The AVG is the new law for the protection of privacy and personal data. Under this law, an organization that works with personal data has certain obligations and the person whose data it belongs to has certain rights. In addition to this general law, specific rules apply to privacy in healthcare. These rules are stated, among other things, in the Medical Treatment Agreement Act (WGBO). These privacy regulations are intended to inform you about your rights and our obligations under the GDPR and the WGBO.
Various personal data about you may be processed in our practice. This is necessary to be able to treat you properly (medically) and necessary for the financial settlement of the treatment.
The duties of the practice
According to the AVG, VondelFysio is responsible for the processing of personal data that takes place in practice. The practice complies with the obligations arising from this as follows:
- Your data is collected for specific purposes:
- for physiotherapeutic care;
- for effective management and policy;
- to support scientific research, education and information.
- In principle, no processing takes place for other purposes.
- You will be informed that your personal data is being processed. This can be done by your healthcare provider, but also via a brochure or via our website.
- All employees within are obliged to treat your personal data confidentially.
- Your personal data is well protected against unauthorized access.
- Your personal data will not be kept longer than is necessary for proper care.
For medical data, this retention period is in principle 15 years (from the last treatment), unless longer storage is necessary, for example for the health of yourself or your children. This is at the discretion of the practitioner.
Your rights as a data subject:
You have the following rights:
- The right to know whether and which of your personal data is processed.
- The right to inspect and receive a copy of that data (insofar as this does not harm the privacy of another person).
- The right to correction, addition or deletion of data if necessary.
- The right to request (partial) destruction of your medical data. This can only be met if the retention of the data for someone else is not of significant importance and the data is not required to be retained on the basis of a statutory regulation.
- The right to add a personal statement (of a medical nature) to your file.
- The right to object to the processing of your data in certain cases.
If you want to make use of your rights, you can make this known verbally or by means of an application form. Your interests may also be represented by a representative (such as a written agent, or your trustee or mentor).
Provision of your personal data to third parties
The employees of VondelFysio have the obligation to treat your personal data confidentially. This means, for example, that the healthcare provider needs your explicit permission to provide your personal data. However, there are some exceptions to this rule. The duty of confidentiality of the care provider can be breached on the basis of a statutory regulation, but also when there is a fear of a serious danger to your health or that of a third party. In addition, recorded data can, if necessary, be exchanged verbally, in writing or digitally with other healthcare providers (for example, the general practitioner).
Transfer of your file
When choosing a new physiotherapist, it is important that your new physiotherapist is aware of your (medical) history. Your (medical) history is in your patient file. It is customary for your old physiotherapist to transfer the file to your new physiotherapist. The old physiotherapist will do this as soon as possible, in any case within one month, after you have asked your old physiotherapist to transfer the file to your new physiotherapist.
Your file will then be handed over by your physiotherapist in person or by registered post. You cannot receive the original file. You always have the right to inspect your file and to receive a copy of your file. The file can (if possible) also be transferred to the new physiotherapist by e-mail. Both physiotherapists must then ensure that their computers and internet connections are sufficiently secured.