Privacy
regulations
LogoTeaching
Subject: https://logoteaching.ws10.danego.net.
Introduction
We believe it is important that the privacy of our patients is properly safeguarded. These privacy regulations describe how we handle your personal data, including medical data.
If you have any questions about the privacy regulations, please contact your practitioner. You can also email geldrop@logoteaching.nl/en, contact us via our contact form on the site or contact the practice by phone, +31645101019/+31645355323
Article 1 Definitions
- Data: the data relating to a person
- Practice: LogoTeaching, data controller
- Patient: a patient of the practice
- Processing any operation or set of operations which is performed upon data or sets of data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, blocking, erasure or destruction of data (Article 4(2) General Data Protection Regulation)
Article 2 Applicability
These privacy regulations apply to all processing of personal data by the practice that relates to patient care.
Article 3 Goals
The practice may process data for the following purposes:
- Providing speech therapy care;
- Claiming speech therapy care provided from the patient or health insurer;
- For quality purposes;
- scientific research.
Article 4 Data processing
- In order to provide good care, details of treatment are recorded in a file. Your treating speech therapist has a legal obligation to keep a file. The treatment agreement forms the basis for being allowed to process the data. Only your treating speech therapist and others directly involved in your care need have access to the data to the extent necessary to provide good care. In addition, the data are used to declare the care provided.
- As a healthcare provider, the practice is required by law to ensure systematic monitoring of the quality of care provided. Data may be used for this purpose. In doing so, we will not process more data than necessary. Where possible, data are also pseudonymised or anonymised so that they cannot be (directly) traced back to individual persons.
- If we use your data for scientific research, your prior consent will be sought, unless this proves impossible and the law allows the data to be used without the patient's consent. In both cases, we will not process more data than necessary. Where possible, data will also be pseudonymised or anonymised so that it cannot be (directly) traced back to individual persons.
- Health insurers with whom the practice has an agreement check whether declared care has been legitimately provided. They can demand access to files as part of a material audit. The practice is obliged to cooperate.
- Your data will not be shared with third parties, unless one of the situations mentioned above applies or you have given us your written consent.
Article 5 Description of data
The following data can be processed:
- name
- address/contact details
- date of birth
- BSN number
- medical records
- name of GP/other care providers
- data of the parent(s)/legal representative
Article 6 Rights
- As a patient, you have the right to know that data about you is being processed. We inform you about this in general terms through these privacy regulations. We, in particular your treating speech therapist, will also inform you in specific cases, such as when a letter is sent to your GP about the progress or end of treatment.
- As a patient, you have the right to access your data. You can also request a copy of the file containing your data. We will deal with a request for inspection or a copy as soon as possible. A copy is preferably given 'in hand', whereby we ask you to identify yourself with a valid identity document. This precaution is to prevent your data from reaching unauthorised persons. Handing it over in person also provides an opportunity to answer any questions you may have.
- As a patient, you have the right to request rectification if there is any inaccuracy and/or incompleteness in your data. We will correct any inaccuracies and/or omissions as soon as possible.
- If you wish to have data destroyed, you can submit a request to this effect. We ask you to make this request in writing and, if it concerns medical data, to state the reasons if possible. The treating speech therapist will decide whether to proceed with destruction within three months of the request. If there is a compelling reason not to comply with the request, for example if the information is of considerable importance to someone other than the patient, it may be decided not to proceed with destruction. If your request is refused, we will give reasons.
- As a patient, you can have a statement added to your file. Please submit this statement to your treating speech therapist so that it can be added to your file.
- In exercising rights as described in this article, the following applies with regard to minors and persons under guardianship:
- In the case of a minor up to 12 years old, rights are exercised by the legal representative, usually the parents;
- In the case of a minor aged 12 to 15, the minor and his/her legal representative are exercised;
- In the case of a minor from 16 years of age, the minor can exercise the rights themselves;
- In the case of a person under guardianship, rights are exercised by the legal representative.
Article 7 Retention period
- The file containing treatment information is kept for 20 years after the end of the treatment agreement, unless good healthcare practice entails keeping the data for longer.
- For files containing treatment information of minors, the 15-year retention period starts from the age of 18.
- In cases other than those mentioned in this article, data will not be kept longer than necessary for the purpose.
- Exception to the above in this article applies if data has been destroyed at your express written request.
Article 8 Confidentiality
We treat your personal data confidentially. This means that we do not provide data to third parties apart from the exceptions listed below. We also impose a confidentiality obligation on our staff and external parties the practice engages for the benefit of our activities, such as software suppliers.
Exception to the confidentiality obligation is only possible if:
- you have given your written consent for this;
- the provision of the data is necessary for proper care and the recipient, for example the GP, is also involved in the care request;
- there are compelling reasons to break medical confidentiality, for example in the event of an emergency in the sense of a conflict of duties or in the event of signals indicating child abuse and/or domestic violence; or
- we are obliged to do so by virtue of a statutory obligation or a final court ruling.
Article 9 Information security
We take all appropriate technical and organisational measures reasonably possible to ensure the security of your data. These include:
- The use of secure and encrypted connections;
- We comply with NEN 7510, NEN 7512 and NEN 7513;
Article 10 Data protection officer
- The practice has appointed a data protection officer.
- The data protection officer's role within the practice is to oversee data processing. The data protection officer also monitors compliance with the General Data Protection Regulation.
Article 11 Changes
The practice may unilaterally amend the privacy regulations, for example if legislation changes. In that case, we will inform you via our website (www.logoteaching.nl/en).
Article 12 Complaints
Although we make every effort to ensure your privacy, you may not be satisfied with the way your data is processed. If you have a complaint, you can discuss it with your practitioner or the complaints officer. The complaints officer can be reached at +31645101019/+31645355323 or by e-mail geldrop@logoteaching.ws10.danego.net. A complaint can also be submitted in writing to Anouk van Goor or Eline Swinkels, practice managers. Address: Sint Jozefplein 3, 5666 RL Geldrop.
You are free to file your complaint with the Personal Data Authority at any time.
Version dated September 2020