Privacy Statement Dikrama Clinics B.V.

Address:
Zakkendragerssteeg 13
3511 AA Utrecht

Chamber of Commerce number: 80115586
VAT number: NL861559551B01

This privacy statement outlines how Dikrama Clinics handles your personal data.

The use of personal data
Dikrama Clinics obtains personal data from you directly, for example, the information you provide via email, the intake form, the website, social media, telephone, app, SMS, mail, and/or verbally. In addition, personal data may be obtained via third parties in the context of professional practice or service provision.

Dikrama Clinics processes the following (special) personal data, among others:

• Name and address details
• Contact details, such as email address and phone number(s)
• Date and place of birth
• Gender
• Photos
• Citizen Service Number (BSN)
• Data relevant to performing the treatment, e.g., (medical) data.

Purposes
Dikrama Clinics processes personal data in the context of its medical services and the professional practice of the doctor and skin therapist. In addition, personal data is processed to serve the financial and/or commercial interests of Dikrama Clinics.

Legal grounds
Dikrama Clinics processes this personal data on the following grounds:

• Carrying out a treatment commissioned by you
• Compliance with legal obligations, such as identification within the framework of the guidelines of the Health and Youth Care Inspectorate (IGJ).
• Management of the electronic patient record
• Invoicing and, if necessary, collecting funds, whether or not through debt collection measures

Provision of your personal data to third parties
Dikrama Clinics will not provide personal data to third parties without your explicit consent, unless the transfer takes place within the framework of the aforementioned grounds. A processor agreement has been concluded with the third party referred to here.

Website, links to other websites and/or social media
Our website may contain references to other websites, such as hyperlinks. The social media buttons on our website are also included to easily share our pages on social media networks such as LinkedIn, Facebook, and Instagram. Dikrama Clinics is not responsible or liable for the processing of personal data by those websites. This privacy statement does not apply to the use of those third-party websites.

Retention period
Dikrama Clinics will not store your personal data longer than necessary for the purposes mentioned in this privacy statement. In this context, it is relevant for you to know that the retention period for professional liability is 15 years, so that the personal data provided by you can also be stored for a maximum of 15 years.

• We store and use your personal data so that we can provide you with good care.
• We only pass on your data to third parties if this is necessary for providing good care. If specific consent is required for this based on the law, we will ask you in advance.
• We process your data based on the treatment agreement as described in the Medical Treatment Contracts Act (WGBO).
• You can view parts of your personal data. Please send us a written request to do so.
• If you believe that the data we have stored about you is incorrect, you may ask us in writing to adjust your data.
• You can ask us to erase your personal data. If we do this, we may (potentially) no longer be able to provide responsible care to you. The WGBO requires a retention period of 15 years. Therefore, in that case, we store your data in an inactive archive, invisible and unusable for the normal user.
• You can withdraw your consent for our processing of your personal data. We may then (potentially) not be able to guarantee responsible care. In that case, we store your data in an inactive archive (see above).
• You can object to us if you do not agree with the way we process your personal data.
• You will be notified by us if something has gone wrong with your personal data.
• We do not process your data longer than necessary for providing good care. We adhere to the retention periods of the WGBO.
• All of the above also applies to personal data that we receive via third parties.
• In case of treatment, additional agreements will be signed.

We are transparent – your rights
You have the right to request Dikrama Clinics to provide access to your personal data. After receiving your request for access, you will receive an overview of your personal data processed and/or stored by us within a reasonable period.

To request this personal data, you can send an email to info@dikramaclinics.nl, after which we will start the procedure. You also have the right to object to the processing or storage of your personal data. This includes the right to request rectification or erasure of your personal data. You can also ask to have your personal data transferred to you. It is important to realize that a request to exercise the aforementioned rights may be refused if the processing of your personal data is in the interest of a correct execution of the assignment given to us, due to the doctor’s professional secrecy, or if storing your personal data is necessary due to the legal requirements that apply.
If you see reason to do so, you finally have the right to file a complaint with the Dutch Data Protection Authority.