Privacy Cookie Policy
Privacy Cookie Policy
Last updated: 01.01.2025
Company: Carna Medical B.V.
Address: Rietbaan 2, 2908 LP Capelle aan den IJssel, The Netherlands
Chamber of Commerce (KvK): 92981445
VAT (BTW): NL866238013B01
Email: info@carnamed.com
Website: www.carnamed.com
1. Introduction
This Privacy & Cookie Policy explains how Carna Medical B.V. (“we”, “us”, “our”) collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Data Protection Act (AVG).
By visiting our website, contacting us, or purchasing our products or services, you agree to this Policy.
2. Data Controller
The data controller responsible for processing your personal information is:
Carna Medical B.V.
Rietbaan 2, 2908 LP Capelle aan den IJssel, The Netherlands
Email: info@carnamed.com
We may also act as a joint controller or processor when working with distributors or service partners.
3. Personal Data We Collect
We collect and process the following categories of personal data, depending on how you interact with us:
A. When you visit our website:
IP address, browser type, device information, operating system
Cookies and analytics data (see Section 10)
B. When you contact us or create an account:
Name, company name (if applicable)
Email address, phone number
Shipping and billing addresses
Communication records
C. When you purchase from us:
Order details, payment status, and invoice information
VAT / business registration details (for B2B clients)
D. When you subscribe to newsletters or marketing materials:
Name and email address
Marketing preferences and consent status
4. Purpose and Legal Basis of Processing
We process your personal data only for legitimate business purposes, such as:
To process orders and deliver goods or services – based on the performance of a contract (Article 6(1)(b) GDPR).
To provide customer service and support – based on legitimate interest (Article 6(1)(f) GDPR).
To send invoices, handle payments, and maintain accounting records – based on legal obligations (Article 6(1)(c) GDPR).
To send product updates, promotions, or newsletters – based on your explicit consent (Article 6(1)(a) GDPR).
To improve our website and services – based on legitimate business interests (Article 6(1)(f) GDPR).
You may withdraw your consent at any time by contacting us at info@carnamed.com
5. Data Retention
We keep your personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
Customer and accounting data: retained for at least 7 years (as required by Dutch tax law).
Marketing data: retained until you withdraw consent or unsubscribe.
Technical logs: generally deleted within 12 months.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data.
However, we may share limited information with trusted third parties when necessary to perform our services, such as:
Payment service providers (for transaction processing)
Shipping and logistics partners (for product delivery)
IT and hosting providers (for secure website operation)
Professional advisers or legal authorities (where required by law)
All third parties are bound by confidentiality and data protection agreements.
7. International Data Transfers
We primarily process and store data within the European Economic Area (EEA).
If any data is transferred outside the EEA (e.g., to trusted service providers), we ensure appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
8. Data Security
We take technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration, including:
SSL encryption on our website
Secure servers and access controls
Regular software updates and security monitoring
Restricted employee access to personal data
9. Your Rights Under GDPR
As a data subject, you have the following rights:
Right of access: Request a copy of your personal data.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request deletion of your data (where legally possible).
Right to restriction: Limit the processing of your data.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, contact us at info@carnamed.com
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority):
Website: www.autoriteitpersoonsgegevens.nl
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality and analyze website performance.
Types of cookies we use:
Essential cookies: Required for the website to function properly.
Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics).
Marketing cookies: Used to deliver relevant content and ads (only with consent).
Managing cookies:
You can control or delete cookies through your browser settings.
If you disable cookies, certain features of our website may not function properly.
11. Marketing Communications
We send marketing emails or newsletters only with your explicit consent.
You may unsubscribe at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.
Business customers may receive product updates or important notices based on legitimate interest, as permitted under Dutch and EU law.
12. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time.
All updates will be posted on this page with a revised “Last Updated” date.
We encourage you to review this Policy periodically to stay informed about how we protect your data.
13. Contact
If you have any questions, concerns, or requests regarding this Policy or your personal data, please contact us:
Carna Medical B.V.
Rietbaan 2, 2908 LP Capelle aan den IJssel, The Netherlands
Email: info@carnamed.com
Website: www.carnamed.com
© Carna Medical B.V. — All rights reserved.
