Privacy Notice

Overview

Founda Health Holding B.V., doing business as Founda ("Founda," "we," "us," or "our") is the controller for any data processed by visiting this website. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us at privacy@founda.com.

This privacy notice describes how Founda might use your information if you:

• Visit our website at http://www.foundahealth.com
• Engage with us by ways provided on this website ― including any sales, marketing, or events

In this privacy notice, if we refer to:

• "Website," we are referring to Founda’s top level domains: founda.com, foundahealth.com.

• "Services," we are referring to our Website, and other related services, including any sales, marketing, or events, but excluding the processing of data concerning health (ePHI).

The purpose of this privacy notice is to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it when you visit our website.

1. Data Shared by the User

We collect personal information that you voluntarily provide when using our Website, particularly when you contact us or download our whitepapers. The specific information collected depends on your choices and the features you use. This may include:

• First Name
• Last Name
• Phone Number
• Email address
• Job titles
• Company
• Any additional information you choose to share with us
  
  

2. Data We Collect Through Cookies

When you visit, use, or navigate our Website, we automatically collect certain device and usage information through cookies and similar technologies. This information on its own does not reveal your specific identity but is primarily used for the security and operation of our Website, as well as for internal analytics and reporting. The automatically collected information may include:

• Log and Usage Data: This includes service-related, diagnostic, usage, and performance information such as your IP address, device details, browser type and settings, date/time stamps of your usage, pages and files viewed, searches, features used, and error reports.
  
  
• Device Data: This is information about your computer, phone, tablet, or other device used to access the Website. Categories include your IP address (or proxy server), device and application identification numbers, general location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
  
  
• Location Data: This pertains to your device's precise or imprecise location. Categories include geolocation data derived from your IP address, and opt-in GPS data (which you can permit via location prompts or opt out of through browser/device settings, though opting out may limit certain services).

3. Data We Collect Through External Sources

We may also collect limited professional information about you from external sources like public databases, marketing partners, affiliate programs, data providers, and other third parties. This data, such as email addresses, job titles, phone numbers, intent data, professional social media profiles, and custom profiles, helps us enhance our marketing, offers, services, and update our records, especially for targeted advertising and event promotion.

How we use these personal data

We process your information for purposes based on legitimate business interests, the fulfilment of our contracts with you, compliance with our legal obligations, and/or your consent. We will use your information only for the purposes for which it was collected, unless we can reasonably use it for a compatible purpose and provided that we have a legal basis for further processing. 
We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. For example, when expressing an interest in obtaining information about us or our Website, subscribing to marketing or otherwise contacting us, we will collect personal information from you. 
We may use your information to develop and display personalized content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness, if you have consented to this in our Cookie options.

Sharing your personal data

We only share your information with your consent, at your request for the performance of a contract, to comply with legal obligations, or when we can rely on a legitimate business interest.

We share and disclose your information with third-party vendors and product providers essential to delivering the services listed below;

• Advertising, Direct Marketing, and Lead Generation
• Web and Mobile Analytics
• Website Hosting
• Billing and Invoicing
• Contract Management
• Implementation , Delivery and Professional Services

We may need to further process your data or share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Vendors, Consultants and Other Third-Party Service Providers. Examples include: data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the Website, which will enable them to collect data on our behalf about how you interact with our Website over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, pages or features, and better understand online activity. 
  We (and our third-party processors) do not sell, rent or trade any of your information with third parties for their promotional purposes. We have contracts in place with our data processors, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.

We primarily process Personal Data within the EEA/EU. Any transfers of Personal Data outside the EEA/EU are limited to the purposes outlined in the "How we use these personal data" section and will be undertaken only with adequate protection measures, such as Standard Contractual Clauses, or with your explicit prior consent. For US residents, if your personal data is processed outside the US, we ensure the recipient provides a level of protection comparable to applicable US data protection laws.

How long we keep your personal data

Your personal data will be retained for the duration necessary to satisfy our legitimate business interests and for one additional year after the conclusion of the contractual relationship. After the retention period has expired, we ensure that all personal data is securely deleted, and no copies are retained in our systems.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as the sharing of data with authorities related to abuse of this website).

Protection of your personal data

We have implemented appropriate technical and organizational security measures designed to protect any personal information we process.
However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information.
Although we will do our best to protect your personal information, transmission of personal information to and from our Website is at your own risk. You should only access the Website within a secure environment.

Your privacy rights

If you are a resident of the EU and/or UK, you have certain rights under applicable data protection laws. These may include:
The right to access - You have the right to request Founda Health for copies of your personal data.

• The right to rectification - You have the right to request that Founda Health correct any information you believe is inaccurate. You have the right to request Founda Health to complete information you believe is incomplete.
• The right to erasure - You have the right to request that Founda Health erase your personal data, under certain conditions.
• The right to restrict processing - You have the right to request that Founda Health restrict the processing of your personal data, under certain conditions.
• The right to object to processing - You have the right to object to Founda Health’s processing of your personal data, under certain conditions.
• The right to data portability - You have the right to request that Founda Health transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: privacy@founda.com.

We will consider and act upon any request in accordance with applicable data protection laws. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. If we have processed your data based on your consent and you wish to revoke your consent or want to object, please contact us at privacy@founda.com. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are a resident in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here.
If you are a resident in Switzerland, the contact details for the data protection authorities are available here. If you are a resident in the USA, you can file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. If you are a resident of California, you are granted specific rights regarding access to your personal information under the California Consumer Protection Act (the “CCPA”).The CCPA permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at privacy@founda.com.

If you are under 18 years of age and reside in California, you have the right to request removal of unwanted data that you shared with us or was captured by us during your use of this website. To request removal of such data, please contact us at privacy@founda.com,  and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Website, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).

Contact details

If you have questions or comments about this notice, you may contact us by email at privacy@founda.com, or by phone at +31 (0)20 244 4828. If you wish to contact us by other means, please see our contact page for our most recent details.

Review

The Privacy Policy is reviewed periodically, and updated if processing activities significantly change.