Privacy statement Podotherapiepraktijk van der Pas

With this privacy statement we want to inform you as a patient about the way we as a care provider deal with your personal and medical data. The reason for recording, processing and exchanging your data with other parties (care providers and your health insurer) is explained in more detail below. Furthermore, we inform you about your other legal privacy rights.

What data do we process?

In the context of our services, we process the following personal data from you:

• Name, address, place of residence, citizen service number (BSN), telephone number and if you have it your email address.
• The data about your health and the interventions performed by us / delivery of podiatric intervention (s). We record this data in a medical file. We include other medical information (for example information from your GP) in it as far as this is necessary for good care for you.
• When engaging other processors (for example for messaging for care providers), we ensure that your privacy rights are safeguarded in a processing agreement.

What do we use your data for?

• As care providers, we are obliged to register the BSN. We must also use that number when exchanging data about a patient. This is stated in the Law on the use of the citizen service number in care.
• Exchange of your data with other care providers (such as with your GP) takes place via a secure connection after you have given permission.
• We use your data in anonymized form to support scientific research, education and information.
• In connection with the payment of your invoice by the health insurer, we provide, after you have given permission, your data from the treatment performed or delivery of podiatric intervention (s) to your health insurer via a secure connection.
• For adequate care, it is required that we have your medical data. In connection with the treatment agreement (Medical Treatment Agreement Act) that we enter into with you, we record the data about your health and the care provided / delivery of podiatric intervention (s) by us.
• For an audit. Once every five years, an external quality control is carried out in our podiatry practice by external independent auditors. The auditors have signed a confidentiality agreement. The auditors only have access to your file if you have given permission for this. Without this permission, the auditors may only view an anonymized file. This is a file from which all your data regarding your identity has been removed.
• Intervision, supervision or consultation. In the context of intervision, supervision or consultation, our podiatry practice only uses data from which your identity cannot be deduced.

What is the retention period of your medical data?

We are legally obliged to keep your medical data for 15 years.

Other Privacy Rights

• You have the right to access, modify data and delete data from your (patient) file.
• You have the right to limit and revoke consent given to us.
• The right to data portability: you have the right to easily take and pass on data to another organization.
• The right to file complaints with the Dutch Data Protection Authority.

How do we secure your personal data?

• Podotherapiepraktijk van der Pas takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized changes. If you have the impression that your data is not properly secured or there are indications of abuse, please contact our appointment desk.
• We have taken the following measures to secure your personal data:
  • Security software, such as a virus scanner and firewall.
  • TLS (formerly SSL) We send your data via a secure internet connection. You can see this in the address bar 'https' and the padlock in the address bar.

All employees and affiliates of Podotherapie van der Pas work according to established protocols within the practice to safeguard your privacy. In addition, each employee has signed a privacy statement.