Privacy and Cookie Statement

Tandartsen Weeshuis, Nijmegen
November 2023

Your privacy is respected by us. Tandartsen Weeshuis strives to safeguard your privacy as best as possible and will handle the information you provide to us confidentially. When processing personal data, we observe the applicable laws and regulations regarding privacy. In this privacy and cookie statement, we inform you about how we handle your data.

Categories of personal data

By using the website and the services available on it, email and post, you leave certain data with us. This also happens at our practice in the context of the performance of the treatment agreement. This may include personal data. We only store and use personal data that are directly provided by you or for which it is clear upon provision that they are provided to us for processing.

Depending on the service you use, we may collect the following data:

• Name and address details
• Gender
• Email address
• Telephone number
• BSN (citizen service number)
• Data concerning your health
• The name of your health insurer
• The name of your other healthcare providers
• Time of your appointment
• Payment details
• IP address

Legal basis for data processing

We may only lawfully process your personal data if we do so on the basis of a legal ground. We process your personal data because this is necessary for the performance of the agreement between you and us, as laid down in Article 6(1)(b) of the General Data Protection Regulation (GDPR). In addition, we may process your personal data for another legitimate interest, such as informing our patients about news or changes in our services. This legal ground is laid down in Article 6(1)(f) of the GDPR.

Purposes of data processing

The personal data collected by us are used for the following purposes:

• Maintaining your medical file
• Scheduling an appointment
• Performing a treatment
• Keeping track of your indicated preferences
• Sending a newsletter
• Improving our services
• Performing other services requested by you

Disclosure of your personal data to third parties

In principle, we only provide your personal data to third parties if you have given your consent for this. With a view to providing optimal care and ensuring its quality, we reserve the right to share your email address and/or telephone number with a third-party partner. This party is obliged to ensure the confidentiality of your data.

However, if you do not wish your data to be shared with this third party, you can make this known to us. In that case, we will respect your request and ensure that this party immediately and completely deletes your data, unless this conflicts with legal obligations or is necessary for providing the requested care.

Data disclosure without your consent takes place if this is necessary to perform the agreement between you and us or if a legal obligation requires us to do so.

Retention periods

We will not retain your data longer than necessary for the purposes described in this privacy and cookie statement, unless this is required by a legal obligation. For the retention of your medical data, we apply the statutory retention period of 15 years from the Medical Treatment Agreements Act (WGBO). In addition to the WGBO, we also take into account retention periods arising from other legislation where necessary.

Security measures

To protect your data as well as possible, we have taken appropriate security measures. The NEN 7510 standard for information security serves as our guideline, and the practice has drawn up and implemented a privacy policy.

References to third-party websites (via hyperlinks)

To be of service to you, we have included references to third-party websites on our websites. We would like to draw your attention to the fact that when you visit these websites, the terms of the privacy statements of these third parties apply. We recommend that you read the privacy statements of these websites before using them further.

The use of cookies

For the functioning of our practice website, we use cookies. Cookies are information files that can be automatically stored on or read from the device (such as a PC, tablet or smartphone) of the visitor when visiting a website. This is done via the web browser on the device. Cookies come in different types. We use the following types of cookies:

• Analytic cookies: to analyse how our website is used by visitors and to make improvements based on this.

Cookies are placed on our website by the American company Google, as part of the Analytics service. We use this service to track and receive reports on how visitors use the website. We do not use this service for logged-in users. We have not allowed Google to use the Analytics information obtained for other Google services; we anonymise the IP addresses.

The information collected by Google is transferred to and stored on servers in the United States. We have concluded a processing agreement with Google. The information collected by Google is anonymised as much as possible. We have no influence on the use of data by Google and/or third parties.

Google may provide this information to third parties if legally required to do so, or insofar as third parties process the information on behalf of Google. Google adheres to the privacy principles of and is affiliated with the Privacy Shield of the US Department of Commerce and the European Commission. For more information about this data processing, you can read Google’s privacy statement.

You can adjust the settings regarding the use of cookies in your browser if you wish. You can also manually delete cookies. You can read about this in the manual of your browser.

Your rights

When you have provided personal data to us, you have various rights that you can exercise:

• Right of access
• Right to rectification
• Right to erasure of your data
• Right to transfer your data to you or another party
• Right to restriction of data processing
• Right to object to a processing of your data
• Right to withdraw your consent for data processing

You can make your request known to us by sending us an email at info@tandartsenweeshuis.nl or by contacting us by telephone at 024-3223477. We strive to respond to your request within 14 working days, but no later than within 1 month.

Filing a complaint with the Dutch Data Protection Authority

Should you be dissatisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). The contact details of the Dutch Data Protection Authority can be found here: https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap

Changes to this privacy and cookie statement

We reserve the right to modify this privacy and cookie statement. These changes will be announced via our practice website. We therefore recommend that you consult this statement regularly, so that you are aware of any changes.

Our contact details

Do you have any questions or comments after reading this privacy and cookie statement? You can contact us using the contact details below:

info@tandartsenweeshuis.nl for the attention of J.H.M. Baggen or by telephone at 024-3223477.

Chamber of Commerce number: 76864359