Privacy Statement of Xcelsior

This is the Privacy Statement of Excelsior Sport B.V. (hereinafter: Xcelsior), located at Weimarstraat 128 in The Hague. Xcelsior specializes in all matters concerning foot, ankle, and posture-related issues: Podiatry, Sports Podiatry, Ultrasound, Manual Therapy, and Postural Therapy (hereinafter: (preventive) healthcare). We also sell sports products to businesses and consumers (hereinafter: product sales). Additionally, we place cookies on your computer to ensure that our website functions properly. To provide our products and services to you, we require your personal data. In this Privacy Statement, we explain which personal data we manage, process, collect, and use, and for what purposes. We take responsibility for the personal data you have provided us. We also value your privacy, as you should be able to decide how your data is used and by whom.

In summary, we promise to handle your personal data with integrity and care. We aim to communicate as transparently as possible regarding the processing of your personal data by Xcelsior. Therefore, we recommend you read this Privacy Statement carefully. If you have any questions that are not answered in this document, or if you have suggestions or comments for us, we would be happy to hear from you. Please contact us using the contact details at the end of this document.

Finally, we recommend that you refer to this Privacy Statement regularly to stay informed of any updates to this document.

This Privacy Statement was last updated on 1st of January 2025

Privacy Legislation in the Netherlands I

n the Netherlands, there are specific laws that protect your privacy and personal data. Until May 25, 2018, the Data Protection Act applied. After that, European legislation applies: the General Data Protection Regulation (GDPR). All organizations in the Netherlands, including Xcelsior, must comply with the applicable privacy legislation when processing your personal data.

Why does Xcelsior process personal data?

Xcelsior may only process your personal data if there is a legal basis for doing so (a lawful ground). We process your personal data based on the following legal grounds:

• To perform a (purchase) agreement;
• To comply with the law;
• At your request (with your consent).

Note: For children under the age of 16, the person responsible for parental consent must provide permission for the processing of personal data by Xcelsior.

Which personal data do we collect from you?

To deliver our services to you, we may collect the following personal data that you explicitly and voluntarily provide to us:

• Name;
• Address;
• Phone number;
• Email address;
• Payment information;
• Health insurance information;
• Your Social Security Number (BSN);
• (Para-)medical data for complaint treatment;
• Camera images and pressure mat images of the foot/feet;
• Information about your buying behavior;
• Information about your computer usage on our website. Read point 4 below for more about the cookies we use.

What cookies does Xcelsior use?

We use functional and analytical cookies on our website. When you visit our website for the first time, we inform you about these cookies. A cookie is a small text file that is stored in your browser when you first visit this website on your computer, tablet, or smartphone. The cookies Xcelsior places have purely technical functionality. This means we do not identify you personally but collect information about your computer usage. We also use Google Analytics to gain insights into visitor behavior on our website. For this purpose, Google also places a cookie on your computer via our website. However, we have not authorized Google to use the information they collect for other Google services. Additionally, we have asked Google to mask your IP address so that the information they collect is as anonymous as possible.

Would you like more information on enabling, disabling, and deleting cookies? Please refer to the help function of your browser.

Why do we need your data?

Xcelsior needs your personal data to deliver our products and services to you. Your data is your property. Therefore, we process your personal data only for the purposes for which we collected your data. We use your data for the following purposes:

• To ensure that our website works as efficiently as possible;
• To analyze visitor behavior on our website;
• For product sales to our customers;
• For providing (preventive) healthcare to our clients;
• To prevent fraud (e.g., insurance fraud).

How do we use and protect your personal data?

Xcelsior handles your personal data with the utmost care and processes it in compliance with the requirements of the applicable privacy legislation. This means we:

• Secure your personal data at an adequate and appropriate level;
• Do not process more personal data than necessary for the products and services we provide to you;
• Do not store your data longer than necessary for the above purposes, not longer than 7 years, unless required by law. For example, as a healthcare provider, we must keep your medical record for 15 years after the end of treatment, as stated in the Medical Treatment Agreement Act (WGBO);
• Do not share your data with third parties unless:
  • We collaborate with a third party to offer our products or services;
  • We refer you (with your consent) to a referrer for further treatment;
  • We are legally required to provide your data to authorities, such as the justice system.
• Never sell your data to third parties for commercial purposes;
• Process your data only within the European Union.

What privacy rights do you have?

You have the right to access, correct, supplement, delete, restrict processing, object, and transfer your data. Here’s more information about these rights:

You can always access the personal data that Xcelsior processes about you and have it corrected or deleted. You can also ask us to restrict the processing of your data if permitted under applicable privacy laws. Additionally, you can object to the processing of your data by Xcelsior for direct marketing purposes. Finally, you may request that we transfer all your personal data to another organization. To use any of these options, please submit your request in writing via the contact details below. We will let you know within one month what we will do with your request. Please note that you must first identify yourself before we can process your request.

If you are dissatisfied with our response, you can file a complaint with the privacy supervisor, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Our contact details: You can always contact us, especially if you:

• Have questions, comments, or complaints about the use of your personal data by Xcelsior;
• Have questions, comments, or complaints about this Privacy Statement.

Our contact details are:

Xcelsior Sport B.V. Attn: A. Gerner Weimarstraat 128 2562 HC THE HAGUE

Phone: 070-3650900 Email: annemarie.gerner@xcelsior.nl

Changes to this Privacy Statement

Xcelsior may make changes to this privacy statement. Therefore, we recommend checking this document regularly to stay informed of any updates. After making changes, we will promptly publish the updated Privacy Statement on our website.