includes quality control of the care and services provided. You have the opportunity to object to the use of your health data for quality assessment. You can do this by sending an e-mail to zekerarbo
Within ZekerArbo , various quality tests take place to ensure the quality of (reintegration and medical) records and procedures:
- To improve the quality of the work of ZekerArbo to support you, the company doctors regularly share their knowledge and working methods with a fellow company doctor. Incidentally, cases and files are discussed. This is done anonymously.
- With your permission, we may use your file for a file review, intended to ensure the quality of our services. Hereby, another BIG registered colleague doctor evaluates your doctor's advice.
- In addition, there is also review of process documents by non-physician professionals, such as the labor expert. No medical information is viewed in this process. If you object to this, you can indicate this to your company doctor. Your file will then not be used for the review of procedural documents.
- Is a physician-in-training (AIOS) involved in your treatment? The AIOS is supervised by a practice trainer. At ZekerArbo , the practice trainer only has access to your medical file if you, the client, give permission. If you do not give permission, the AIOS can only discuss your case with the practice trainer on an anonymous basis.
Scientific research
We also strive to promote scientific research in the area of occupational health and well-being. When conducting scientific research, personal data may be processed. This may be your data if you participate in a scientific study or fill in your details in a survey for this purpose.
We process your personal data only for the purpose of scientific research. We have requested and received your consent for this purpose. Under conditions, health data may be used for scientific research without asking permission. Conditions include that the research serves the public interest and the research cannot be carried out without this data. You can indicate that you object to this. You can do this by sending an e-mail to ZekerArbo We do not process more personal data than is necessary for the scientific research.
Security and retention period
We take appropriate technical and organizational measures to secure your personal data against loss, theft or unauthorized access.
We will retain your personal data no longer than necessary for the study, or as long as required by law. Upon completion of the study, your personal data will be destroyed, anonymized or archived.
Provision to third parties
We do not provide your personal data to third parties for review and research purposes, unless this is necessary for the research, or if we are required to do so by law. If we share your personal data with other researchers or organizations, for example for collaboration or publication, we will ensure that your personal data cannot be traced back to you, or that appropriate arrangements are made to protect your personal data.
What personal data does ZekerArbo collect?
We have compiled the information by category. For more information, click on the links below.
Basic data
ZekerArbo collects the following basic information from you:
- name;
- residential address;
- phone number;
- email address;
- date of birth;
- sex;
- details of the organization where you are employed:
- employer's name;
- contact person and/or supervisor;
- function;
- number of hours;
- location.
In addition, ZekerArbo creates a unique code for you as a client. Your employer also receives a unique (company) code. In correspondence, these codes are used to prevent mistaken identity and to ensure that the right people receive the right information. Your phone number or email address may be collected separately to identify you. For example, if you want to log in to our customer portal.
Data about your health
When you use the services and servicesoffered by ZekerArbo, ZekerArbo also stores information about your health. This can be about both your physical and mental health. ZekerArbo collects this information to advise you as well as possible, to enable you and your employer to perform the proper reintegration actions and to build a file that meets the requirements of the UWV and the WGBO/Civil Code. Usually this service begins when you receive a call to the company doctor at the Sickness Absence. Your health data may also be processed when you attend (voluntary) preventive consultation or are called for an examination.
ZekerArbo distinguishes between Sickness Absence& reintegration data and medical data. Medical data should never be shared with third parties without your consent. This is done ZekerArbo in accordance with the Inkomensverzekering Privacy Manual.
ZekerArbo has a strict authorization model when it comes to access to reintegration and medical data. This means that this data can only be viewed by employees of ZekerArbo who need this data to perform their task. ZekerArbo also makes a distinction between reintegration and medical data, whereby the latter data can only be viewed by the attending company doctor or medical examiner and the doctor' s direct support staff, such as the company doctor's practice support staff and the medical examiner's assistant. This also includes substitutes and business observers. Since January 1, 2020, ZekerArbo also trains co-assistants. They work under the supervision of the doctor. In addition, the Medical Counter processes medical mail under the supervision of the physician. Finally, certain ICT employees have access to this data to perform their duties. The co-assistants, employees of the Medical Help Desk and the ICT department have signed an additional confidentiality agreement.
Digital preparation after an absenteeism report
What do we do?
ZekerArbo can do a digital preparation after the employer has submitted a notice of absence. We do this from the third day after we have received the absence notification from the employer. The digital preparation consists of 1 question that the employer and employee receive via email. We call this the "online question". Learn more about the online query at zekerarbo We then use science and data science to more accurately determine the best time to schedule an appointment with our professionals. In doing so, we use the combination of the following data: the response to the online query, the number of absenteeism reports and days over the past 12 months, age, gender, whether the employee works in a small or large company and whether there are consecutive absenteeism reports within 28 calendar days. Automated decision-making is never involved.
What is the goal?
It allows us to be more responsive to the needs of the employee and employer. Do they want direct advice and support? If they do not want direct contact, we are better able to engage our professionals at the right time. So that our advice and support can be tailored as much as possible.
What personal data do we process?
We only process the response to the online query. The personal data we have already received in the absence notification from the employer and use in the email to the employer in the online query are: the name, date of birth, our client code and the employer (organization name). This is necessary so that the employer knows who it is about. We have minimized the personal data to the bare minimum. In the e-mail message, we also do not refer to a "Sickness Absence or sickness notification", but rather cite that the employer has given us a "notification".
Your citizen service number
The citizen service number (BSN) is not processed until ZekerArbo creates a medical record. This is usually when you come for your first consultation with a company doctor. To prevent mistaken identity, ZekerArbo is required by law to use the BSN in communication with other healthcare institutions and with government agencies such as the UWV.
Registrations when you visit one of our locations
Using Zorg van de Zaak websites.
When you use ZekerArbo websites, ZekerArbo stores information about you. For example, your IP address, information about your visit to the website and the device used to visit the website. More information can be found in the cookie statement at the bottom of this page.
From whom does ZekerArbo receive personal data?
ZekerArbo receives data mainly from your employer (directly or indirectly), your absence insurer or from yourself. Also, ZekerArbo receives (medical) reports and decisions from the UWV. It is also possible that ZekerArbo with your permission - receives data from other practitioners, such as your GP, an employment expert, a reintegration company or a treating specialist. ZekerArbo does not collect personal data from public sources.
With which parties does ZekerArbo share personal data?
The (hired) handler
Handlers are medically and non-medically trained professionals who work at Zorg van de Zaak Network as part of your treatment. Sometimes Zorg van de Zaak Netwerk deploys an external handler. This practitioner then temporarily works for ZekerArbo. ZekerArbo makes proper arrangements with these practitioners so that they adhere to the professional guidelines and legislation just as well as the professionals employed by ZekerArbo .
Employers
If you are a ZekerArbo client, your employer is in principle the client. Have you attended an absenteeism consultation, for example? Then both you and your employer will receive a report about this at the same time. Of course, the professional from ZekerArbo only mentions the information that is necessary for the Sickness Absence and reintegration process, such as:
- The work you are (no longer) capable of doing;
- The expected duration of the Sickness Absence;
- the degree of disability;
- and advice for the employer on promoting your reintegration.
There is never any medical information in the reports that go to your employer. Of certain activities, your employer will receive an invoice.
As a client, do you use the services preventive consultation, occupational health examination, health check or vaccination service? Then your employer will not be informed about this: the service will be charged to the employer in a way that cannot be traced back to you as a person. If the company doctor or medical examiner wants to provide information to your employer on the basis of such a service, this will only happen if you have given your explicit consent.
Employers and employee representatives can also receive absence summaries or group reports from ZekerArbo . This information is customized so that it is not traceable to you as an individual.
Want to know what your employer does with the personal data it receives from ZekerArbo about you? You can check that with your employer or in your employer's privacy statement.
External parties
The external practitioner
Other companies ZekerArbo works with
Key information security measures within ZekerArbo
ZekerArbo thinks security of your personal data is very important and pays a lot of attention to it. On a regular basis, risk analyses take place and we look at new technological possibilities or threats. We also test the operation of our information security system. We apply the ISO 27001 and NEN 7510 standard and guidelines for information security. The business unit Zorg van de Zaak ICT is also ISO 27001 certified.
An important principle is that ZekerArbo only stores personal data within the European Economic Area (EEA). Should personal data be stored outside the EEA, this will only occur if ZekerArbo has determined that there is a level of protection that is in line with the requirements of the Privacy Legislation.
Does - despite all measures - still a data breach or information security incident occur? Then ZekerArbo immediately comes into action to analyze the cause, limit the damage and where necessary inform the Personal Data Authority and stakeholders.
The retention periods within ZekerArbo
ZekerArbo adheres to the legal retention periods. If there is no legal retention period, ZekerArbo does not retain data longer than necessary for the performance of the task.
- By law, ZekerArbo is required to keep medical records for 20 years.
In special cases, this can be 30 to 40 years* from the day of the last change in the record (or longer if a claim or lawsuit is pending or so much shorter if client requests destruction). - By law, ZekerArbo is required to retain financial data for 7 years from the end of the calendar year.
- Sickness Absence and reintegration records in the context of the Wet verbetering Poortwachter are kept ZekerArbo up to a maximum of 2 years after leaving employment or after the end of the agreement with the client, or so much longer if a claim or lawsuit is pending or so much shorter if the person involved requests to destroy it. Exceptions for longer retention periods also apply if there is a high probability that employee will drop out for the same Sickness Absence or the file contains permanent agreements.
If you as a client are self-insured, a retention period of 5 years after the end of employment applies. For Work resumption partially disabled (WGA) files, a retention period of 10 years after the end date of employment applies. - Emails are retained for up to 1 year after receipt.
- Camera images are kept for a maximum of 4 weeks.
- Standard log data are not kept longer than necessary. Insofar as the Occupational Health Service ZekerArbo qualifies as a healthcare institution under the Wkkgz, the log data of medical records will be kept for at least 5 years from writing relevant log line.
Want to know what the retention periods are for data that ZekerArbo processes through its websites? You can find that under 'Information for website visitors'.
*Preservation of medical records may differ from 20 years if exposure to hazardous substances is involved.
Exercising your rights
Do you want to know what personal data ZekerArbo has on you? Would you like to have certain data corrected or transferred? Or would you like to have parts of your (medical) file destroyed or have your entire file removed from the administration?
If you want to exercise your rights, you can send a request to zekerarbo or submit the request to your handler or contact person within ZekerArbo. ZekerArbo will comply with this request. Only in exceptional cases may ZekerArbo not do so. You will then receive a written explanation. Before ZekerArbo will process your request, it will establish your identity. This can be done by visiting the handler, by us contacting you and establishing that the request comes from you and in exceptional cases with a copy of ID.
Your practitioner can further tell you about the possibilities and consequences that your request may have on the continuation of your treatment or on other activities of ZekerArbo.
If any or all of your personal information is corrected or deleted from the medical record, a note will be made.
Other questions about your privacy
Then get in touch at zekerarbo or with your specific contact within ZekerArbo.
Are you of the opinion that the processing of your personal data is not in accordance with privacy legislation? In addition, if you have a question or complaint regarding the AVG and/or privacy, you can contact the Data Protection Officer, Mr. A.C.M. van de Molen. He can be reached at [email protected]* You can also file a privacy complaint with the Dutch Data Protection Authority. This is only possible after you have submitted your complaint to ZekerArbo .
ZekerArbo is a trade name of Zorg van de Zaak and uses the Data Protection Officer of Zorg van de Zaak.
ZekerArbo as a data controller
The Occupational Health Service ZekerArbo is an independent data controller for all occupational health services. This means that ZekerArbo is processing responsible for, among other things, medical record management, administration, occupational health services, services services, employability coach/case management services, company social work, grievance committee, labor experts et cetera. See also the NVVA manual.
ZekerArbo as a processor
For what purposes are personal data processed on the website?
Newsletter
ZekerArbo sends newsletters to keep you informed about news, updates and special offers in the field of work, health and our network. To this end, we process your personal data in accordance with applicable laws and regulations, including (but not limited to) the General Data Protection Regulation and the Telecommunications Act.
The personal data we process for sending the newsletter are your first name, last name, company name and e-mail address. These are necessary for us to send the newsletter.
We use an external party to send the newsletters. With this party we share the above mentioned data only for sending the newsletter. This party is a processor of ZekerArbo and with this party we have made agreements on the processing of your personal data.
You can always unsubscribe yourself from the newsletter using the unsubscribe link in the newsletter.
To request services
If you contact us via the contact form or request additional information via an information form
If you request information or white papers
If you sign up for activities
If you want to pass on the follow-up step for long-term disability
If you unsubscribe from services
Do you want to cancel your subscription with ZekerArbo ? This can be done through the website. In doing so, the following personal data will be processed:
- Name
- Email address
- Phone number
- Function
- Company name
ZekerArbo needs this information to determine whether your cancellation meets the general conditions. In addition, ZekerArbo uses this contact information to contact you if there are still questions about your cancellation.
Cookie Statement
Please refer to our cookie statement.
Website visitor retention periods
ZekerArbo adheres to the legal retention periods. If there is no legal retention period, ZekerArbo does not retain data longer than necessary for the performance of the task.
- Completed website forms are retained for up to 3 months after receipt.
- When you fill out a form on the website, it is sent to a mailbox. This mailbox is accessible to employees who handle the purposes described earlier in this statement. These emails are kept for a maximum of 3 months after receipt.
About this privacy statement
This privacy statement applies to:
- ZekerArbo, as a trade name under Zorg van de Zaak N.V., and its group companies:
- Arbo-Vitale B.V.
- Zorg van de Zaak ICT B.V.
This version was amended on February 03, 2025. ZekerArbo may modify this privacy statement and the cookie statement. We therefore recommend that you review this privacy statement periodically. Changes will be communicated through the website.