Last updated: 31 Oct 2024
Prepped privacy statement
To deliver our services, we need certain information from you. We believe it’s important you know what we do with your personal data and what rights you have, so you can trust that your data is safe with us.
What data do we collect?
We usually ask for your name, email address, and phone number, but sometimes for other information as well. The specific data we use depends on the purpose, the service or product you use, and your cookie settings (if applicable).
Identity verification
If you are a customer or participate in a pilot, we may ask for identification, for example via iDIN or a personal appointment. This helps us verify your identity and the information you provide.
Cookies
We sometimes use cookies to optimize our services and performance and to show you relevant information. You can read more about our use of cookies and, where needed, give consent in our cookie policy.
Email communication
We may track your click behavior in our emails to see if an email was opened and which links were clicked. This helps us tailor our communication better to your interests.
Use of your data
We use your data based on laws and regulations, for example for:
Offering products or services (directly or through third parties).
Entering into and executing agreements.
Tailoring products and services to your preferences.
Risk management and preventing money laundering and terrorism financing.
Research and analysis to improve our services.
You can find more information about our data processing here.
Contact moments
We record contact moments to improve our service. This may include:
Letters and emails we send and receive.
Phone calls and chats.
Your interactions on our websites and apps.
Our contact through social media channels such as Facebook, Twitter, and WhatsApp.
Social media
We use social media to share useful information and answer questions. Personal data may be recorded in accordance with this privacy statement. We are not responsible for the content and privacy policies of social media channels.
Profiling and automated decision-making
Profiling
We may create a profile of you based on data we have about you, including data from public sources. These profiles help us tailor marketing and manage risk. Profiles are used as input for decisions.
Automated decision-making
Sometimes we make automated decisions without human involvement. If these decisions have significant consequences for you, we will inform you about this and you can request a review by an employee.
Achmea B.V. is responsible
Prepped is a trade name of Achmea Services N.V., part of the Achmea Group. Achmea B.V. is responsible for proper processing of your personal data for all brands and divisions of Achmea.
Data sharing
We sometimes share your data with other companies within Achmea, business partners, or authorities such as the Tax Authority and regulators. Your data is never sold. A full list of partners can be found here.
Securing your data
We protect your data with technical and organizational measures. If you discover a vulnerability, please report it via Responsible Disclosure so we can further improve security.
Retention period
We keep your data as long as needed for the purpose for which it was collected or to meet legal obligations. If no longer needed, data will be deleted or anonymized for analysis and research.
Legal requirements
We comply with relevant laws and regulations, such as:
The General Data Protection Regulation (GDPR).
The Dutch GDPR Implementation Act.
The Telecommunications Act.
GDPR helpdesk
You can submit privacy-related questions and requests via the GDPR helpdesk. The helpdesk will contact you and handle your request. Your rights are listed below.
Your rights
Under the law, you have the following rights:
Access to your data.
Correction of incorrect data.
Deletion of data (where possible).
Objection to specific uses of your data.
Withdrawal of previously given consent.
Transfer of data to yourself or another party.
Restriction of data use under certain circumstances.
Exercising your rights
Send an email or letter to exercise your rights. Include your name, address, and city for identification. If necessary, we may ask for additional information, such as a copy of your ID. We will respond within one month.
Email:
Mailing address:
Achmea Impact Ventures — Prepped
Attn: GDPR Helpdesk
PO Box 9150
7300 HZ
Apeldoorn
For secure email communication, we recommend not sending sensitive information through unsecured channels.
Contact and complaints
For questions or complaints, you can contact the Data Protection Officer at privacymanager@achmea.nl or by mail:
Address:
Achmea B.V.
Attn: Privacy Manager Compliance
PO Box 866
3700 AW
Zeist
If we can’t resolve it together, you can submit your complaint to the Dutch Data Protection Authority.
Changes
This privacy statement may be updated due to changes in legislation or the development of new services. The latest version is always available on our website. This statement was last updated on 31 Oct 2024.