General Data Protection Regulation
A new European law, the General Data Protection Regulation, will apply from May 2018. This law has been drawn up to ensure that your personal information is handled with care. The data stored by you must be accurate and complete and will only be used for the purpose for which you provided it. Information about the AVG can be found here.
Elskling meets the requirements of the AVG. Within the practice, client data is collected solely for the purpose of providing good naturopathic care and assistance; the financial settlement of the care offered with the client or his health insurer, including the creation, registration and processing of invoices; conducting effective management and policy within practice. A copy of all invoices issued is processed by the administration office.
Your details will be obtained on the form that you complete yourself before your first appointment; these are processed in your file. The file is supplemented during the treatment with reports of the treatment sessions. These reports are not shared with others unless necessary for treatment and only after your consent. If applicable, after your explicit permission, data will also be requested from other care providers, this data will then also be added to your file. Your digital file is stored on the computer and is then protected with passwords; In addition, you have a paper file that is stored in a locked file cabinet. The person who carries out the IT system management has a processor agreement with Elskling.
All data is stored for at least 15 years after your last treatment. If you wish to be "forgotten", you can submit a reasoned request in writing; If this request is granted, your file will be destroyed immediately.
Your file can be used for possible observation by a colleague therapist in the event of my absence. Your file can also be used anonymously during peer evaluation and my own training.
The AVG gives you a number of rights that allow you to exercise limited control over the use of your personal data. You have the right to request access to your personal data and your file. You must request this from the therapist in writing, with a date, your personal details and your signature, who is also the owner of the practice. After your written request has been received, the therapist is obliged to provide you with an overview of the data within four weeks. A fee of € 20 will be requested to provide the information.
For children up to 12 years old, parents can submit a request. Young people from 12 to 16 years old have the right to submit a request themselves. Parents / guardians of young people from 12 to 16 years of age only have this right with the child's permission.
The therapist can refuse the request for inspection for good reasons.
After you have been granted insight, you can request the therapist to improve, supplement, delete or block your data. A condition for granting this request is that the data as used is factually incorrect, incomplete or irrelevant for the purpose of the processing. This request must also be provided with a date, your personal details and your signature. The therapist must respond to your request within four weeks. A refusal to edit your data must be justified.
If the request is granted, other organizations to whom the data have been provided must be informed of the changes, unless this is impossible or requires an unreasonable effort on the part of the responsible party. This must be done within eight weeks of the date of the application.
The right to object means that you have the right to object in writing to the therapist's use of your data in writing, with a date, your personal data and your signature. If this objection is met, you may not be able to be treated at Elskling.
Finally, you have the right to data portability. This means that you can request Elskling to provide your data in a form that makes it easy for those involved to reuse it.
The Dutch Data Protection Authority mediates in disputes about the exercise of rights. You can submit a request for mediation directly to the Dutch Data Protection Authority. There are no costs involved in handling this request.
If you believe that you have suffered damage as a result of the fact that the responsible party has not complied with certain obligations, you can present this to a judge. This may request advice from the Dutch Data Protection Authority.