Privacy policy

Who we are

Rexium B.V., based in Amsterdam, is responsible for processing personal data as described in this privacy policy. You can reach us at info@rexiumbv.nl or +31 6 46096641.

What data we process through this website

We only process data you provide to us yourself through our forms:

• Contact form: name, email address, phone number (optional), subject and your message.
• Quote request: name, email address, phone number, company name, Chamber of Commerce number, services of interest, description, preferred date, budget indication and any attached document.
• DBC claims service request: contact name, clinic name, business email address, phone number (optional), type of support, EPR or administration system, estimated number of claims and a general explanation.
• Newsletter: your email address.
• Technical data: to prevent abuse we process an encrypted (hashed) derivative of your IP address. We do not store your IP address itself.

No patient data through the website

Our public forms are intended only for an initial business enquiry. Never send names, dates of birth, BSN numbers, medical information or other patient data through this website or our general email address. If we do receive patient data through a form, we delete it.

Purposes and legal bases

• Answering your question and preparing a quote: based on taking pre-contractual steps at your request, or our legitimate interest in answering enquiries.
• Sending the newsletter: based on your consent. You can always unsubscribe via info@rexiumbv.nl.
• Protecting our forms against spam and abuse: based on our legitimate interest.

The DBC claims service

Delivering the DBC claims service may involve processing medical and other sensitive personal data of patients. The clinic is the controller and Rexium acts as processor. Claims data is only exchanged once the collaboration has been formally arranged, under these conditions:

• We sign a data processing agreement with the clinic before processing any data.
• For access to the EPR, roles, authorisations, logging and termination of access are agreed in advance.
• Data is exchanged through a secure channel, never via regular email or the public website form.
• Data is used solely to prepare and process claims on behalf of the clinic.
• Retention periods are set out in the data processing agreement, in line with the clinic's legal obligations.

Recipients

We never sell your data. We use carefully selected service providers that process data on our behalf, such as our hosting provider (Vercel), our database service (Convex) and our email service (Resend). Appropriate agreements on security and confidentiality are in place with these parties.

Retention periods

• Contact and quote requests that do not lead to an assignment: up to 2 years after the last contact.
• Requests that lead to an assignment: as long as the statutory (tax) retention obligation requires.
• Newsletter subscriptions: until you unsubscribe.

Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access restrictions and server-side form validation.

Your rights

You have the right to access, rectify, erase and restrict your data, the right to data portability and the right to object. Send your request to info@rexiumbv.nl. We respond within one month. If you have a complaint about how your data is processed, you can also lodge it with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

This website only uses functional cookies needed for the site to work properly, such as remembering your language choice. We do not place tracking or advertising cookies without your consent.