Privacy regulations of general practice Derks

General

The General Data Protection Regulation (AVG) is the law governing the protection of privacy and personal data. Under this law, an organisation processing personal data has certain obligations. Persons whose data are processed have various rights under this law.

In addition to the AVG, additional rules for handling personal data apply within the healthcare sector. These rules are laid down, among others, in the Medical Treatment Agreement Act (WGBO).

With these privacy regulations, we inform you about How Huisartsenpraktijk Derks handles your personal data, which rights you have and which duties apply to our general practice under the AVG and the WGBO.

General Practice Derks

Within general practice Derks, patients' personal data are processed. This is necessary to be able to treat you well medically and to handle the care administratively, for example towards the health insurer.

In addition, processing or sharing personal data may be necessary under a legal obligation, for example when reporting certain infectious diseases under the Public Health Act, or when there is a serious danger to your health or that of others.

Huisartsenpraktijk Derks is responsible for processing personal data of its patients and does so in accordance with the AVG and the WGBO.

What do we use your personal data for?

Your personal data will only be used for clear and legitimate purposes.

• Care provision: providing GP care, keeping your medical records and maintaining contact with you.
• Administration and practice management: scheduling appointments and handling care administratively and financially.
• Legal obligations: Compliance with obligations arising from laws and regulations applicable to healthcare providers.
• Quality, education and research: Only when permitted by law and with appropriate safeguards, such as anonymising data.

Your data will not be used for purposes other than those described above.

On what bases do we process your data?

Huisartsenpraktijk Derks processes personal data only when there is a legal basis for doing so. This could be:

• the performance of the treatment agreement;
• a legal obligation;
• your consent, when necessary;
• a legitimate interest, such as a safe and well-organised practice, always taking your privacy into account.

Confidentiality and security

All employees of Huisartsenpraktijk Derks have a duty of confidentiality and handle your personal data with care. They may only view or use your data if this is necessary for their work.

We take appropriate technical and organisational measures to properly secure your data and prevent unauthorised access. Where possible, a record is kept of who has accessed your file.

How long do we keep your data?

Personal data will not be kept longer than necessary for the purpose for which it is processed. For medical data, a retention period of 20 years, counting from the time the record was last changed. In some cases it may be necessary to keep data for longer, for example in the interests of good care or the health of yourself or others.

Your rights

You have several rights under the AVG. You have:

• the right to know whether and what personal data of yours are being processed;
• the right to inspect and copy your data;
• the right to correct or supplement incorrect data;
• the right to have data deleted or (partially) destroyed, to the extent permitted by law;
• the right to object to certain forms of processing;
• the right to add a self-declaration to your medical record.

If you wish to exercise these rights, please contact General Practice Derks. Your GP or the doctor's assistant can inform you about this.

Provision of data to third parties

Your personal data will be shared with third parties only when necessary for your care, when required by law, or when you have given your consent.

Data may, if necessary, be exchanged with other healthcare providers, such as the pharmacy, an acting GP, medical specialist or the GP out-of-hours service. This is always done carefully and with only the information needed.

Exchange of medical data

Medical data is only exchanged when you have given your specific consent. This exchange takes place via secure systems, such as the National Switch Point (LSP).

Through the LSP, relevant medical data can be shared with the general practitioners' post (HAP). If you have been in contact with the HAP in the evening or at the weekend, Huisartsenpraktijk Derks will receive a confirmation of this.

In addition, if necessary, medication data can be shared with your pharmacy and treating specialists. This includes information on allergies, contraindications and intolerances (ICA data), to support medication safety.

Referrals and care mediation

If your GP refers you to another healthcare provider, only the data needed to follow up the referral will be shared.
Upon referral, you will be given the digital opportunity to indicate whether you want to use care mediation by your health insurer in case of long waiting times. Only if you give explicit permission for this will data be shared with your health insurer. At the time of consent, you will see what data will be shared.

No data will be shared with the health insurer for healthcare mediation without your consent.

Transfer of your medical records

When you switch to another GP, Huisartsenpraktijk Derks will transfer your medical records to your new GP. This happens as soon as possible and in principle within one month of your request. You cannot take the original file with you, but you always have the right to inspect and receive a copy of your file.

Juvoly Quickconsult

Within Huisartsenpraktijk Derks, Juvoly Quickconsult can be used. Juvoly Quickconsult is a digital tool that converts spoken text during the consultation into a summary for the GP Information System (HIS). The spoken text is not saved. Only the summary checked by the GP is recorded in the medical record.

If you do not want this device to be used during your consultation, you can tell your doctor.

Cookies and use of the website

On the website of Huisartsenpraktijk Derks, we use cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone the first time you visit the website.

We use cookies that:

• necessary for the website to function properly;
• help us understand the use of the website so that we can improve it.

These cookies collect no medical data and be, where applicable, anonymised or pseudonymised processed. Data collected via cookies is not directly traceable to you as an individual.

On your first visit to our website, we inform you about the use of cookies and - if necessary - ask for your consent. You can always change your cookie settings via your internet browser. You can also delete previously stored cookies via your browser settings.

For more information about cookies and how to manage them, please refer to your browser's help function.

Questions or complaints

Do you have questions or complaints about the processing of your personal data or about your privacy? If so, please discuss them with your family doctor at Huisartsenpraktijk Derks.

If you cannot reach a solution together, you have the right to file a complaint with the Personal Data Authority at
www.autoriteitpersoonsgegevens.nl.