Privacy Policy

1. Responsible

DKliniek is responsible for the processing of personal data as shown in this privacy policy.

2. What Data Do We Collect?

DKliniek processes personal data because you use our services and/or because you provide this data to us yourself. Below you will find an overview:

3. Why Do We Collect This Data?

DKliniek processes your personal data for the following purposes:

• Medical care: Conducting consultations, administering vaccinations and providing medical advice.
• Legal obligation: Maintaining a medical file in accordance with the Medical Treatment Agreement Act (WGBO).
• Communication: Contacting you about appointments, sending reminders and answering questions.
• Invoicing: Processing payments and preparing invoices for health insurers.
• Quality improvement: Analyzing anonymized data to improve our services.
• Legal obligations: Complying with legal requirements, such as notification obligations for infectious diseases.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

• Performance of the treatment agreement: Necessary for providing medical care.
• Legal obligation: We are legally obliged to maintain medical files (WGBO, Wet BIG).
• Consent: For certain processing we ask for your explicit consent.
• Legitimate interest: For business operations and improving our services.

5. Retention Periods

DKliniek does not store your personal data longer than strictly necessary:

• Medical files: At least 20 years after the last treatment, in accordance with the WGBO.
• Online requests that do not lead to an assessment or treatment: maximum 6 months, then deleted automatically.
• Documents you upload with a fit to fly request: maximum 12 months after the assessment, then deleted automatically.
• Financial data: 7 years, in accordance with tax legislation.
• General correspondence: Maximum 2 years after last contact.
• Website data: Maximum 26 months (cookies and analytics).

Expired data is cleaned up automatically, every day.

6. Sharing with Third Parties

DKliniek only shares your personal data with third parties if this is necessary for the performance of our services or to comply with legal obligations:

• Health insurers: For reimbursement of covered treatments (with your consent).
• General practitioner: Transfer of vaccination data to your GP (with your consent).
• RIVM/GGD: Notification obligation for certain infectious diseases (legal obligation).
• Processors: Parties that process data on our behalf (such as IT suppliers), with whom we have concluded processing agreements.

We never sell your data to third parties for commercial purposes.

7. Security

DKliniek works in line with the principles of NEN 7510 and ISO 27001 and takes appropriate measures to prevent misuse, loss, unauthorized access and unauthorized modification:

• Secure connections (SSL/TLS) for all online communication
• Encrypted storage of medical data
• Access control and authentication for employees, with automatic sign-out after inactivity
• An access log recording who viewed or changed which file
• Uploads are stored privately and can only be opened through temporary, personal links
• Regular data backups
• Physical security of office spaces and equipment
• Staff training in privacy awareness

8. Your Rights

Under the General Data Protection Regulation (GDPR) you have the following rights:

• Right of access: You can request which data we process about you.
• Right to rectification: You can have incorrect data corrected.
• Right to erasure: In certain cases you can request to have your data deleted (note: medical files have a legal retention period).
• Right to restriction: You can request to temporarily restrict processing.
• Right to data portability: You can receive your data in a transferable format.
• Right to object: You can object to the processing of your data.
• Right to withdraw consent: If the processing is based on consent, you can withdraw it.

To exercise your rights, please contact info@DKliniek.nl. We will respond to your request within 4 weeks. For identification purposes, we may ask for a copy of your ID (with photo and BSN obscured).

9. Cookies and Website

Our website uses cookies to improve the user experience:

• Functional cookies: Necessary for the functioning of the website.
• Analytical cookies: For collecting anonymized usage statistics.

You can disable cookies via your browser settings. This may limit the functionality of the website.

10. Minors

For the treatment of minors under 16 years of age, consent from a parent or legal representative is required. Young people aged 12 to 16 are involved in decisions about their treatment in accordance with the WGBO.

11. Changes to this Privacy Policy

DKliniek reserves the right to change this privacy policy. Changes will be published on our website. We recommend that you regularly consult this policy. Substantial changes will be actively communicated.

12. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first via info@DKliniek.nl. If we cannot resolve the issue together, you have the right to file a complaint with the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).

13. Contact

For questions about this privacy policy or the processing of your personal data, please contact: