Privacy Policy

Which medicines or medical devices you use and for what purpose is, of course, private. To process your prescription correctly, a pharmacy records various data. The most important are your personal and medication data. The legal bases for recording and using your data are the Medical Treatment Agreement Act (WGBO) and privacy legislation. Under the WGBO, CBA Apotheek is also required to record and maintain your data in a patient file. Read more about the WGBO on the KNMP website .

Which data are processed in the pharmacy?

CBA Apotheek records data about your medication use and is the data controller.

By recording your medication use, CBA Apotheek can check whether the prescribed medicine can be used safely in your situation. The pharmacy records health-related data you have provided to us, such as allergies, chronic diseases, pregnancy, and so on. In addition, CBA Apotheek records information about the medicines you use, as well as other information that may be relevant to your treatment. You have the right to access your file and to have it supplemented, corrected, deleted, or restricted. You also have the right to restrict processing or data portability. CBA Apotheek stores your file in the pharmacy for at least 20 years in accordance with the statutory retention period. You can always request a medication overview from your pharmacy.

Are you dissatisfied with how CBA Apotheek handles your data? Please first contact your pharmacist to discuss this. CBA Apotheek takes complaints seriously and records each complaint in writing. If you cannot resolve the matter with the pharmacist, you can use our complaints procedure. If you still cannot resolve the issue with CBA Apotheek, you can submit your complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) .

Which data does CBA Apotheek record and for what purpose?

Personal data

Financial and administrative data

Medical and pharmacotherapeutic data

Sharing data

At the pharmacy, CBA Apotheek staff handle your data with great care. This also applies to a locum pharmacist. The pharmacist and pharmacy technicians are bound by professional confidentiality. Interns have signed a confidentiality agreement. They may not share information about you with others. Only those involved in your treatment, such as your prescriber and the pharmacist, may access your file. To enable proper treatment, it may be necessary for your prescriber and pharmacist to consult with each other—for example, when an allergy is identified, when two medicines cannot be used together, or when side effects occur.

When and to whom else may CBA Apotheek provide your data?

• To a compounding pharmacy (which prepares a tailored medicine), to a central filling pharmacy (which, among other things, prepares repeat prescriptions) that handles the packing assignment, or to a company that packages medicines in a dose dispensing system.
• When you collect medicines from a regional out-of-hours pharmacy (out-of-hours pharmacy), that pharmacy may request your data from your own pharmacy to check whether the prescribed medicine can be used safely. The out-of-hours pharmacy may only request your data if you have given them permission. See the section below on Sharing medical data.
• To bill the costs of your medicines, CBA Apotheek informs your health insurer which medicines have been dispensed to you.
• CBA Apotheek automatically screens your medication data to identify possible improvements in your pharmacotherapy and to optimally support you in using your medicines. This is done using decision rules based on scientific evidence, treatment guidelines or contractual agreements.
• We also share your data with a financial service provider with whom we have an agreement, for example to process invoices.

In emergencies, CBA Apotheek may share your data with healthcare providers, for example at a hospital. Your consent will be requested in advance. If this is not possible, or in life-threatening situations, the pharmacist will assess whether sharing personal data is necessary and justified.

Customer satisfaction survey

Your email address may be used to measure your experience with CBA Apotheek through a customer satisfaction survey. CBA Apotheek would like to know how you rate our services and is also required under the Healthcare Quality, Complaints and Disputes Act (Wkkgz) to measure patient experiences. This survey is anonymous and is conducted by an independent research agency, which has no access to your medication data.

Email and (mobile) phone numbers

CBA Apotheek stores and uses only email addresses and (mobile) phone numbers that are provided to us directly, or where it is clear at the time of provision that they are intended for us. These details are important so we can reach you quickly in the event of an incident. You may withdraw your consent at any time by informing us in writing. Email addresses and (mobile) phone numbers may be used for commercial purposes within CBA Apotheek, unless you inform us in writing that you do not wish this. If your email address or mobile phone number changes, please notify us immediately.

Sharing medical data?

On www.volgjezorg.nl/toestemming you can give or withdraw consent for making your medical data available for consultation via the LSP (Landelijk Schakelpunt). Your GP, pharmacy or other healthcare provider may then allow another healthcare provider—such as a locum GP, GP cooperative, out-of-hours pharmacy or a hospital specialist—to consult your medical data. They may only access your data if it is necessary for your treatment and you agree to it.

You must give consent separately for each healthcare provider via www.ikgeeftoestemming.nl . If you have given consent, your GP or pharmacy will record this in your file. You can withdraw your consent at any time; please note that your medical data will then no longer be available for consultation.

Providing information and dispensing medicines

The pharmacist or pharmacy technician at CBA Apotheek provides oral information about medicines and medical devices. If necessary, they will also provide written information. When providing this information, your privacy is respected as much as possible.

Privacy tip

Please make sure to remove labels before returning old medicines. These labels contain your personal data.

Conversations that take longer or concern privacy-sensitive matters are generally held in a separate consultation room. You can always ask for this if you prefer. If medicines are ready for another person, the pharmacist or pharmacy technician will only hand them over if that person has given you permission to collect them. Is someone else collecting medicines on your behalf? Then CBA Apotheek will inform that person about how to use the medicines, unless you have indicated in advance that you do not want this. CBA Apotheek disposes of privacy-sensitive information separately within the pharmacy.

Online services

Personal data that you submit to the pharmacy via the CBA Apotheek website are also treated confidentially. Data are transmitted over a secure connection.

Cookies

We use functional, analytical and tracking cookies on our website. You can read all information about this in our cookie policy.

This text is partly based on KNMP information.

Your privacy rights

If you would like to know which personal data about you are being processed, you can submit a written access request (Article 15 GDPR, Article 456 WGBO). The Controller will handle your request within a reasonable period.

If your data prove to be incorrect, incomplete or not relevant, you can submit an additional request to have your data rectified or supplemented (Article 16 GDPR). In certain cases, you may request erasure of your data (Article 17 GDPR, Article 455(1) WGBO).

If you wish to receive the (digital) personal data that we process about you, you can invoke your right to data portability (Article 20 GDPR). This means you will receive your data in a form that allows you to easily transfer them to another organisation, should you wish to do so.

You can also request restriction of processing or object to the processing of your data (Articles 18 and 21 GDPR).