Privacy Policy

Last revised: November 2, 2026, Haarlem, Netherlands.

Vander Geest Optiek (“we,”“us,” “our”) is the owner of the website www.vandergeestoptiek.com (the“Website”) and operates the optical store located at Generaal Cronjéstraat 86, 2021 JL, Haarlem (the“Store”). In this Privacy Policy, we explain what personal data we process, why we do so, how long we retain data, and what rights you have. This policy applies to the Store, the Website, and all services we offer (the“Services”). We are committed to handling the data of our customers and visitors (“you,”“your”) with care and confidentiality.

We process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the“GDPR”), the GDPR Implementation Act, and other applicable privacy laws. We handle your data with care and confidentiality and do not process more data than is necessary.

1. Who is responsible for your data?

The data controller is Van der Geest Optiek, a sole proprietorship owned by Izaac Peeters, located at Generaal Cronjéstraat 86, 2021 JL Haarlem, the Netherlands, registered with the Chamber of Commerce under number 42112182, with VAT identification number NL005503219B78. You can reach us by phone at 023 5254 131 or by email at info@vandergeestoptiek.com.

Voortzetting per 1 september 2026. Van der Geest Optiek werd tot en met 31 augustus 2026 gedreven als vennootschap onder firma. Met ingang van 1 september 2026 wordt de onderneming voortgezet als eenmanszaak en is de hierboven genoemde eenmanszaak de verwerkingsverantwoordelijke. Je klant-, afspraak- en oogmeetkundige gegevens worden op dezelfde grondslagen en onder dezelfde voorwaarden voortgezet; je rechten uit artikel 9 blijven onverkort gelden.

Do you have any questions about this Privacy Policy or about the processing of your personal data? If so, please contact us using the contact information above.

2. What personal data do we process?

Depending on the Service and your interactions with us, we may process:

• Contact and identification information (first and last name, address, phone number, email address);
• Appointment and customer information (appointment requests, including those made through our online appointment system; purchase history; selected frames/lenses; date of purchase; service or repair requests);
• Information about your eyes and vision (measurement and prescription data from eye exams, lens fittings, and follow-up visits; see Article 4);
• Billing and payment information;
• Data provided through the Website (appointment form or email, plus technical data such as your IP address; see Article 5);
• Information for eyeglass frames or glasses purchased on a trial basis (the information on the trial form: name, address, phone number, email address, the product purchased, the deposit, and—only if you pay the deposit by debit card—your account number (IBAN) and the account holder’s name for refunding the deposit).

If you bring in a pair of frames or glasses for a trial fitting, we ask that you show us a form of identification so that we can verify the information on the trial fitting form. We do not make a copy of your identification and do not record your document number or social security number. We scan the completed trial fitting form and store it in your customer file in our optician software (Article 6.2); you will receive a copy.

We collect this information directly from you. If you provide us with information about someone else (for example, when making an appointment for a family member or child), we assume that you are authorized to do so.

3. Why and on what basis do we process your data?

When a legitimate interest is involved, your privacy is always taken into account; you may object (Article 9). If you have given consent, you may withdraw it at any time.

4. Information about your eyes (health information)

To perform a proper eye exam, determine the appropriate lens prescription, and provide eyeglasses or contact lenses, we process data about your eyes and vision. This constitutes special categories of personal data (health data, Art. 9 of the GDPR) that are subject to additional protection.

We process this data exclusively for the purpose of providing eye care and delivering the agreed-upon products and services (Art. 9(2)(h) of the GDPR, under the responsibility of a licensed optician) and/or with your explicit consent (Art. 9(2)(a) of the GDPR). This information is treated confidentially and is accessed only by employees who need to know it. To have your lenses made, we may share the necessary prescription and parameter data with our lens supplier (Article 6). We never disclose your health data to third parties for commercial purposes.

If you bring a paper eyeglass prescription—for example, from an ophthalmologist, optometrist, or orthoptist—we’ll scan it and save the scan in your customer file in our optical software. We’ll return the paper prescription to you right away.

5. Cookies, Website Statistics, and Ad Tracking

Our website uses cookies and similar technologies. We always set functional and necessary cookies; for analytical and marketing cookies, we ask for your prior consent via the cookie notice where required by law. Among other things, we use Google Analytics (via Site Kit) for aggregated insights and Google Ads conversion tracking (via Google Tag Manager) to measure whether an ad leads to, for example, an online appointment. Our contact page features an embedded Google Maps map; when the map loads, Google may receive technical data such as your IP address. You can find a complete overview in our separate Cookie Policy.

6. Sharing with others (processors and recipients)

6.1 We never sell your data or share it with third parties for their own purposes.

6.2 Processors (parties that process data exclusively on our behalf, based on a data processing agreement):

• our optician/practice software: Ocuco Netherlands BV, Solvayweg 8, 6049 CP Herten, Chamber of Commerce No. 12056955. We use this software to record your contact information and your eye examination data. The data is stored in data centers in the Netherlands (‘s-Hertogenbosch and Eindhoven) and therefore within the European Union;
• our online appointment system: EyeFactory. If you make an appointment through the website, the information you enter (such as your name, phone number, email address, and the type of appointment) is forwarded to us through this system;
• our IT, hosting, and email service providers, including our Website’s security service (Wordfence), which processes technical data such as IP addresses for security purposes;
• our webmaster.

6.3 Our software provider engages sub-processors in the performance of its services, exclusively within the European Economic Area. These parties are involved in transmitting glass data to glass suppliers, processing orders and invoices, and integrating with our accounting system.

6.4 Recipients (parties that receive the data for their own purpose, as agreed with you):

• lens suppliers (such as Nikon, Zeiss, Essilor, Hoya, and BBGR) to whom we digitally transmit the necessary prescription and parameter data so that your lenses can be manufactured;
• your health insurance provider and the claim codes used for that purpose, only when a reimbursement for your glasses or contact lenses is requested or claimed;
• our accountant and, if required by law, competent authorities such as the Tax Authority.

6.5 Transfer outside the EEA: We prefer to process data within the EEA. For website statistics, ad tracking, maps, and website security (Google, Wordfence), data may be processed in the U.S. based on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses (SCCs). We also ensure appropriate safeguards in the event of any transfer to other suppliers outside the EEA.

7. How long do we retain your data?

• Customer and appointment information: for the duration of the customer relationship and, in principle, up to 4 years after your last purchase or contact (longer upon request).
• View form (scan, including an IBAN if applicable): just like customer and appointment information, this data is retained for the duration of the customer relationship and, in principle, for up to 4 years after your last purchase or contact. This also applies if you do not purchase the product. We use your IBAN solely to refund your deposit; the refund itself is recorded as a payment in our records (see invoice and administrative data).
• Prescription and healthcare data (including scanned eyeglass prescriptions): for as long as necessary to ensure proper (follow-up) care and no longer than permitted under applicable (healthcare) retention periods.
• Invoice and administrative records: 7 years (tax retention requirement).

We then delete or anonymize the data. If you ask us to delete it, we will do so, unless we are legally required or authorized to retain (part of) it.

8. How do we protect your data?

We take appropriate technical and organizational measures to prevent loss, misuse, and unauthorized access: a secure connection (SSL/TLS encryption), access restrictions limited to those who need the data, personal login credentials and two-factor authentication for our systems, and agreements with data processors to ensure an appropriate level of security. Your customer and optometric data are stored in ISO 27001-certified data centers within the European Union. We regularly evaluate our security measures.

9. Your Rights

You have the right to access, rectify, erase, restrict, transfer, object (always to direct marketing), and withdraw your consent. You can submit a request via info@vandergeestoptiek.com; we will respond within one month at the latest and may ask you to verify your identity. Do you have a complaint? Please contact us first. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

10. Automated decision-making and machine translation

We do not make decisions with legal consequences based solely on automated processing. Our Website offers an automatic (AI) translation feature for your convenience; the Dutch-language Website always takes precedence, and the feature does not make any decisions about you.

11. Third-Party Websites and Online Showroom

Our website may contain links to third-party websites, such as social media and review platforms. We are not responsible for their content or data processing; please review their privacy policies for more information.

If you use our online catalog or online store—when it is available on a separate website—the privacy policy on that website applies.

12. Changes and upcoming legislation

We may update this policy; the current version is always available on our website. We monitor developments in EU and Dutch privacy legislation, including: the announced simplification of cookie rules (accepting or rejecting cookies in a single action and respecting that choice for a fixed period), the stricter rules for (telephone) direct marketing, and the transparency obligations under the European AI Regulation (AI Act). As soon as these rules come into effect, we will incorporate them into this policy.

13. Contact

If you have any questions, requests, or complaints regarding this Privacy Policy, please contact Van der Geest Optiek, Generaal Cronjéstraat 86, 2021 JL Haarlem, phone number 023 5254 131, email info@vandergeestoptiek.com. Chamber of Commerce 42112182, VAT identification number NL005503219B78.