Privacy statement Fitaal
Privacy Statement of Fitaal
This is Fitaal's Privacy Statement.
To provide you with proper care, Fitaal processes your personal data.
In this document, we explain how we handle your data.
Fitaal places great importance on careful handling of your personal data.
Your data is processed and secured with care.
You can rely on the fact that your data is safe with Fitaal and that we comply with the applicable rules.
Why does Fitaal have a Privacy Statement?
We have outlined in this Privacy Statement how we handle your personal data.
You can read in this Privacy Statement which personal data we process, for what purposes, who can access your data, how we store your data, to whom we pass on your data, and what influence you can exercise over this.
Your interest is our priority!
What is personal data, and which data does Fitaal process?
Personal data is any information that can be traced back to an individual, and that individual is you.
We obtain personal data when you, for example, fill out a form, send a letter or email, or call us.
Even when you visit the Fitaal website, you may provide us with personal data in some cases.
We do not use automated decision-making.
Fitaal may process the following personal data:
- Name, Address, and Residence (NAW) details
- Phone numbers
- BSN (citizen service number)
- Driver's license, ID, or passport number
- Email address
- Gender
- Date of birth
- Bank account number
- Marital status
- Occupation
- Health and treatment data
- Insurance details
We only process the above-mentioned personal data when necessary, such as to contact you or comply with legal or contractual obligations.
Who is responsible for processing your personal data?
The responsible parties for processing your personal data are all entities within Fitaal. They formally decide whether and which personal data will be processed, for what purpose, and in what manner.
This is based on the Medical Treatment Agreement (Wgbo) and the treatment agreement signed with you.
What are the grounds for processing your personal data?
Fitaal can only process your personal data if we have a legal basis to do so.
Legal grounds for processing your data include:
- Your consent
- The processing of your data is necessary for the performance of a contract
- The processing is necessary to fulfill a legal obligation
- The processing is necessary to protect your health from serious harm.
What purposes does Fitaal process your personal data for?
Fitaal processes your personal data for the provision of good care and efficient and effective business operations.
Your data is further processed for the following purposes:
- Developing, executing, and evaluating treatment plans
- Identifying patients and clients
- Customer satisfaction surveys
- Medical record-keeping for (physio)therapeutic treatment, by the therapists, possibly through our EPD system
- Billing of healthcare costs
- Adequate scheduling
- Communication with patients and clients, and possibly future patients/clients who enter their data via the website
- Performing workplace and health assessments
- Creating reports and advice for patients, general practitioners, medical specialists, and other healthcare providers
- Communicating with general practitioners, medical specialists, and other healthcare providers
- Measuring treatment results and experiences (data collection)
- Benchmarking treatment results at the regional and national level
- Registration in quality registers
- PR and marketing purposes (including social media)
- Documentation for monitoring and process control
- System management
With whom does Fitaal share your personal data?
We explicitly do not share your personal data with third parties unless it is necessary for the execution of the treatment agreement, is legally required, or if you have given us your consent.
If we exchange personal data in the context of your treatment agreement, this usually happens with:
- Healthcare providers in the health or social domain who are supporting you or will do so in the future
- Family or caregivers
- Insurers
Your therapist will explain to you why and with whom they wish to share personal data.
Fitaal may also be required to provide personal data based on laws or regulations, a court decision, or in case of fraud or abuse. In such cases, Fitaal will cooperate.
Transfer of your data to countries outside the European Union
Fitaal does not provide personal data to parties located outside the EU.
How long does Fitaal keep your personal data?
Fitaal does not store your data longer than necessary for the purposes for which it is processed, and as legally allowed.
The retention periods of certain data vary from 2 to 20 years, depending on the nature of the data and the purposes for which they are processed. If you want more information about our retention policy, you can contact the operational manager.
What are your rights?
When Fitaal processes your personal data, you have the following rights according to the applicable regulations:
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent
You can contact our operational manager at any time to exercise your rights.
We will respond to your request within one month. You can also contact the Data Protection Officer (Robert Gielisse) via gielisse@pactadvocaten.nl, or by mail at Pact Advocaten B.V., Attn. Robert Gielisse, Jozef Israëlskade 46, 1072 SB Amsterdam.
We request that you verify your identity with a valid identification document so that we can ensure we provide the personal data to the correct person.
Supervision of the processing of personal data
The rules regarding the protection of your personal data are set out in the Personal Data Protection Act, and from May 25, 2018, the General Data Protection Regulation (GDPR). The Dutch Data Protection Authority (AP) oversees compliance with these regulations.
If you believe that the provisions in this Privacy Statement are not being complied with sufficiently, you have the right to file a complaint with the AP.
Security
To protect your privacy and the confidentiality of your data, Fitaal takes appropriate technical and organizational measures.
The electronic patient file meets the standards for information security.
Fitaal's virtual workstations are only accessible with a personal password, known only to the employee.
Other measures include:
- Paper files are stored in locked cabinets.
- Regular testing and evaluation of the measures taken.
- Staff training on preventing security incidents and reporting data breaches.
- Use of encrypted communication and secure apps where possible.
About this Privacy Statement
Fitaal may update this Privacy Statement. The last update was on January 19, 2024.
If you have questions or comments about our Privacy Statement, please feel free to contact us:
Fitaal
Ineke Dikkerboom, Operational Manager
It Hege Stik 1
Tel: 0513-627165
inekedikkerboom@fitaal.nl
