Privacy Policy OmniHealth B.V.

Last updated: 09-12-2025

1. Who We Are

OmniHealth B.V., based in Amsterdam, provides medical assessments, employability evaluations, and medical advice. We protect personal data in accordance with the GDPR, WGBO, ILT guidelines, and sector-specific standards. For inquiries, please contact: info@omnihealth.nl

2. Personal Data We Process

Medical Data: Identification, contact details, medical history, test results, file notes.

Non-Medical Data: Contact information, scheduling, administration, server logs, cookie preferences, statistics (with consent).

3. Purposes of Processing

Conducting assessments, fulfilling legal obligations, scheduling, communication, website security, and statistical analysis (with consent).

4. Legal Bases

Performance of a contract, legal obligations, legitimate interests, and consent.

5. Data Sharing

Employers receive only a fit/unfit outcome—no medical details are shared.

Processor: EQwise (hosting and technical services).

Sub-processors: Google Workspace, Dropbox, Google Analytics (Consent Mode), Complianz.

6. TopSide/Back-up Services

Remote consultations only. No records are stored within OmniHealth. Visual materials/ECGs are deleted immediately after evaluation. Only anonymized company registration data is retained.

7. Reviews

Publicly posted reviews may be displayed in full. Directly submitted reviews are published only with explicit consent.

8. International Data Transfers

Data transfers via Google and Dropbox are secured through Standard Contractual Clauses (SCCs). No medical records are stored outside the EU.

9. Security Measures

Encryption, firewalls, HTTPS, offline storage of Vitalograph data, staging environments, and consent blocking mechanisms.

10. Data Retention Periods

Medical data: 20 years
Administrative data: 7 years
Communication records: 2 years
Server logs: 30–90 days
Analytics data: 14 months
Cookie consent: 12 months
TopSide visual material: deleted immediately after review

11. Data Subject Rights

Access, rectification, erasure (subject to WGBO limitations), objection, and data portability.

12. Data Breaches

EQwise reports any incidents within 24 hours.

13. Contact Information

info@omnihealth.nl