Patient Privacy Statement
With this privacy statement we inform you about the way in which we handle your personal data. We process personal data in accordance with the General Data Protection Regulation (GDPR), its implementation law in the Netherlands and all applicable rules for privacy in healthcare, including the Medical Treatment Contracts Act (WGBO).
The GP practice
Various personal data of yours can be processed in our general practice. This is necessary to be able to treat you properly medically and also necessary for the financial settlement of the treatment. In addition, processing may be necessary for, for example, combating a serious threat to your health or to comply with a legal obligation (for example, the mandatory reporting of an infectious disease under the Public Health Act).
Data that does not directly identify our patients, such as about the care we provide and the use of our services, is also processed by us and shared with Flexdokters Coöperatie U.A.. Flexdokters is a non-profit organization that supports our practice and other general practices with technology and methods. supports and focuses on innovation and improvement of general practitioner care. This data is processed exclusively at an aggregated or pseudonymised level and exclusively for the purpose of developing and optimizing working methods, processes and care solutions.
The duties of the general practice
Our general practice is, according to the AVG, the controller for the processing of personal data that takes place in the practice. The practice complies with the obligations arising from this as follows:
Your data is processed for specific purposes:
- for care provision;
- for communication with you;
- for efficient management of our general practice, including the financial settlement of your treatment;
- for quality purposes, unless you have objected to this;
- for support of scientific research, education and information, unless you have objected to this.
- In principle, no processing takes place for other purposes.
- Processing based on legitimate interest is limited as much as possible to data at an aggregated or pseudonymised level.
- You will be informed that your personal data is being processed. This can be done by your care provider, but also via a folder and in any case via our website.
- All employees within our general practice are committed to handling your personal data confidentially.
- Your personal data is well protected against unauthorized access.
- Your personal data will not be kept longer than necessary for proper care. For medical data, the legal retention period is in principle 20 years (from the last treatment), unless longer storage is necessary, for example for the health of yourself or your children. This is at the discretion of the practitioner.
We mainly process your data because it is necessary for the performance of the medical treatment agreement with you and because it is necessary to comply with our legal obligations. We carry out certain processing operations because this is necessary for the protection of our legitimate interests or those of third parties, such as Flexdokters Coöperatie U.A. and the other GP practices for which she works, in which case we have balanced those interests with your privacy rights. Legitimate interests may be to improve the practices, processes and tools of care delivery. We may also process certain data based on your prior consent.
Your rights as a data subject
You have the following rights:
- The right to know whether and which of your personal data are being processed.
- The right to inspect that data (insofar as this does not harm the privacy of another person).
- The right to rectification or erasure of data if necessary.
- The right to request (partial) destruction of your medical data. This can only be met if the retention of the data is not of significant importance to someone else and the data must not be retained on the basis of a statutory regulation.
- The right to add a self-declaration (of a medical nature) to your file.
- The right to restriction of processing and to object to the processing of your data in certain cases.
- If a processing is based on your consent, to withdraw the consent at any time.
- The right to submit a complaint to the Dutch Data Protection Authority.
If you want to make use of your rights, you can make this known verbally or in writing to our general practice. Your interests may also be represented by a representative (such as a written proxy, or your trustee or mentor).
Provision of your personal data to third parties
The employees of our general practice are obliged to treat your personal data confidentially. This means, for example, that the healthcare provider needs your explicit permission to provide your personal data to third parties. There are, however, some exceptions to this rule. Pursuant to a statutory provision, the healthcare provider’s duty of confidentiality can be breached, but also when there is a fear of a serious danger to your health or that of a third party. In addition, if necessary, recorded data can be exchanged verbally, in writing or digitally with other healthcare providers (for example, the pharmacist who processes a prescription and thus receives information from the treating physician).
When processing your personal data, we also use service providers, such as for the use of a general practitioner information system. We have concluded processing agreements with these service providers in accordance with the AVG, on the basis of which, among other things, appropriate security measures are taken.
After you have given explicit permission for this, our general practice exchanges relevant medical data securely and reliably with the general practitioner (HAP) via the Landelijk Schakelpunt or another appropriate service. If you have been to the HAP in the evening or at the weekend, the HAP will in turn share an observation message with the GP practice. This way the GP knows exactly which complaints you have been to the HAP with and what action has been taken as a result.
Medication data can also be shared with your pharmacy and your treating medical specialist(s). This concerns the medication that your GP has prescribed for you, but also any intolerances, contraindications and allergies (ICA data). Other prescribers and providers of medication can take this into account. As a general practice, we contribute to medication safety.
Transfer of your file
When choosing a new healthcare provider, it is important that your new healthcare provider is aware of your medical history. Your medical history is in your patient file. It is customary for your old care provider to transfer the file to your new care provider. The old care provider will do this as soon as possible, in any case within one month, after you have asked your old care provider to transfer the file to your new care provider. Your medical file will then be transferred by your healthcare provider personally or by registered mail. You cannot get the original file. You do, however, always have the right to inspect your file and to receive a copy of your file. The file can also be transferred to the new healthcare provider via secure e-mail (if possible).
Question or complaint?
Do you have a question or a complaint? For example, about who we share personal data with or how we handle your medical data? Then your healthcare provider will be happy to discuss this with you.
Practice contact details
Huisarts Kappeyne van de Coppello
Frederik Hendrikstraat 47, 1052 HK Amsterdam