Your personal data and your privacy in our GP practice.

The AVG is the new law to protect privacy and personal data. Under this law, an organisation working with
personal data works certain duties and the person whose data belongs has certain rights. In addition to this general law, specific rules apply to privacy in healthcare. These rules are stated, among others, in the Medical Treatment Agreement Act (WGBO). These privacy regulations are intended to inform you of your rights and our obligations under the AVG and the WGBO.

General practice

Our general practice may process various personal data about you. This is necessary to be able to treat you properly medically and necessary for the financial settlement of the treatment. In addition, processing may be necessary, for example, to combat serious danger to your health or to comply with a legal obligation (e.g. mandatory reporting of an infectious disease under the Public Health Act).

The duties of general practice

Under the AVG, the practice is the data controller for the processing of personal data that takes place in the practice. The practice complies with the resulting duties as follows:

• Your data is collected for specific purposes:
  • for care delivery;
  • for effective management and policy;
  • to support scientific research, education and outreach.
• In principle, no processing takes place for other purposes.
• You are informed that personal data about you is being processed. This may be done by
  your healthcare provider, but also via a leaflet or via our website.
• All employees within Demopraktijk. have undertaken to treat your
  personal data.
• Your personal data is properly secured against unauthorised access.
• Your personal data will not be kept longer than necessary for proper care.

For medical data, this retention period is in principle 15 years (from the last treatment), unless longer retention is necessary, for example for the health of yourself or your children. This is at the discretion of the practitioner.

Your rights as a data subject

You have the following rights:

• The right to know whether and what personal data about you is being processed.
• The right to inspect and copy such data (to the extent that the privacy of another person is not affected thereby
  harmed).
• The right to correct, supplement or delete data if necessary.
• The right to request (partial) destruction of your medical data. This can only be met
  come if the retention of the data is not of material interest to another person and the data is held pursuant to
  of a legal regulation should not be retained.
• The right to add a self-declaration (of a medical nature) to your file.
• The right to oppose the processing of your data in certain cases.

If you wish to exercise your rights, you can make this known to the practice verbally or by means of an application form. Your interests may also be represented by a representative (such as a written proxy, or your trustee or mentor).

Notes to the application form

You should note that, in principle, medical records are kept for a maximum of 15 years under the law. You will help us look up your records and protect your privacy if you fill in the form as completely as possible. The data you enter will be treated by us as strictly confidential. Demopraktijk. is not liable for errors in mail delivery. If you prefer to collect the file in person, or by an authorised representative, please indicate this on the form.

Patient data

Here, you include the details of the person about whom the medical record is concerned. The Medical Contract Act (WBGO) considers patients to be of age from 16 years. Adolescents from 16 years of age who want to inspect/copy their medical records must make the request themselves. If the patient is no longer alive, provision of the medical data is permitted if it can be assumed that the deceased would not have had any objection or there are compelling interests to break the healthcare provider's duty of silence. This decision lies with the healthcare provider.

Disclosure of your personal data to third parties

Practice staff have an obligation to treat your personal data confidentially. This means, for example, that the healthcare provider requires your explicit consent before providing your personal data. However, there are some exceptions to this rule. On the basis of a legal requirement, the healthcare provider's duty of confidentiality may be broken, but also when a serious risk to your health or that of a third party must be feared. Moreover, recorded
data are exchanged, if necessary orally, in writing or digitally, with other healthcare providers (e.g. the pharmacist who processes a prescription and thus receives data from the attending physician).

Data exchange

After you have given your specific consent, the practice exchanges relevant medical data safely and reliably with the GP out-of-hours surgery (HAP) via the National SwitchPoint. If you have visited the HAP in the evening or at the weekend, the HAP in turn shares a truth message with the GP practice. This way, the GP knows exactly what complaints you visited the HAP with and what action was taken as a result.

Medication data can also be shared with your pharmacy and your treating medical specialists. This includes the medication prescribed to you by your GP, as well as any intolerances, contraindications and allergies (ICA data). These can be taken into account by other prescribers and dispensers of medication. This is how we, as a GP practice, contribute to medication safety.

Transfer of your file

If you choose a new doctor/healthcare provider, it is important that your new doctor/healthcare provider is aware of your medical history. Your medical history is in your patient record. It is usual for your old doctor/carer to transfer the file to your new doctor/carer. The old doctor/carer does this as soon as possible , at least within a month, after you have asked your old doctor/carer to transfer the file to your new doctor/carer.

Your medical record will then be transferred by your doctor/healthcare provider in person or by registered mail. You cannot take the original file with you. However, you are always entitled to inspect your file and to receive a copy. The file can (if possible) also be transferred to the new doctor/carer by e-mail. Both doctors/care providers must then ensure that their computers and internet connections are sufficiently secure.

Question or complaint

Do you have a question or complaint? For example, about who we share data with or our handling of your medical data? If so, your doctor/carer will be happy to discuss this with you.