Download the Privacy Statement
This privacy statement was last updated on 1 June 2020 and replaces previous versions. We can update this privacy statement from time to time. We notify those concerned of any significant changes before they come into effect by posting an updated version of the statement on our website.
How Are You Diagnostics (HAY Diagnostics B.V.) is a subsidiary of the DaklaPack Group Holding. HAY Diagnostics B.V. performs specialised laboratory testing at the Medical Microbiological and Clinical Chemical level and provides advice. Our testing is based on self-sampling kits that can be ordered by consumers on the Internet. As it concerns data of data subjects, a data subject also has a number of rights that he or she can exercise.
HAY Diagnostics holds personal data of relations such as customers, participants and suppliers. These are, for example:
HAY Diagnostics B.V. takes the necessary technical and organisational measures to ensure that personal data are properly secured and thus protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, unintentional or unlawful destruction and loss. The laboratory tests are carried out without any personally identifiable data present in the laboratory. The identification numbers of our tests are not visible to employees and are stored encrypted with the correct participant, thus guaranteeing a certain anonymity about which test was performed. Results are only provided with personally identifiable data after interpretation of the test results by our BIG registered physician-microbiologist and then shared with the authenticated participant only through a secure channel without human intervention. The applicant will not receive feedback on results, unless he/she is also a participant and then only for his/her own results.
The general rule is that HAY Diagnostics B.V. keeps personal data for as long as they are needed or, if longer, in accordance with the statutory retention periods.
Due to the nature of the activities, HAY Diagnostics B.V. shares depersonalised participant data with third parties for the purpose of carrying out a diagnostic study. HAY Diagnostics B.V. will only share non-personally identifiable data to the extent that it is relevant to the determinations. These include initials, date of birth, gender, sexual orientation, place of residence, etc. HAY Diagnostics will only share data without depersonalising it if there is a reporting obligation to a government body of a positive test for an illness. The participant who tested positive will be informed to this effect.
In certain cases HAY Diagnostics B.V. may share personal data with third parties in order to perform certain (technical) services (e.g. hosting providers, transport services etc.). They are obliged to adequately secure data and to process it only in accordance with our instructions. HAY Diagnostics B.V. has a written contract with each of these processors which regulates these aspects (a processor’s agreement).
Personal data may also be shared with supervisory authorities (such as the Healthcare and Youth Inspectorate (IGJ)) and investigative bodies, but only if HAY Diagnostics B.V. is legally obliged to do so.
A data subject has the right to access his/her personal data, to have (inaccurate) data corrected and in certain cases to have his/her data (partially) deleted.
Any applicant and/or participant can always delete his or her account details directly via the application or website. At that time, all completed orders and recorded results of tests already performed are immediately disconnected from personal data.
He/she also has the right to object or request the restriction of data portability in certain cases. In order to ensure that the person requesting data is the person concerned, we ask them to identify themselves by means of a valid ID.
If you have any questions and/or requests: please contact HAY Diagnostics B.V. (the data controller) as follows:
Complaints or questions about data processing can also be sent to email address or post office box indicated above.
Any complaint can also be filed with the Dutch Personal Data Authority. This is the independent supervisory authority for compliance with the statutory rules on the protection of personal data. You can contact the AP at:
2509AJ Den Haag
Tel.: 088 1805 250