Privacy Policy
Last updated: June 2025
Stichting REACH Holland (“REACH”, “we”, “our”) is a care centre registered in the Netherlands (KvK 65359372, RSIN 856079662), located at Van Bleyswijckstraat 85, 2613 RR Delft. We are committed to protecting the personal data of everyone who visits our website or contacts us. This Privacy Policy explains what data we collect, on what legal basis, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Dutch law.
If you have any questions about this policy, please contact us at admin@stichtingreach.com
1. What data we collect and why
We collect personal data only when there is a clear and lawful reason to do so. The table below sets out each processing activity.
| Activity | Data collected | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form (Contact Form 7) | Name, email address, phone number (optional), message, audience type (parent / professional / other) | To respond to your enquiry or referral request | Legitimate interest (Art. 6(1)(f) GDPR) | 12 months from last contact, then deleted |
| Newsletter / callback opt-in | Email address, consent timestamp | To send updates about REACH with your explicit consent | Consent (Art. 6(1)(a) GDPR) | Until you withdraw consent; withdrawn within 30 days |
| Website analytics (Google Analytics 4) | Anonymised IP address, pages visited, session duration, device and browser type, referral source | To understand how visitors use the site and improve content and navigation | Consent (Art. 6(1)(a) GDPR) — only after cookie consent is given | 14 months (GA4 default retention period), then automatically deleted |
| Functional cookies | Cookie consent preference (yes/no/categories), session state | To remember your cookie choice and keep the website working correctly | Strictly necessary — no consent required (Art. 5(3) ePrivacy Directive) | 12 months or until browser is cleared |
We do not collect special categories of personal data (such as health data or data about children) through this website. Any clinical or care-related data is handled under a separate client privacy statement provided at intake, in accordance with the Wet op de geneeskundige behandelingsovereenkomst (WGBO).
2. Cookies
Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:
Strictly necessary cookies — required for the website to function. These cannot be disabled. They include the cookie that stores your consent preference.
Analytical cookies — Google Analytics 4, activated only with your consent. IP addresses are anonymised before processing. We have disabled data sharing with Google for advertising purposes and have set the data retention period to 14 months.
We do not use marketing, advertising, or social media tracking cookies.
You can manage or withdraw your cookie consent at any time by clicking the “Cookie settings” link in the footer of this website. You can also block or delete cookies via your browser settings; please refer to your browser’s help documentation for instructions.
For more information about Google Analytics and how to opt out, visit tools.google.com/dlpage/gaoptout.
3. Who we share data with
We do not sell, rent, or trade your personal data. We share data only with the following processors, who are contractually bound to process it only on our instructions and to protect it in accordance with GDPR:
VDX (hosting provider) — website hosting and server infrastructure, located in the Netherlands.
Google LLC — analytics (Google Analytics 4). Data may be transferred to the United States under the EU–US Data Privacy Framework. Google’s privacy policy is available at policies.google.com/privacy.
Contact Form 7 — form data is processed server-side and delivered to our email inbox. No data is stored by the plugin beyond the current session.
We may disclose personal data if required to do so by law, or in response to a valid request from a Dutch public authority.
4. Your rights
Under the GDPR, you have the following rights in relation to the personal data we hold about you:
Right of access — you may request a copy of the data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete data.
Right to erasure — you may ask us to delete your data where there is no longer a lawful basis for processing it.
Right to restriction — you may ask us to restrict how we use your data while a dispute is resolved.
Right to data portability — where processing is based on consent, you may ask for your data in a structured, machine-readable format.
Right to withdraw consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to object — you may object to processing based on legitimate interest.
To exercise any of these rights, please contact us at admin@stichtingreach.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
If you believe your rights have not been respected, you have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ Den Haag — autoriteitpersoonsgegevens.nl.
5. Data security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, or disclosure. These measures include SSL/TLS encryption for all data in transit, restricted access to our WordPress admin environment, and regular off-site backups.
6. Children’s data
This website is not directed at children. We do not knowingly collect personal data from children through our website contact forms. All data relating to children receiving care at REACH is handled under a separate client privacy statement, provided to families at the start of care.
7. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available at stichtingreachholland.nl/privacy-policy/. The date at the top of this page indicates when it was last revised. Where changes are significant, we will notify users via a banner on the website.
8. Contact
Stichting REACH Holland
Van Bleyswijckstraat 85, 2613 RR Delft
Email: admin@stichtingreach.com
Tel: +31 6 27927688
KvK: 65359372