Privacy Policy

1. Who is responsible for your data?

The data controller for your personal data is:

Ellas BV (trading as "FamZorg")
Sint-Bernardsesteenweg 270, Antwerpen, Belgium
Company number: BE0768.658.484
Email: [email protected]

If you have any questions about privacy, you can contact us at the email address above.

2. What data do we collect?

2.1. Account data

When you create an account, we collect:

• Full name
• Email address
• Phone number (optional)
• Password (stored encrypted)
• Profile photo (optional)

2.2. Care Circle data

Within a Care Circle, users can enter the following data:

• Details of the care recipient (name, date of birth, address)
• Medication information (names, dosages, times)
• Appointments and calendar items
• Tasks and to-dos
• Notes and observations about health
• Contact details of care providers (GP, specialist, etc.)
• Chat messages within the Care Circle

2.3. Payment data

For paid subscriptions, we process:

• Billing address
• VAT number (for business customers)
• Payment history

Credit card and bank details are not stored by FamZorg, but are processed directly by our payment provider, Mollie.

2.4. Automatically collected data

When you use the Platform, we automatically collect:

• IP address
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited and click behaviour
• Date and time of access

3. What do we use your data for?

4. Legal bases for processing

We process your personal data on the following legal bases:

• Performance of the contract: To provide our services (account, Care Circle, payments)
• Consent: To send newsletters and marketing communications, and to process health data
• Legitimate interest: To improve the Platform, for security and for fraud prevention
• Legal obligation: To retain invoice data in accordance with tax legislation

5. Special categories of personal data (health)

5.1. What health data?

Users may voluntarily enter the following health data:

• Medication and dosages
• Medical appointments
• Notes on health condition
• Contact details of care providers

5.2. Legal basis

We process health data solely on the basis of your explicit consent, which you give when creating a Care Circle. You can withdraw this consent at any time.

5.3. Additional security

Health data is handled with extra care:

• Encrypted storage (encryption at rest)
• Encrypted connection (SSL/TLS)
• Accessible only to members of the Care Circle
• No access for FamZorg staff unless necessary
• Storage within the European Union

6. Who do we share data with?

6.1. Within Care Circles

Data you enter in a Care Circle is visible to all members of that Care Circle. You decide who you invite.

6.2. Partners

If you get in touch with a Partner through the Platform (e.g. a cleaning service or meal service), we may share the necessary contact details to facilitate the service. This only happens with your consent.

6.3. No sale of data

FamZorg never sells your personal data to third parties.

7. External service providers

We use the following external service providers, which process data on our behalf as processors:

* Google Analytics: we use IP anonymisation and have concluded a data processing agreement.

** Where data is transferred outside the European Economic Area, we ensure appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

Chat assistant: the questions you ask in the chat on our website are sent to Anthropic to generate an answer. FamZorg does not store these conversations; only your own browser remembers the conversation until you close the window. Please do not share medical or other sensitive personal data in the chat.

Data processing agreements are in place with these parties to safeguard the protection of your data.

8. How long do we keep data?

Once the retention period has expired, data is deleted or anonymised.

9. Data security

FamZorg takes appropriate technical and organisational measures to protect your data:

• Encryption: All data is stored encrypted and transmitted via SSL/TLS
• Access control: Only authorised staff have access to data
• Passwords: Passwords are stored hashed (never in plain text)
• Backups: Regular encrypted backups
• Monitoring: Continuous monitoring for unauthorised access
• EU hosting: All data is stored within the European Union

10. Your rights

Under the GDPR, you have the following rights:

10.1. Right of access

You can ask us which data we process about you.

10.2. Right to rectification

You can have inaccurate data corrected.

10.3. Right to erasure

You can request the erasure of your data ("right to be forgotten").

10.4. Right to restriction of processing

You can request that the processing of your data be restricted.

10.5. Right to data portability

You can request your data in a commonly used format in order to transfer it.

10.6. Right to object

You can object to processing based on legitimate interest.

10.7. Right to withdraw consent

Where processing is based on consent, you can withdraw it at any time.

10.8. Lodging a complaint

If you are dissatisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority:

Data Protection Authority
Rue de la Presse 35, 1000 Brussels
www.dataprotectionauthority.be

11. Cookies

FamZorg uses cookies to make the Platform work and to gain insight into how it is used. For more information, please refer to our Cookie Policy.

12. Changes to this privacy policy

FamZorg may amend this privacy policy from time to time. Changes will be announced via the Platform or by email. We recommend that you consult this policy regularly.

In the event of substantial changes affecting your rights, we will ask for your consent again where necessary.

13. Contact

Do you have any questions about this privacy policy or about how we handle your data?