• Koert Psychosomatiek is responsible for processing, securing, and storing your personal data in the context of psychosomatic physiotherapy care.

• ​As a recognized psychosomatic physiotherapy practice, we process personal data to comply with laws and regulations, health insurers, and to provide responsible care. We process general and medical data within a secure Electronic Patient Record (EPR), using two-factor authentication.

• EHR software: Your data is stored in a secure environment of the chosen EHR system.

• Zorgmail: For consultation and reporting to general practitioners and medical specialists, we use encrypted communication via Zorgmail. This is done exclusively with your consent.

• External parties: Data is only shared with third parties (e.g. personal injury lawyers) if you give written consent for this.

• No client images are stored on personal devices. All data is stored encrypted and is accessible only to authorized healthcare providers.

• Your data will not be shared with organizations outside the European Economic Area (EER) unless expressly agreed with you and in accordance with the AVG.

• ​We retain your medical data in accordance with the statutory retention period of 15 years (WGBO), unless a longer period is required for medical or legal reasons.

You are entitled to:

• Access to your data

• Correction or addition

• Deletion (after retention period expires)

• Withdrawal of consent

• Objection to processing

• Human assessment in automated decision-making

• Transferability of your data (data portability)

• Restriction of processing
  For an overview or to exercise these rights, we refer you to: www.autoriteitpersoonsgegevens.nl

• ​Do you have a complaint about the processing of your personal data? Then you can contact Koert Psychosomatiek. You can also file a complaint with the Dutch Data Protection Authority via 0900 – 2001 201 or via their website.

• To enter into a treatment agreement, we require your personal data. We cannot commence treatment without this information. By scheduling an appointment, you consent to this processing in accordance with the AVG.

• ​If we receive medical data from third parties (for example, a general practitioner or specialist), this is carefully verified and stored in our secure Electronic Patient Record (EPR). Only relevant data is retained, and always in consultation with you.

• Cookies and IP addresses: Our website uses technical cookies and collects IP addresses for security reasons (e.g., to prevent spam). This data is deleted periodically. We do not use tracking cookies; therefore, a cookie notice is not required.

• Contact form: Data submitted via the contact form is used solely to contact you. This data is deleted within one year of the contact.

• Embedded third-party content: The website may contain embedded content (e.g., videos). These external websites may place their own cookies. Koert Psychosomatiek is not responsible for this external data usage.

• Questions? If you have any questions about this privacy statement, please feel free to contact us at koertpsychosomatiek@hotmail.com or speak to me at the practice.