Skip to content

Privacy statement ZekerArbo

With this privacy statement, ZekerArbo informs you about the personal data that are processed and how they are protected to the fullest extent possible. This privacy statement describes the processing of personal data of clients, customers (employers), and visitors of ZekerArbo websites.

ZekerArbo 's vision of privacy

As part of Colbe, the work wellbeing network, ZekerArbo offers services to employers and employees, focusing on keeping employees healthy and employable. Protection of your privacy in this process is the basis of the trust relationship that ZekerArbo enters into with you. You can therefore trust the diligence and professionalism of ZekerArbo . To ensure this, ZekerArbo has appointed a Data Protection Officer, who ensures that ZekerArbo acts in accordance with privacy legislation. Below you can read what the principles of ZekerArbo are in the field of privacy protection.

Minimal collection of personal data

ZekerArbo collects only the personal data necessary to best serve you as an applicant, job seeker and website visitor. The collection of these personal data serves the implementation of the job search and application procedure. No data will therefore be collected for other purposes without your consent. ZekerArbo only asks for certain data, such as your citizen service number, when it is really necessary.

Protection of your data

ZekerArbo makes every effort to optimally secure your personal data. To this end, it actively maintains a system of information security measures. ZekerArbo regularly performs risk analyses, works according to information security policies and regularly checks the operation of security measures.
For the storage of personal data, only highly secured data centers within the Netherlands are used.

What is personal data and what is meant by processing?

Personal data

Personal data is data that tells something about you, or that can be associated with you. It is information that says something about you as a person. Examples of personal data are your name, your address and your contact information such as e-mail address and telephone number. Your citizen service number (BSN), date of birth and the IP address of your computer are also personal data. Data that tell something about your personality, such as your interests, are also personal data.

In addition, the law has the category of special personal data. These are data about you that are extra confidential. Examples of special personal data are data about your health, financial position, race, sexual orientation, religious beliefs and political affiliations.

Process

Processing is a term from European privacy legislation (AVG). Processing includes virtually everything that can be done with personal data, from collection to consultation and destruction. The General Data Protection Regulation (AVG), Article 4, describes processing as "collecting, recording, organizing, structuring, storing, updating or modifying, retrieving, consulting, using, transmitting, disseminating or otherwise making available, aligning (bringing together) or combining, blocking, erasing and destroying data."

What does ZekerArbo use personal data for?

ZekerArbo only processes personal data necessary for the performance of its work. Personal data is processed to achieve the following purposes:

Provide professional care to prevent dropout

You can think of:
  • Offering and holding a preventive consultation or consultation with a health expert for questions related to your (mental and physical) health.
  • Workplace visits by the company physician or other occupational health and safety professionals.
  • Conducting a preventive medical examination (PMO) and reporting on it at the individual or company level.
  • Providing occupational vaccinations.
  • Preparing absence overviews and group reports and advising your employer and staff representatives on them, so that an adequate working conditions and sickness absence policy can be implemented. The information in absence overviews and group reports is not traceable to individuals.

Often these are services that are required by law to be offered to you by your employer or are required by law to be performed by ZekerArbo as an Occupational Health Service for your employer. The basis for these activities is, on the one hand, a legal regulation (which determines what information ZekerArbo may and may not share with your employer) and the agreement that ZekerArbo has entered into with your employer (the type of activities that are offered, the sharing of outcomes and the billing).

Permission for examinations, PMOs and vaccinations are arranged through your employer. As an employee, you can use this on a voluntary basis. Vaccinations involve a medical procedure. This is based on a treatment agreement according to the Medical Treatment Agreement Act (WGBO) between you and ZekerArbo.

Working together on your recovery, functioning and reintegration

This involves performing professional Sickness Absence and reintegration counseling:
  • Looking for opportunities to restore the balance between load and your workload, between work and home, and restore your vitality.
  • Assessing the nature and severity of impairments.
  • Researching and formulating the (problem) analysis.
  • Advising your employer on the level of employability and legitimacy of Sickness Absence.
  • Assessing the appropriateness of medical treatment.
  • Suggesting additional treatments and interventions to promote recovery.
  • Aligning the work resumption pathway.
  • Preparing a problem analysis, employability profile and current assessment when you leave sick or when a WIA application is pending.
  • Guarantee that your file meets professional requirements.

These are tasks of the Occupational Health Service that are defined by law. ZekerArbo performs these tasks for the employer with whom you have an employment relationship and who has a (client) agreement with ZekerArbo. In this context, ZekerArbo may process Sickness Absence and Reintegration data based on the implementation of the Wet Verbetering Poortwachter and the WGA. This is done ZekerArbo in accordance with the Inkomensverzekering Privacy Manual.

Supporting the absence management process.

ZekerArbo supports employers in performing various administrative tasks. These tasks include:
  • Perform a WIA application and the administrative process (including doing the 42nd-week notification) at the UWV (Employee Insurance Administration Agency) for the employer.
  • Assisting the employer in claiming Sickness Absence costs from the insurer.
  • Absenteeism guidance within the framework of the Own Risk Carrier Sickness Act and/or WGA.
  • Provide advice regarding the 4-week or 26-week forecast in the context of a dismissal process through the UWV.
  • Conducting examination through the procedure by a Committee of Three Physicians in accordance with the ARAR (applicable to civil servants only).
  • Assisting the employer in claiming the cost of Sickness Absence from the Replacement Fund (applicable to school districts only).

ZekerArbo performs this work on behalf of your employer, with whom you have an employment relationship and with whom ZekerArbo has an agreement

Perform PAGO, PMO, occupational examinations, appointment examinations, Health Checks, rail safety examinations and occupational vaccinations

On behalf of employers, ZekerArbo performs Examinations, PAGOs, PMOs, Health Checks and occupational vaccinations. Hereby you can think of:
  • Conducting an appointment examination. The results of this will only be shared with your (future) employer if you give permission.
  • Conducting rail safety examinations. These are medical examinations tied to particular industries.
  • Performing the Periodic Occupational Health Examination. This is reported on an individual level to company doctor and client. The client receives a final report at the group level, which cannot be traced back to individuals.
  • Performing Periodic Medical Examination (PMO) following a Risk Inventory & Evaluation (RI&E). This is reported on an individual level to the company doctor and the client. The client receives a final report at group level that cannot be traced back to individuals.
  • Performing Health Checks (preventive examination).

These services are performed only on the basis of a specific order from the employer. Some activities have a legal basis.

Telephone and video calling

ZekerArbo , if you have given explicit permission, makes use of telephony or video calling when it is not possible to make a physical appointment due to circumstances. For example, customer appointments, consultation hours or examinations can be taken via video calls. ZekerArbo makes use of carefully selected IT facilities. Contractual arrangements are made with suppliers in the field of privacy protection and information security. Where necessary, extra measures are taken in the field of sending and storing personal data and security. For more information, see the webpage on video calling.

Service evaluation and (financial) management

ZekerArbo generates reports for internal analysis to comply with the legal obligation to evaluate services and for the purpose of the (financial) management of ZekerArbo.

The generation of reports for internal analysis to evaluate our services is performed on the basis of legal obligation. The generation of reports for internal analysis for the (financial) management of ZekerArbo is performed on the basis of the basis of justified interest.

For maintaining customer contacts

Periodically, we ask you whether you are satisfied with ZekerArbo as a client, customer or referrer

ZekerArbo wants to keep developing and improving itself. Therefore, ZekerArbo regularly conducts client and customer satisfaction surveys. Your email address can be used to send you an invitation to complete a satisfaction survey. You are not required to participate in this survey.

Maintain a good relationship with the client

Are you the contact person for the agreement with ZekerArbo on behalf of the employer? In that case, ZekerArbo records your personal data in the customer tracking system. This enables ZekerArbo to maintain a good relationship with you. Here you can think of the following things:

  • Recording contracts, contract reviews, appointments made and dates of follow-up visits.
  • Capturing your organization's wants and needs.
  • Informing about developments in line with your existing services
  • Sending by mail or e-mail targeted offers for additional services to your organization.
Ehandling any complaint

It may happen that you as a customer or client are not satisfied with something that takes place within the activities of ZekerArbo. Then you can file a complaint in accordance with the complaint regulations. When handling your complaint, ZekerArbo will - to the extent necessary - use your personal data to handle this complaint. This also applies if there are suspicions of a data leak in which your personal data may be involved.

Personal data for quality testing & scientific research

For our occupational health and safety services and occupational health care, we constantly strive to improve our services and promote the health and well-being of employees. To achieve these goals, it is necessary to use customer and client data for (internal) quality tests. In addition, we may process personal data to conduct scientific research.

Quality tests

Use of customer and client data for quality reviews includes analyzing the effectiveness and efficiency of our service. This analysis enables us to improve our processes, identify bottlenecks and provide our clients and customers with an even better service. Quality reviews are conducted on the basis of "presumed consent". This means that ZekerArbo performs quality tests because it has a duty of care to clients and customers. Processing or providing health data is permitted if it is necessary for the management of professional practice. 'Management' includes quality control of the care and services provided. You have the opportunity to object to the use of your health data for quality assessment. You can do this by sending an e-mail to zekerarbo

Within ZekerArbo , various quality tests take place to ensure the quality of (reintegration and medical) records and procedures:

  • To improve the quality of the work of ZekerArbo to support you, the company doctors regularly share their knowledge and working methods with a fellow company doctor. Incidentally, cases and files are discussed. This is done anonymously.
  • With your permission, we may use your file for a file review, intended to ensure the quality of our services. Hereby, another BIG registered colleague doctor evaluates your doctor's advice.
  • In addition, there is also review of process documents by non-physician professionals, such as the labor expert. No medical information is viewed in this process. If you object to this, you can indicate this to your company doctor. Your file will then not be used for the review of procedural documents.
  • Is a physician-in-training (AIOS) involved in your treatment? The AIOS is supervised by a practice trainer. At ZekerArbo , the practice trainer only has access to your medical file if you, the client, give permission. If you do not give permission, the AIOS can only discuss your case with the practice trainer on an anonymous basis.

Scientific research

We also strive to promote scientific research in the area of occupational health and well-being. When conducting scientific research, personal data may be processed. This may be your data if you participate in a scientific study or fill in your details in a survey for this purpose.

We process your personal data only for the purpose of scientific research. We have requested and received your consent for this purpose. Under conditions, health data may be used for scientific research without asking permission. Conditions include that the research serves the public interest and the research cannot be carried out without this data. You can indicate that you object to this. You can do this by sending an e-mail to ZekerArbo We do not process more personal data than is necessary for the scientific research.

Security and retention period

We take appropriate technical and organizational measures to secure your personal data against loss, theft or unauthorized access.

We will retain your personal data no longer than necessary for the study, or as long as required by law. Upon completion of the study, your personal data will be destroyed, anonymized or archived.

Provision to third parties

We do not provide your personal data to third parties for review and research purposes, unless this is necessary for the research, or if we are required to do so by law. If we share your personal data with other researchers or organizations, for example for collaboration or publication, we will ensure that your personal data cannot be traced back to you, or that appropriate arrangements are made to protect your personal data.

What personal data does ZekerArbo collect?

We have compiled the information by category. For more information, click on the links below.

Basic data

ZekerArbo collects the following basic information from you:

  • name;
  • residential address;
  • phone number;
  • email address;
  • date of birth;
  • sex;
  • details of the organization where you are employed:
    • employer's name;
    • contact person and/or supervisor;
    • function;
    • number of hours;
    • location.

In addition, ZekerArbo creates a unique code for you as a client. Your employer also receives a unique (company) code. In correspondence, these codes are used to prevent mistaken identity and to ensure that the right people receive the right information. Your phone number or email address may be collected separately to identify you. For example, if you want to log in to our customer portal.

Data about your health

When you use the services and servicesoffered by ZekerArbo, ZekerArbo also stores information about your health. This can be about both your physical and mental health. ZekerArbo collects this information to advise you as well as possible, to enable you and your employer to perform the proper reintegration actions and to build a file that meets the requirements of the UWV and the WGBO/Civil Code. Usually this service begins when you receive a call to the company doctor at the Sickness Absence. Your health data may also be processed when you attend (voluntary) preventive consultation or are called for an examination.

ZekerArbo distinguishes between Sickness Absence& reintegration data and medical data. Medical data should never be shared with third parties without your consent. This is done ZekerArbo in accordance with the Inkomensverzekering Privacy Manual.

ZekerArbo has a strict authorization model when it comes to access to reintegration and medical data. This means that this data can only be viewed by employees of ZekerArbo who need this data to perform their task. ZekerArbo also makes a distinction between reintegration and medical data, whereby the latter data can only be viewed by the attending company doctor or medical examiner and the doctor' s direct support staff, such as the company doctor's practice support staff and the medical examiner's assistant. This also includes substitutes and business observers. Since January 1, 2020, ZekerArbo also trains co-assistants. They work under the supervision of the doctor. In addition, the Medical Counter processes medical mail under the supervision of the physician. Finally, certain ICT employees have access to this data to perform their duties. The co-assistants, employees of the Medical Help Desk and the ICT department have signed an additional confidentiality agreement.

Digital preparation after an absenteeism report

What do we do?
ZekerArbo can do a digital preparation after the employer has submitted a notice of absence. We do this from the third day after we have received the absence notification from the employer. The digital preparation consists of 1 question that the employer and employee receive via email. We call this the "online question". Learn more about the online query at zekerarbo We then use science and data science to more accurately determine the best time to schedule an appointment with our professionals. In doing so, we use the combination of the following data: the response to the online query, the number of absenteeism reports and days over the past 12 months, age, gender, whether the employee works in a small or large company and whether there are consecutive absenteeism reports within 28 calendar days. Automated decision-making is never involved.

What is the goal?
It allows us to be more responsive to the needs of the employee and employer. Do they want direct advice and support? If they do not want direct contact, we are better able to engage our professionals at the right time. So that our advice and support can be tailored as much as possible.

What personal data do we process?
We only process the response to the online query. The personal data we have already received in the absence notification from the employer and use in the email to the employer in the online query are: the name, date of birth, our client code and the employer (organization name). This is necessary so that the employer knows who it is about. We have minimized the personal data to the bare minimum. In the e-mail message, we also do not refer to a "Sickness Absence or sickness notification", but rather cite that the employer has given us a "notification".

Your citizen service number

The citizen service number (BSN) is not processed until ZekerArbo creates a medical record. This is usually when you come for your first consultation with a company doctor. To prevent mistaken identity, ZekerArbo is required by law to use the BSN in communication with other healthcare institutions and with government agencies such as the UWV.

Registrations when you visit one of our locations

If you visit a ZekerArbo, it is possible that your presence will be recorded. There are two ways this happens:
  • Camera images. Only a limited number of people authorized by their position may view these images, and only if there is a concrete reason to do so: for example, because an incident has occurred or to verify the accuracy of a complaint. Camera images can only be viewed at the location where they were recorded, and not outside.
  • Visitor Registration. When you report to the front desk of one of the ZekerArbo, your first and last name and time of the appointment may be recorded at the front desk. This information can be given by yourself or supplied by the person with whom you have an appointment at the location. The purpose of this registration is to ensure the proper conduct of the appointment. Visitor registration is kept up to the end of the working day.

Not every location of ZekerArbo has cameras or visitor registration. When camera footage or visitor registration is used, this will be disclosed to you at the location.

Using Zorg van de Zaak websites.

When you use ZekerArbo websites, ZekerArbo stores information about you. For example, your IP address, information about your visit to the website and the device used to visit the website. More information can be found in the cookie statement at the bottom of this page.

From whom does ZekerArbo receive personal data?

ZekerArbo receives data mainly from your employer (directly or indirectly), your absence insurer or from yourself. Also, ZekerArbo receives (medical) reports and decisions from the UWV. It is also possible that ZekerArbo with your permission - receives data from other practitioners, such as your GP, an employment expert, a reintegration company or a treating specialist. ZekerArbo does not collect personal data from public sources.

With which parties does ZekerArbo share personal data?

Various companies may be involved in the activities of ZekerArbo . These include other processors with whom ZekerArbo cooperates in the provision of services and external parties who need to be informed because of legal obligations. These parties only see your personal data if they need this to perform their task and when this is legally permitted. ZekerArbo never shares medical information with other parties without your permission, unless it is based on a legal obligation or a court order.

The (hired) handler

Handlers are medically and non-medically trained professionals who work at Zorg van de Zaak Network as part of your treatment. Sometimes Zorg van de Zaak Netwerk deploys an external handler. This practitioner then temporarily works for ZekerArbo. ZekerArbo makes proper arrangements with these practitioners so that they adhere to the professional guidelines and legislation just as well as the professionals employed by ZekerArbo .

Employers

If you are a ZekerArbo client, your employer is in principle the client. Have you attended an absenteeism consultation, for example? Then both you and your employer will receive a report about this at the same time. Of course, the professional from ZekerArbo only mentions the information that is necessary for the Sickness Absence and reintegration process, such as:

  • The work you are (no longer) capable of doing;
  • The expected duration of the Sickness Absence;
  • the degree of disability;
  • and advice for the employer on promoting your reintegration.

There is never any medical information in the reports that go to your employer. Of certain activities, your employer will receive an invoice.

As a client, do you use the services preventive consultation, occupational health examination, health check or vaccination service? Then your employer will not be informed about this: the service will be charged to the employer in a way that cannot be traced back to you as a person. If the company doctor or medical examiner wants to provide information to your employer on the basis of such a service, this will only happen if you have given your explicit consent.

Employers and employee representatives can also receive absence summaries or group reports from ZekerArbo . This information is customized so that it is not traceable to you as an individual.

Want to know what your employer does with the personal data it receives from ZekerArbo about you? You can check that with your employer or in your employer's privacy statement.

External parties

The external practitioner

When Zorg van de Zaak refers you to an external practitioner for intervention or because of the medical expertise needed (you can think of a psychologist, rehabilitation expert, labor expert or general practitioner), Zorg van de Zaak provides this practitioner with Sickness Absence and reintegration data about you that the he needs. Exchanging medical personal data is done only with your explicit consent.

Do you want to know what this practitioner does with the personal data he receives from Zorg van de Zaak about you? You can check with the practitioner himself or in the practitioner's privacy statement.

An employment specialist

When an occupational health expert examination is to take place, the company doctor may be asked by the Occupational Health Expert for an Employability Profile. For this purpose, the company doctor provides only those Sickness Absence and reintegration data in the form of an Employability Profile that are necessary to conduct this investigation. These are not medical data.

Government agencies

Zorg van de Zaak provides personal data to government agencies when this is necessary for the legal tasks of these agencies. For example, information is shared with the UWV when you, the client, apply for a WIA benefit or expert opinion or leave sick. The company doctor then provides the UWV with a current opinion about your illness and necessary medical data for the insurance doctor of the UWV, so that he can assess your medical situation.

In addition, Zorg van de Zaak can make a 42nd-week notification to the reintegration department the UWV on behalf of your employer.

Your absence insurer

Do you or your employer have an insurance with an absenteeism insurer? Then the claim department of your absenteeism insurer receives absenteeism data from Zorg van de Zaak, such as sick and recovery notifications and administrative data. The insurer needs this data to determine the amount of the benefit. The reintegration department of your absenteeism insurer may also receive reintegration data. Only the insurance physician has access to medical data.

Are you employed in a school community? On behalf of the employer, Zorg van de Zaak can provide absence data to the Replacement Fund. The Replacement Fund gives your employer an allowance to replace you during your absence.

The Netherlands Center for Occupational Diseases.

The Netherlands Center for Occupational Diseases (NCvB) is the reporting point for occupational diseases. Company doctors and medical examiners are obliged to report to the NCvB if they find that an occupational disease is present. The information the NCvB receives cannot be traced back to you as a person.

Other parties, if you or your employer requests it

If you want, ZekerArbo can share information with other parties in specific cases. For example, to an administrator, a doctor who does a second opinion or a lawyer. This happens only if you request it, with your explicit permission. To exchange information with other parties you can contact your therapist. Don't have a practitioner? Then send a request to ZekerArbo

Sometimes your employer chooses to outsource part of the absenteeism supervision (such as case management) to a specialized party. On behalf of the employer, this party then receives personal data from ZekerArbo. This is the same data that your employer receives. The specialized party will therefore not receive any medical data from ZekerArbo unless you give your explicit consent.

Other companies ZekerArbo works with

To ensure that ZekerArbo operates as effectively and efficiently as possible, some services are outsourced to external other companies. Examples are data centers, records managers, companies that offer (supporting) software and web designers. ZekerArbo also obtains services from companies that provide specialized services or conduct specific surveys, such as parties that make house calls in case of Sickness Absence, parties that conduct blood tests and parties that conduct satisfaction surveys on behalf of ZekerArbo . Finally, there are parties that gain access to data in the context of certification processes.

These external partners are selected with care. ZekerArbo requires them to handle privacy-sensitive data just as carefully as ZekerArbo itself.

Key information security measures within ZekerArbo

ZekerArbo thinks security of your personal data is very important and pays a lot of attention to it. On a regular basis, risk analyses take place and we look at new technological possibilities or threats. We also test the operation of our information security system. We apply the ISO 27001 and NEN 7510 standard and guidelines for information security. The business unit Zorg van de Zaak ICT is also ISO 27001 certified.

An important principle is that ZekerArbo only stores personal data within the European Economic Area (EEA). Should personal data be stored outside the EEA, this will only occur if ZekerArbo has determined that there is a level of protection that is in line with the requirements of the Privacy Legislation.

Does - despite all measures - still a data breach or information security incident occur? Then ZekerArbo immediately comes into action to analyze the cause, limit the damage and where necessary inform the Personal Data Authority and stakeholders.

The retention periods within ZekerArbo

ZekerArbo adheres to the legal retention periods. If there is no legal retention period, ZekerArbo does not retain data longer than necessary for the performance of the task.

  • By law, ZekerArbo is required to keep medical records for 20 years.
    In special cases, this can be 30 to 40 years* from the day of the last change in the record (or longer if a claim or lawsuit is pending or so much shorter if client requests destruction).
  • By law, ZekerArbo is required to retain financial data for 7 years from the end of the calendar year.
  • Sickness Absence and reintegration records in the context of the Wet verbetering Poortwachter are kept ZekerArbo up to a maximum of 2 years after leaving employment or after the end of the agreement with the client, or so much longer if a claim or lawsuit is pending or so much shorter if the person involved requests to destroy it. Exceptions for longer retention periods also apply if there is a high probability that employee will drop out for the same Sickness Absence or the file contains permanent agreements.
    If you as a client are self-insured, a retention period of 5 years after the end of employment applies. For Work resumption partially disabled (WGA) files, a retention period of 10 years after the end date of employment applies.
  • Emails are retained for up to 1 year after receipt.
  • Camera images are kept for a maximum of 4 weeks.
  • Standard log data are not kept longer than necessary. Insofar as the Occupational Health Service ZekerArbo qualifies as a healthcare institution under the Wkkgz, the log data of medical records will be kept for at least 5 years from writing relevant log line.

Want to know what the retention periods are for data that ZekerArbo processes through its websites? You can find that under 'Information for website visitors'.

*Preservation of medical records may differ from 20 years if exposure to hazardous substances is involved.

Exercising your rights

Do you want to know what personal data ZekerArbo has on you? Would you like to have certain data corrected or transferred? Or would you like to have parts of your (medical) file destroyed or have your entire file removed from the administration?

If you want to exercise your rights, you can send a request to zekerarbo or submit the request to your handler or contact person within ZekerArbo. ZekerArbo will comply with this request. Only in exceptional cases may ZekerArbo not do so. You will then receive a written explanation. Before ZekerArbo will process your request, it will establish your identity. This can be done by visiting the handler, by us contacting you and establishing that the request comes from you and in exceptional cases with a copy of ID.

Your practitioner can further tell you about the possibilities and consequences that your request may have on the continuation of your treatment or on other activities of ZekerArbo.

If any or all of your personal information is corrected or deleted from the medical record, a note will be made.

What rights do you have when it comes to processing your personal data?
The General Data Protection Regulation describes the rights you have as an individual. Briefly, these are the following rights:
  • Right of Inspection. You may request your file and other records of your personal data from ZekerArbo and view them yourself.
  • The right to rectification and supplementation. Is information incomplete or incorrect? Then you can have it completed and/or corrected.
  • The right to restriction of processing. This means that ZekerArbo may (temporarily) not process your data.
  • The right to object. Do you want certain data that ZekerArbo has of you not to be processed? Then you can object to that.
  • The right to data portability. This means that you can at all times receive the personal data you have shared with ZekerArbo in a machine-readable format so that you can transfer it to third parties.
  • The right to destruction of your (medical) file or personal data (the right to be forgotten). This means that all personal data that you want destroyed will be deleted, as long as this does not conflict with the legal obligations that ZekerArbo has to comply with.

In addition, as a client under the WGBO and the WABPVZ, you have the right to copies. This means that you can request an electronic copy of all processed personal data that ZekerArbo has of you, free of charge. ZekerArbo will comply with your request for a right to an electronic copy, unless the privacy of another person outweighs your right to a copy.

Your rights under the AVG and other laws
ZekerArbo not only complies with the General Data Protection Regulation, but also with other laws. For example, ZekerArbo is obliged to keep medical data for twenty years. It is therefore possible that you invoke a right under the AVG or the WGBO, but that ZekerArbo has to reject this request, because it violates another law. ZekerArbo will always inform you about this. If your request can be partially granted, but also partially not, ZekerArbo will inform you about this as well.
What can go wrong with your personal data?
ZekerArbo handles your personal data as carefully as possible. No more personal data is collected than necessary and we ensure the best possible security of this data. Nevertheless, something can go wrong. ZekerArbok is aware that your personal data can end up with third parties, who should not have this data. Sometimes, in extreme cases, this can lead to stigmatization or exclusion. When it comes to identification data, such as name, date of birth and BSN, you may be at risk of identity fraud. Your contact information, especially an e-mail address, can be misused by an unauthorized recipient for spam or phishing activities. For ZekerArbo , this is reason to pay particular attention to the security of your personal data.
What happens if you refuse to provide certain personal data?
In case of illness
When you call in sick to your employer, there are certain obligations that you incur:
  • You must provide the Occupational Health Service with information about your Sickness Absence.
  • You must participate in establishing, adjusting and implementing the plan of action.
  • You should accept the employer's offer of suitable employment.
  • You must cooperate with reasonable measures of reintegration.

ZekerArbo needs personal data related to these obligations, for example, when the practitioner helps you draw up an action plan. If you refuse to provide these personal data, it is against the law. This can have the following consequences:

  • Wage suspension if you fail to comply with monitoring requirements, such as failing to appear for consultation or refusing to provide information to the company doctor.
  • Wage freeze when you fail to meet reintegration obligations, such as not cooperating with the preparation of an action plan.
  • Also, not cooperating with your own recovery may (eventually) lead to dismissal.

When your practitioner asks for your explicit consent to process certain personal data, you are free to refuse this consent. This has no adverse legal consequences. However, it may have consequences for your treatment. Your therapist can tell you more about this.

At appointment examinations
ZekerArbo performs appointment examinations for employers. When you conceal a disability that affects your functioning during the appointment examination, while the medical examiner did ask about it, this is against the law. This can result in you no longer being entitled to salary in case of Sickness Absence.

By the way, you are not obligated to cooperate with an appointment examination. If you do not want to cooperate, it is up to the employer to decide whether or not to hire you.

In other cases
In other cases, you are often free to provide or not provide personal data. However, giving
ZekerArbo no or very limited consent to process personal data may impact ZekerArbo's services. This privacy statement explains what personal data ZekerArbo collects and for what reason. If you do not agree, ZekerArbo will gladly enter into a conversation with you to explain and possibly look for other possibilities.

Filing a complaint
Are you dissatisfied with the services of ZekerArbo? Then you can share your complaints with us, for this we refer you to our complaints page.
You can also file a complaint with other agencies and initiatives, such as the National Health Care Number (0900-2356708), the Arbodienst Geschillencommissie, Disciplinary Tribunal or court after submitting the complaint to ZekerArbo .

Other questions about your privacy

Then get in touch at zekerarbo or with your specific contact within ZekerArbo.

Are you of the opinion that the processing of your personal data is not in accordance with privacy legislation? In addition, if you have a question or complaint regarding the AVG and/or privacy, you can contact the Data Protection Officer, Mr. A.C.M. van de Molen. He can be reached at [email protected]* You can also file a privacy complaint with the Dutch Data Protection Authority. This is only possible after you have submitted your complaint to ZekerArbo .

ZekerArbo is a trade name of Zorg van de Zaak and uses the Data Protection Officer of Zorg van de Zaak.

ZekerArbo as a data controller

The Occupational Health Service ZekerArbo is an independent data controller for all occupational health services. This means that ZekerArbo is processing responsible for, among other things, medical record management, administration, occupational health services, services services, employability coach/case management services, company social work, grievance committee, labor experts et cetera. See also the NVVA manual.

ZekerArbo as a processor

ZekerArbo is a processor if it processes personal data on behalf of another organization. ZekerArbo is a processor in the following cases:
  • Zorg van de Zaak ICT B.V. informs you about a change in the processor agreement.
    A new sub-processor has been added for the use of the employer portal ZekerArbo Online (Zorg van de Zaak Online portal): Planningsagenda.nl. This party processes personal data on behalf of Zorg van de Zaak ICT B.V. when you use (also when you do not use) the portal.
    View the modified processor agreement.
  • The use of a customer's or customer-designated third-party system.

For what purposes are personal data processed on the website?

Newsletter

ZekerArbo sends newsletters to keep you informed about news, updates and special offers in the field of work, health and our network. To this end, we process your personal data in accordance with applicable laws and regulations, including (but not limited to) the General Data Protection Regulation and the Telecommunications Act.

The personal data we process for sending the newsletter are your first name, last name, company name and e-mail address. These are necessary for us to send the newsletter.

We use an external party to send the newsletters. With this party we share the above mentioned data only for sending the newsletter. This party is a processor of ZekerArbo and with this party we have made agreements on the processing of your personal data.

You can always unsubscribe yourself from the newsletter using the unsubscribe link in the newsletter.

To request services

If you request a preventive consultation through the website

As an employee, you can request a preventive consultation. When you do this through the website of ZekerArbo , the following personal data is processed here:

  • Name
  • Email address
  • Company name

The purpose of processing this data is to contact you to schedule a consultation. ZekerArbo will only do this if you have given your explicit consent. You can withdraw your consent at any time.

If you request (quotes of) services for your staff

As an employer, do you want to offer a service to your employees, such as flu vaccinations, a smoking cessation course or a lifestyle program? Or would you like to have a preventive workplace accident analysis performed? Then you can request a quote through the website of ZekerArbo. ZekerArbo then processes the following personal data:

  • Name
  • Phone number
  • Email address
  • Company name
  • Whether you are already a customer of ZekerArbo

If you contact us via the contact form or request additional information via an information form

When you fill out a contact or information form on one of the ZekerArbo, ZekerArbo processes the following personal data from you:
  • Name
  • Email address
  • Phone number
  • Company name
  • Whether you are an employee or employer
  • Whether or not you are a customer of ZekerArbo

The purpose of this is to contact you and answer your complaint or question. The processing of this data is necessary for the proper handling of your request.

If you request information or white papers

When you request an information booklet on the website, ZekerArbo processes the following personal data from you:
  • Name
  • Function
  • Company name
  • Phone number
  • Email address
  • Address
  • Whether or not you are a customer of ZekerArbo

The purpose of this is to be able to send you the requested information and contact you. The processing of this data is necessary for the proper handling of your request.

If you sign up for activities

ZekerArbo offers activities in which you can participate, such as attending sports events or a New Year's reception. When you sign up for these, ZekerArbo receives the following information from you:
  • Name
  • Email address
  • Company name
  • Whether you are an employer or employee
  • Whether or not you are a customer of ZekerArbo

If you want to pass on the follow-up step for long-term disability

In addition, as an employer you can also pass on via the website which follow-up step is necessary after two years of disability. In doing so, ZekerArbo processes the following personal data of the relevant disabled employee:
  • NAW data
  • Email address
  • Phone number
  • Whether there is a WIA application, dismissal permit through the UWV, wage sanction or own risk bearing.

If you unsubscribe from services

Do you want to cancel your subscription with ZekerArbo ? This can be done through the website. In doing so, the following personal data will be processed:

  • Name
  • Email address
  • Phone number
  • Function
  • Company name

ZekerArbo needs this information to determine whether your cancellation meets the general conditions. In addition, ZekerArbo uses this contact information to contact you if there are still questions about your cancellation.

Cookie Statement

Please refer to our cookie statement.

Website visitor retention periods

ZekerArbo adheres to the legal retention periods. If there is no legal retention period, ZekerArbo does not retain data longer than necessary for the performance of the task.

  • Completed website forms are retained for up to 3 months after receipt.
  • When you fill out a form on the website, it is sent to a mailbox. This mailbox is accessible to employees who handle the purposes described earlier in this statement. These emails are kept for a maximum of 3 months after receipt.

About this privacy statement

This privacy statement applies to:

  • ZekerArbo, as a trade name under Zorg van de Zaak N.V., and its group companies:
    • Arbo-Vitale B.V.
  • Zorg van de Zaak ICT B.V.

This version was amended on February 03, 2025. ZekerArbo may modify this privacy statement and the cookie statement. We therefore recommend that you review this privacy statement periodically. Changes will be communicated through the website.