Collectively, the Website and products are referred to as the “Services.” We are committed to protecting the information collected through the Services.
We are committed to being your most trusted ally in your pursuit of health and well-being. Whether you’re here to learn more about a health condition, research a medication, tap into one of our communities, or get tips for a healthier lifestyle, you’re in the right place.
By visiting and interacting with our Website and products, you may share certain information with us, as detailed below. We may share some of the information you share with us between our website to provide you with the most relevant content and may use some of the information you share with us to serve you relevant advertising. (For further details on our advertising and sponsorship policy, click here).
Table of Contents
- What Kinds of Information Do We Collect?
- Cookies and Tracking Technology
- How Do We use Your Information?
- How and When Do we Share or Disclose Your Information?
- How Long Do We Retain Data?
- Your Rights, Your Choice, and Your Security
- Your Rights
- Your Choice
- Your Security
- Changes to this Policy
- Children’s Privacy
- Website Location, US Transfer & Processing
- Contact Us
- EEA/UK Addendum
- Cookies Policy
1. The types of information collected by HeidiNu.com and its partners through the Services and the purposes for which we use it.
2. How Heidi Nu.com collects, stores, and shares your information.
3. Your rights with respect to such information collection
Personal Information: “Personal Information” is information that can be used either directly or indirectly to identify an individual (you). Examples include name, email address, physical address, Internet protocol (IP) address, mobile ad ID, and your interactions with the Websites that are connected to other identifying information, such as name, email address, physical address, and Internet protocol IP address.
WHAT KINDS OF INFORMATION DO WE COLLECT?
We receive information from or about you depending on the nature of your interaction with our Services.
Information you provide to us
You may provide us with information in several ways, including:
- Registering/Signing Up in the Services: When you choose to sign up for newsletters, sign up for an account, on our Services.
- Using our Products: When you search for and schedule medical care.
- Transactions with the Services: When you submit an opinion or comment through the Services, contact us, or register for more information regarding products or services.
- Promotions: From time to time, HeidiNu.com may offer promotions, such as surveys or sweepstakes, on the Services, for which we need Personal Information to administer.
- Apps: When you download and use our Apps.
The Personal Information that you provide may include your name, email address, physical address, birth date, gender, zip/city, marital status and health information (diagnosis, when you were diagnosed, what medications you’re taking, or what type of care you’re looking for).
Information we collect about you
When you use our Services, we may automatically collect information, when:
- Social Media and Sharing: If you share an article or post a comment or other content with a friend/contact.
- Device Information: we collect information from or about the computers, phones, or other devices where you install or access our Services, depending on the permissions you’ve granted.
- Data Analytics: Web analytics services, including third-party services such as Google Analytics, collect information about how visitors use our Websites, on both an individual and aggregated basis (click here for more information about Google Analytics).
- Marketing: we, and our marketing partners, collect information indicating an interest in particular subject matter.
The personal information we collect, when you use our Websites and Apps, typically includes attributes such as the operating system, hardware version, device settings, device identifiers, connection information (e.g. ISP), browser type, language and time zone, mobile phone number, mobile ad ID, and IP address; social signals (including, the friends/contacts content has been shared with); and, Website use information, such as pages viewed, interactions, dwell time, and navigation.
In addition to other rights detailed below, you may choose to install the Google Analytics Opt-Out Browser Add-on to opt out of Google Analytics data collection.
Information we receive from other sources
In order to continue to provide the Services free of charge, we are supported by advertisers and other partners. As part of our advertising and partnerships, we work closely with third parties (for example, business partners, advertising networks, analytics providers and search information providers) and may receive information about you from them.
This could include demographic information, information about your likely interests based on your web browsing, and information about your interactions with advertisements delivered by our partners.
We may combine this information with other information you have provided to us or which we collected about you.
For more information on how to review or update your data preferences, please review the “YOUR RIGHTS, YOUR CHOICE, YOUR SECURITY” section below.
Cookies and Tracking Technologies
HOW DO WE USE YOUR INFORMATION?
We use personal information about you in connection with the following purposes:
To Provide and Enhance the Services: We use the information we collect to deliver and enhance our services, including ensuring our content is presented in the most effective manner for your device, to personalize features and content and make suggestions for you on our Services.
Transactions: We use your Personal Information to process your transactions, to send you confirmations, to respond to your requests, and for any related communications.
Retargeting: We use your information to allow us or third parties to deliver advertisements based on your interests on our Websites, affiliated websites or third-party sites. Our retargeting activities abide by the NAI code of conduct.
Marketing: We use the information we have to improve our advertising systems so we can show you relevant interest-based advertising and measure the effectiveness and reach of advertisements and services. We may use your Personal Information for other marketing and market research purposes to learn more about our users. We will only contact you for direct marketing purposes in accordance with applicable laws. You may opt out of our use of your Personal Information for marketing, market research, or direct marketing purposes at any time by sending a rights request as set forth in the “Your Rights” section below. Occasionally, comments may be anonymized and used in marketing materials.
Analytics: We may store details of your visits to our Websites and your electronic interactions with any emails that we send to you (“Usage Data”) under a pseudonym (i.e. not under your name but under an ID number), including the pages you visited and services you used. We use such Usage Data to help us learn more about our users’ preferences, to be able to tailor our Websites according to your interests and preferences, to help us address problems with and improve our site design, products, and services; to analyze trends and statistics; and to present content in the clearest and most friendly manner for you.
To Communicate with You: We use your information to send you marketing communications, communicate with you about our Services, and let you know about changes to our policies and Terms. We also use your information to respond to you when you contact us. In our Apps, we send you push notifications from time to time in order to update you about any events or promotions that we may be running. The Apps may also ask for your permission to access your camera and your photos. If you no longer wish to receive these types of communications, or if you’ve initially agreed for the application to access your camera and photos and you would like to stop the Apps from accessing them, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information.
Other Reasons: We may use and collect Personal Information for other legitimate purposes associated with protecting your interests, our interests and those of third parties, including, keeping our services safe and secure, complying with the law, and when obtaining professional advice (for example, from lawyers).
HOW AND WHEN DO WE SHARE OR DISCLOSE YOUR INFORMATION?
With the HeidiNu.com Family of Website and Apps: We may share your information with: at this moment we do not share your information with anyone, but this might change soon. We will keep you updated about that through email.
To Enhance Our Services: We may share your information with third parties who provide services on our behalf to help with our business activities such as ad technology providers, authentication services, email service providers, data analyzers, and business intelligence providers for the purpose of enhancing our products and services. These companies are authorized to use your personal information only as necessary to provide these services to us. These third parties currently may include: Amazon, Amobee, Facebook, Google, Pinterest, Twitter
Third-Party Marketing: We provide advertisers with reports about the kinds of people seeing their ads and how their ads are performing, but we don’t share information that personally identifies you (information such as your name or email address that by itself can be used to contact you or identifies who you are) unless you give us permission. We may request to share your information (including email address) with third-party business partners to provide you with information about and enroll you in clinical trials. In these situations and before sharing your information for these purposes, you will receive a just-in-time notice of the proposed sharing, and we will obtain your consent, or opt in, to such sharing. If you do not opt in, we will not share your information for these purposes.
Third-Party Services: When you interact with a third-party advertiser in our Services, the content creator or advertiser can receive information you share with them, as well as the information needed to complete the transaction, including medical information and contact details.
Legal Requirements: We may access, preserve, and share your information in response to a legal request if we have a good faith belief that the law requires us to do so. We may also access, preserve, and share information when we have a good faith belief it is necessary to detect, prevent, and address fraud and other illegal activity; to protect ourselves, you, and others, including as part of investigations; or to prevent death or imminent bodily harm.
Online Marketing: As described above, we may use, and when appropriate, disclose your Personal Information for marketing and market research purposes to learn more about our users and offer and improve our Services. We will only contact you for direct marketing purposes in accordance with applicable laws. You may opt out of our use of your Personal Information for marketing, market research, or direct marketing purposes at any time as set forth below.
Aggregated Data: We may disclose aggregated, non-personal information about Website users without restriction. We also may share information that has been “hashed” with certain third-party partners. “Hashed” information is information that has been converted to an anonymized string of characters in an effort to prevent third parties from unscrambling the anonymized string of characters to recover the underlying information. To opt out of our sharing of “hashed” information, please click here.
HOW LONG DO WE RETAIN DATA?
We keep your Personal Information for as long as is necessary for the purposes for which it is processed. These periods vary depending on the nature of the information and your interactions with us.
When the purposes for which we processed your Personal Information have concluded, we will either permanently delete or destroy the relevant Personal Information or anonymize it, in a manner that ensures individuals are no longer identifiable.
YOUR RIGHTS, YOUR CHOICE, YOUR SECURITY
Access to Your Personal Information. You may request access to your personal information that we collect on our own behalf. If required by law, upon request, we will grant you reasonable access to the Personal Information that We have about you. Note that European residents may be entitled to ask us for a notice describing what categories of Personal Information (if any) we share with third parties or affiliates for direct marketing.
Changes to Your Personal Information. We rely on you to update and correct your Personal Information. Note that we may keep historical information in our backup files as permitted by law. If our Website or App does not permit you to update or correct certain information, then contact us at the address described below. If we are processing your information on behalf of one of our partners, then we will forward your modification request to that partner and/or follow any instructions provided by that partner concerning the modification of information.
Deletion of Your Personal Information. When we collect information on our own behalf, we typically retain your Personal Information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. You may, however, request information about how long we keep a specific type of information, or request that we delete your Personal Information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in some situations we must keep your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes. If we are processing your information on behalf of one of our partners, then we will forward your deletion request to that partner and await instructions on whether the information should be deleted.
Objection to Certain Processing. When we process information on our own behalf, you may object to our use of your Personal Information by contacting us at the address described below. For example, European residents may be entitled to object, or opt-out, of having their information sold to third parties. If you are an European resident and would like to opt-out of having your information sold, then please visit the following link: Do Not Sell My Personal Information. We do not discriminate against European consumers who exercise any of their rights described in this Policy.
Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions.
Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in emails that you receive. If you decide not to receive promotional emails, we may still send you service related communications.
Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us you can remove yourself from our mailing lists by emailing us (our contact information is below) with “NO SNAIL MAIL” in the subject line along with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
Text Messages and Push Notifications.If you receive a text message from us that contains promotional information you can opt-out of receiving future text messages by replying “STOP” or “UNSUBSCRIBE.” You control on your device whether you receive push notifications.
Revocation of Consent. If you revoke your consent for the processing of Personal Information, then we may no longer be able to provide you services. In some cases, we may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. You may revoke consent to processing (where such processing is based upon consent) by contacting us at the address described below.
If you do not want to make requests for access, deletion, or Do-Not-Sell using our online form, you may contact us at firstname.lastname@example.org.
The security of your Personal Information is important to us. We follow generally accepted standards to protect the Personal Information submitted to us, both during transmission and once it is received, and we take various precautions to protect information against loss and misuse. Nevertheless, transmission of information over the internet is not completely secure, we cannot guarantee the security of your Personal Information, and any transmission is at your own risk.
If you have any questions about the security of your Personal Information, you can contact us at email@example.com
Links to third party websites
Changes to this Policy
We do not knowingly collect, maintain, or use Personal Information from our Website about children under the age of 18. We request that persons under the age of 18 not use our Website without supervision from a responsible adult. We will never request Personal Information from a child under the age of 18 without verifiable parental consent. If we become aware that a child under the age of 18 has sent Personal Information to us without prior parental consent, we will remove his or her Personal Information from our files.
WEBSITE LOCATION, US TRANSFER & PROCESSING
THE SITE IS OPERATED BY HEIDI NU IN HOLLAND, AND PERSONAL INFORMATION WILL BE PRIMARILY STORED IN THE EUROPEAN UNION. BY PROVIDING PERSONAL INFORMATION TO US, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, YOU ACKNOWLEDGE THAT WE COLLECT, MAINTAIN, PROCESS, AND TRANSFER SUCH INFORMATION IN AND TO THE EUROPEAN UNION AND OTHER COUNTRIES AND TERRITORIES, PURSUANT TO THE LAWS OF THE EUROPEAN UNION OR SUCH OTHER JURISDICTIONS, WHICH MAY PROVIDE LESSER PRIVACY PROTECTIONS THAN AMERICAN ECONOMIC AREA COUNTRIES, AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, YOU ACKNOWLEDGE THAT YOUR INFORMATION MAY THUS BE SUBJECT TO THE DUTCH LAW AND OTHER FOREIGN LAWS AND ACCESSIBLE TO THE EUROPEAN UNION AND FOREIGN GOVERNMENTS, COURTS, LAW ENFORCEMENT AND REGULATORY AGENCIES. BECAUSE HEIDI NU IS LOCATED IN THE EUROPEN UNION, THESE DATA TRANSFERS TO THE EUROPEAN UNION ARE NECESSARY TO PROVIDE THE SERVICES TO YOU AS SET FORTH IN OUR TERMS OF SERVICE AND TO OPERATE OUR WEBSITE. WHEN APPLICABLE, WE WILL OBTAIN YOUR CONSENT FOR THESE DATA TRANSFERS TO THE EUROPEAN UNION.
Our Legal Basis for Processing
Our legal basis for processing your personal information will typically be one of the following:
Consent. You have actively consented for us to process data by completing a form on the site, or have indicated your consent with another affirmative act.
- Our Legitimate Interests in processing your personal information are:
- To ensure our website meets the high standard of usability and security you would expect;
- To help us identify areas for improvement;
- To enable us to communicate effectively regarding services we offer; and
- To enable us to process contacts, queries, or complaints.
Legal Obligation. It is necessary for us to process your personal information for us to comply with our legal or regulatory obligations.
Contractual Obligation. It is necessary for us to process your personal information to perform the tasks associated with a contract to which you are a party, or to take steps at your request prior to you entering into a contract.
Your Data Rights
In addition to your rights of access and correction (rectification) described in “Your Rights” (above), EEA and UK residents have certain other rights defined in the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We will handle your request in accordance with the law. This means there may be legal reasons why we cannot fulfill all requests.
Consent Withdrawal. You have the right to withdraw your consent in relation to our processing of your personal information based on your consent.
- You can unsubscribe from our marketing emails at any time using our email preferences page, or by clicking on the “unsubscribe” link.
- If located in the United Kingdom or European Union, you can opt out of EDAA members online advertising networks and behavioral advertising through the European Interactive Digital Advertising Alliance (EDAA)’s consumer opt-out page here (http://youronlinechoices.eu/).
Erasure. You have the right to ask us to request deletion of your personal information in certain circumstances.
Restriction of Processing . You have the right to request that we restrict the processing of your personal information in certain circumstances.
Object to Processing. You have the right to object to the use or disclosures of your personal information.
Data Portability. You have the right to request we transmit your personal information to you or another company in certain circumstances.
We rely on approved data transfer mechanisms (for example, the EU Standard Contractual Clauses) to ensure that personal information is adequately safeguarded.
Facebook pages in the UK/EU/EEA. When you visit Heidi Nu Facebook pages, Facebook records details collected in connection with your interactions with our content. For this processing, Heidi Nu and Facebook Ireland act as joint controllers under the terms of this agreement.
Questions & Concerns. If you have any comments or questions, or are concerned about the way in which we have handled any privacy matter, you can contact us using the details below:
Complaints (UK). We hope that we will be able to resolve any questions or concerns you have. However, you also have the right to lodge a complaint about our processing of your personal information with the Information Commissioner’s Office, which is the Supervisory Authority in the UK. Contact details are as follows:
Cookies on our services
We also may share information that has been “hashed” with certain third-party partners. “Hashed” information is information that has been converted to an anonymized string of characters in an effort to prevent third parties from unscrambling the anonymized string of characters to recover the underlying information. To opt out of our sharing of “hashed” information, please click here.
To opt out of interest-based advertising across browsers and devices, please opt out through the Digital Advertising Alliance website and also through the settings within the mobile app or your mobile device. Your opt-out choice may apply only to the browser or device you are using when you opt out, so you should opt out on each of your browsers and devices if you want to disable all cross-device linking for interest-based advertising. If you opt out, you will still receive ads but they may not be as relevant to you and your interests.
Our Services also occasionally use “local shared objects” (also known as “Flash cookies”). Like browser cookies, Flash cookies may be used for coordinating content delivery, website functionality, maintaining preferences, advertising, or analytics. Unlike browser cookies, “Flash cookies” are not stored in the browser. You may be able to manage these Flash cookies by visiting the Adobe website.
Categories of cookies used on our Services (except for UK, EU, and EEA):
1. Essential: These cookies enable you to use our Services. These cookies are essential to enable you to browse our Services and use certain features. Disabling them may prevent you from using certain parts of the Services. Without these cookies, services such as shopping activity and paying activity cannot be provided. These cookies also help keep our Services safe and secure.
2. Information Storage and Access: The storage of information, or access to information that is already stored, on your device such as advertising identifiers, device identifiers, cookies, and similar technologies.
3. Personalization: The collection and processing of information about your use of this service to subsequently personalise advertising and/or content for you in other contexts, such as on other websites or apps, over time. Typically, the content of the site or app is used to make inferences about your interests, which inform future selection of advertising and/or content.
4. Ad Selection, Delivery, and Reporting: The collection of information, and combination with previously collected information, to select and deliver advertisements for you, and to measure the delivery and effectiveness of such advertisements. This includes using previously collected information about your interests to select ads, processing data about what advertisements were shown, how often they were shown, when and where they were shown, and whether you took any action related to the advertisement, including for example clicking an ad or making a purchase. This does not include Personalisation, which is the collection and processing of information about your use of this service to subsequently personalise advertising and/or content for you in other contexts, such as websites or apps, over time.
5. Content Selection, Delivery, and Reporting: The collection of information, and combination with previously collected information, to select and deliver content for you, and to measure the delivery and effectiveness of such content. This includes using previously collected information about your interests to select content, processing data about what content was shown, how often or how long it was shown, when and where it was shown, and whether the you took any action related to the content, including for example clicking on content. This does not include personalisation, which is the collection and processing of information about your use of this service to subsequently personalise content and/or advertising for you in other contexts, such as websites or apps, over time.
6. Measurement: The collection of information about your use of the content, and combination with previously collected information, used to measure, understand, and report on your usage of the service. This does not include personalisation, the collection of information about your use of this service to subsequently personalise content and/or advertising for you in other contexts, i.e. on other services, such as websites or apps, over time.
Categories of cookies used on our Services (in UK, EU, and EEA):
1. Store and/or access information on a device: Cookies, device identifiers, or other information can be stored or accessed on your device for the purposes presented to you.
2. Select basic ads:Ads can be shown to you based on the content you’re viewing, the app you’re using, your approximate location, or your device type.
3. Create a personalised ads profile: A profile can be built about you and your interests to show you personalised ads that are relevant to you.
4. Select personalised ads: Personalised ads can be shown to you based on a profile about ads that are relevant to you.
5. Create a personalised content profile: A profile can be built about you and your interests to show you personalised content that is relevant to you.
6. Select personalised content: Personalised content can be shown to you based on a profile about you.
7. Measure ad performance: The performance and effectiveness of ads that you see or interact with can be measured.
8. Measure content performance: The performance and effectiveness of content that you see or interact with can be measured. be measured.
9. Apply market research to generate audience insights: Market research can be used to learn more about the audiences who visit sites/apps and view ads.
10. Develop and improve products: Your data can be used to improve existing systems and software, and to develop new products.
11. Ensure security, prevent fraud, and debug: Your data can be used to monitor for and prevent fraudulent activity, and ensure systems and processes work properly and securely.
12. Technically deliver ads or content: Your device can receive and send information that allows you to see and interact with ads and content
13. Match and combine offline data sources: Data from offline data sources can be combined with your online activity in support of one or more purposes.
14. Link different devices: Different devices can be determined as belonging to you or your household in support of one or more of purposes.
15. Receive and use automatically-sent device characteristics for identification: Your device might be distinguished from other devices based on information it automatically sends, such as IP address or browser type.