Your personal data and your privacy in this practice
General
Under the General Data Protection Regulation (GDPR), an organization that works with personal data has certain obligations, and the person whose personal data is processed has certain rights. In addition to this, specific rules on privacy apply in the healthcare sector. These rules are laid down, among others, in the Medical Treatment Contracts Act (WGBO). This privacy regulation is intended to inform you about your rights and our obligations, which apply under the GDPR and the WGBO.
Why does my practice process personal data?
In my practice, various personal data concerning you can be processed.
This is necessary in order to be able to provide you a proper treatment/care and necessary for the financial handling of the treatment/care. In addition, processing may be necessary, for example, to combat serious health risks or to comply with a legal obligation (for example, the mandatory reporting of an infectious disease under the Public Health Act).
What are the duties of the practice?
According to the GDPR, my practice is the controller in the context of the processing of personal data that takes place in my practice. The practice fulfills the resulting duties as follows:
What information do we collect from you?
- Name and address details
- BSN number, if applicable
- Date of birth
- Gender
- Telephone number
- Email address
- Medical data
- Name of your general practitioner (with your permission)
For what purpose are your data collected?
- Your data are collected for specific purposes:
- for providing healthcare;
- for efficient management and policy;
- for supporting scientific research, education and information
- In principle, no processing of personal data takes place for other purposes.
- You will be informed about the fact that your personal data are being processed. This can be done by your healthcare provider, but also via a brochure or via the website.
- All employees within my practice have committed to treat your personal data confidentially.
- Your personal data are well protected against unauthorized access.
- Your personal data are not kept longer than is necessary for the proper provision of health care.
How long are your data kept?
For medical data, the retention period is in principle 20 years (from the last treatment), unless longer storage is necessary, for example for your health or your childrens’ health. This is at the discretion of the practitioner.
For children, a retention period of 20 years applies as of reaching the age of adultness.
What are your rights and how can you exercise them?
You have the following rights:
- The right to know whether and which of your personal data are processed.
- The right to inspect and copy this information (insofar as this does not harm the privacy of another person). A copy can be used to transfer your data to another practice (data portability)
- The right to correction, addition or deletion of data, if necessary.
- The right to request (partial) destruction of your medical data. Such request can only be met if the retention of the data is not of significant importance to another person, and the data must not be retained on the basis of a statutory regulation.
- The right to add your own statement (of a medical nature) to your file.
- The right to, in certain cases, object to the processing of your data.
If you want to make use of your rights, you can make this known by e-mail to my practice. Your interests may also be represented by a representative (such as an authorized representative in writing, or your guardian.
You state the details of the person to whom the medical file relates. The Medical Agreement Act (WBGO) regards the patient as an adult from the age of 16. Young people from the age of 16 who want to view / copy their medical file must submit the application themselves. If the patient is no longer alive, the provision of the medical data is permitted if it can be assumed that the deceased would have had no objection to this, or if there are compelling interests to break the care provider’s oath to secrecy. This decision rests with the healthcare provider.
You can collect the file personally, or have it collected by an authorized representative, whereas you will have to sign for receipt. Exercising your rights is free of charge, unless your request is unfounded or excessive, especially because of its repetitive nature.
Are data provided to third parties and if so why?
I have an obligation to treat your personal data confidentially. This means, for example, that I need your explicit written permission to provide your personal data to third parties. However, there are some exceptions to this rule. On the basis of a statutory provision, the care provider’s oath to secrecy can be broken, but also when there is a serious threat to your health or that of a third party. Next to that, recorded data can, if necessary and with your permission, be exchanged orally, in writing or digitally with other healthcare providers (for example, the pharmacist who processes a prescription and thus receives data from the doctor).
Exchange of data
My practice will exchange medication data with your pharmacy and your treating medical specialists after you have given specific written permission for this. This concerns the medication that the doctor has prescribed for you, but also any possible intolerances, contraindications and allergies. Other prescribers and providers of medication can take this into account.
Transfer of your file
If you choose a new integrative medicine doctor, you can ask me to make (part of) your file available to you.
Question or complaint
Do you have a question or a complaint? For example, about who we share data with or about our handling of your medical data? Then I would like we discuss it together.