Uw Zorg OnlineYour Personal Data and Privacy in Our General Practice
General
De AVG is de nieuwe wet ter bescherming van privacy en persoonsgegevens. Op grond van deze wet heeft een organisatie die met persoonsgegevens werkt bepaalde plichten en heeft degene van wie de gegevens zijn The AVG (General Data Protection Regulation, GDPR) is the law for the protection of privacy and personal data in the Netherlands. Under this law, organizations that process personal data have certain obligations, and individuals whose data is processed have specific rights. In addition to this general law, there are specific regulations regarding privacy in healthcare. These rules are, among others, set out in the Dutch Medical Treatment Agreement Act (WGBO). This privacy policy is intended to inform you about your rights and our obligations under the AVG/GDPR and the WGBO.
General Practice
In our general practice, various personal data about you may be processed. This is necessary to provide proper medical care and for the financial handling of treatment. Processing may also be necessary for other reasons, such as preventing serious health risks or complying with a legal obligation (for example, the mandatory reporting of certain infectious diseases under the Public Health Act).
Obligations of the General Practice
Huisartsenpraktijk van Eerd is, according to the AVG/GDPR, responsible for the processing of personal data within the practice. The practice fulfills these obligations as follows:
-
Your data is collected for specific purposes: for providing care; for efficient management and policy; and for supporting scientific research, education, and public information.
-
In principle, your data will not be processed for other purposes.
-
You are informed that your personal data is being processed. This can be done by your healthcare provider, through a leaflet, or via our website.
-
All staff at Huisartsenpraktijk van Eerd are committed to handling your personal data confidentially.
-
Your personal data is securely protected against unauthorized access.
-
Your personal data will not be retained longer than necessary for proper healthcare provision.
-
For medical records, the standard retention period is 15 years (from the last treatment), unless longer retention is necessary—for example, for your own health or the health of your children. This is at the discretion of the treating practitioner.
Your Rights Regarding Personal Data
You have the following rights under the AVG/GDPR:
-
The right to know whether and which personal data is being processed.
-
The right to access and obtain a copy of your data (as long as this does not infringe on another person’s privacy).
-
The right to correct, supplement, or delete data if necessary.
-
The right to request the (partial) destruction of your medical records. This can only be granted if retaining the data is not significantly important for someone else and if the data does not need to be legally retained.
-
The right to add your own statement (of medical nature) to your file.
-
The right, in certain cases, to object to the processing of your data.
If you wish to exercise your rights, you can notify Huisartsenpraktijk van Eerd either verbally or by using the aanvraagformulier. Your interests may also be represented by a representative (such as a legally authorized person, or your curator or mentor)
Explanation of the Request Form
Please note that, according to Dutch law, medical records are generally kept for a maximum of 15 years. You help us locate your file and protect your privacy by completing the form as thoroughly as possible. The information you provide will be treated strictly confidentially. Huisartsenpraktijk van Eerd is not responsible for errors in postal delivery. If you prefer to collect the file in person or through an authorized representative, you can indicate this on the form.
Patient Information
Here you provide the details of the person to whom the medical record belongs. Under the Medical Treatment Agreement Act (WGBO), a patient is considered an adult from the age of 16.
- If the patient is under 12 years old, a parent (or legal representative with authority) must submit the request; the child’s consent is not required.
- For patients aged 12–16, the patient’s consent is required unless the information is necessary to provide consent for treatment. Access may be denied if it is incompatible with proper medical care—for example, if the parents are unaware of the treatment.
- For patients over 16, the patient must always give consent for parents to access the medical record. A parent without legal authority does not have a right to access but is entitled to general information about the patient’s health. A stepparent without legal authority is considered a third party.
- If the patient is deceased, medical information may be provided if it is assumed the deceased would have had no objection, or if there are compelling reasons to override the healthcare provider’s confidentiality. This decision rests with the healthcare provider.
Sharing Your Personal Data with Third Parties
Staff at Huisartsenpraktijk van Eerd are required to handle your personal data confidentially. In general, the healthcare provider must obtain your explicit consent before sharing your personal data. Exceptions apply in certain situations, for example:
- When legally required to disclose information
- If there is a serious risk to your health or that of a third party
- When it is necessary to exchange information with other healthcare providers (e.g., the pharmacist processing a prescription receives relevant information from the GP)
Data Exchange
After you have given specific consent, Huisartsenpraktijk van Eerd shares relevant medical data securely via the National Exchange Point (LSP) with the out-of-hours GP service (HAP). If you visit the HAP in the evening or at the weekend, they in turn send a summary to your GP so the GP knows what complaints you presented with and what actions were taken.
Medication information may also be shared with your pharmacy and treating medical specialists. This includes medications prescribed by your GP as well as any intolerances, contraindications, and allergies (ICA data). This helps ensure safe prescribing and contributes to overall medication safety.
IPCI Research
Your GP participates in scientific research, which is important for improving healthcare. The IPCI project of Erasmus Medical Center in Rotterdam investigates questions such as:
- Which medications are prescribed?
- Do symptoms improve with these medications, and how long does it take?
- What are the side effects of the medications?
Data used for scientific research is anonymized. Researchers cannot identify which patient the data comes from.
If you object to the use of your data for research, please inform your GP. Your data will then not be used. For more information, see: www.ipci.nl
Questions or Complaints
Do you have a question or complaint, for example, about with whom we share your data or how we handle your medical records? You can address these to the practice assistants.