Privacy and cookie statement
We respect your privacy. Parodontologie Haarlem aims to safeguard your privacy as fully as possible and will treat the information you provide to us in confidence. When processing personal data, we comply with the applicable privacy laws and regulations. This privacy and cookie statement explains how we handle your data.
Categories of personal data
By using the website and the services available on it, you leave certain data with us. The same happens at our practice in the course of performing the treatment agreement. This may include personal data. We store and use only the personal data that you provide to us directly, or that are clearly being provided to us for processing at the time they are given.
Depending on the service you use, we may collect the following data:
- Name and address details;
- Citizen service number (BSN)
- Gender;
- Email address;
- Telephone number
- Data concerning your health;
- The name of your health insurer;
- The names of your other healthcare providers;
- Time of your appointment;
- Payment details;
- IP address
Legal basis for data processing
We may only lawfully process your personal data if we do so on the basis of a legal ground. We process your personal data because this is necessary for the performance of the agreement between you and us, as laid down in Article 6(1)(b) of the General Data Protection Regulation (GDPR). In addition, we may process your personal data on the basis of another legitimate interest, such as informing our patients about news or changes in our services. This legal basis is laid down in Article 6(1)(f) of the GDPR.
Purposes of data processing
The personal data we collect are used for the following purposes:
- Creating your account in order to register you with the practice;
- Logging in to your account;
- Maintaining your medical record;
- Scheduling an appointment;
- Carrying out a treatment;
- Requesting and carrying out an eConsult;
- Placing an order in the web shop;
- Keeping a record of the preferences you have indicated;
- Sending a newsletter;
- Improving our services;
- Providing other services requested by you.
Disclosure of your personal data to third parties
In principle, we disclose your personal data to third parties only if you have given your consent. Data are disclosed without your consent only where this is necessary for the performance of the agreement between you and us, or where a legal obligation requires us to do so.
Telephone: digital assistant
When you call us, your call is answered by a digital assistant (an AI system) provided by our software supplier MedicalQuestionnaire.com B.V. The assistant can cancel or reschedule appointments, take a message for the front desk, direct you to the appropriate care in an emergency and register new patients. If you would prefer to speak to a member of staff, simply say so; the front desk will call you back.
What we process. Your telephone number, what you say during the call and, in order to identify you, your name and date of birth. The call is not stored as an audio recording; the text of the conversation is recorded in your patient file and kept for as long as the file is kept (twenty years after the last change, Article 7:454 of the Dutch Civil Code (BW)). Conversations that concern only an appointment are kept for a shorter period.
Who processes the conversation. Speech recognition is carried out by Microsoft in Ireland. In order to understand the conversation, the text, without your telephone number and without any data from your file, is processed by the language model of Anthropic PBC in the United States. Anthropic does not use the text to train models and does not retain it for the provision of the service; the text may be retained for no more than thirty days, solely for abuse monitoring. This transfer is governed by the European Commission’s standard contractual clauses and a transfer impact assessment carried out by us; a copy is available from us on request. We are working towards processing within the EU and will end processing in the US by 1 May 2027 at the latest.
Legal basis and rights. We process these data for the performance of the treatment agreement and the running of the practice (Article 6(1)(b) and Article 9(2)(h) GDPR). You have the right of access, rectification, erasure insofar as the statutory retention obligation allows, restriction and objection. Questions or requests: info@parohaarlem.nl or 023-542 01 88. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Retention periods
We will not keep your data for longer than is necessary for the purposes described in this privacy and cookie statement, unless a legal obligation requires otherwise. For the retention of your medical data, we apply the statutory retention period of 20 years under the Medical Treatment Contracts Act (Wet op de geneeskundige behandelovereenkomst, WGBO). In addition to the WGBO, where necessary we also take into account retention periods arising from other legislation.
Security measures
To protect your data as well as possible, we have taken appropriate security measures. To this end, we have entrusted our ICT infrastructure and information security to a specialised company. In addition, a privacy policy has been drawn up and implemented within the practice.
References to third-party websites (via hyperlinks)
For your convenience, our websites contain links to third-party websites. Please note that when you visit these websites, the terms of those third parties’ privacy statements apply. We advise you to read the privacy statements of these websites before making further use of them.
The use of cookies
We use cookies to enable our practice website to function. Cookies are small information files that can be automatically stored on or read from the visitor’s device (such as a PC, tablet or smartphone) when a website is visited. This happens via the web browser on the device. There are various types of cookies. We use the following types of cookies:
- analytical cookies: to analyse how visitors use our website and to make improvements on that basis;
Cookies from the American company Google are placed via our website as part of the Analytics service. We use this service to track and obtain reports on how visitors use the website. We do not use this service for logged-in users. We have not permitted Google to use the Analytics information obtained for other Google services, and we have IP addresses anonymised. The information collected by Google is transferred to and stored on servers in the United States. We have concluded a data processing agreement with Google. The information Google collects is anonymised as far as possible. We have no influence over the use of the data by Google and/or third parties. Google may provide this information to third parties if legally required to do so, or insofar as third parties process the information on Google’s behalf. Google adheres to the privacy principles of, and is a participant in, the Privacy Shield of the US Department of Commerce and the European Commission. For more information about this data processing, please read Google’s privacy statement.
If you wish, you can adjust the settings for the use of cookies in your browser. You can also delete cookies manually. Please refer to your browser’s help documentation for instructions.
Your rights
Once you have provided personal data to us, you have various rights that you can exercise. These include the right of access to your data and the right to rectification and erasure. You may also ask us to transfer your data to you or to another party, or to restrict the processing of your data. You are also free to object to the processing of your data. In addition, you may withdraw your consent to the data processing at any time. You can submit your request to us by emailing info@parohaarlem.nl or by contacting us by telephone on 023-5420188. We aim to respond to your request within 14 working days.
Lodging a complaint with the Dutch Data Protection Authority
Should you be dissatisfied with the way in which we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). The contact details of the Autoriteit Persoonsgegevens can be found here: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-over-gebruik-persoonsgegevens
Changes to this privacy and cookie statement
We reserve the right to amend this privacy and cookie statement. Any changes will be announced via our practice website. We therefore advise you to consult this statement regularly so that you are aware of any changes.
Our contact details
Do you have any questions or comments after reading this privacy and cookie statement? If so, please contact us using the contact details below:
Mr T.H. van den Berg
Parodontologie Haarlem
Zijlweg 144
2015 BH Haarlem
023-5420188
info@parohaarlem.nl