Psychotherapie en psychologiepraktijk Well Being B.V.
A.M.J.T. Notermans, established in Eindhoven and registered with the Kamer van Koophandel (Chamber of Commerce) under number 72187646, attaches importance to the protection of personal data. This privacy statement explains how A.M.J.T. Notermans handles information about an identified or identifiable natural person, as referred to in the Algemene Verordening Gegevensbescherming AVG (General Data Protection Regulation (GDPR)).
1 Application
This privacy statement applies to the following categories of natural persons whose personal data A.M.J.T. Notermans processes:
a. (potential) patients;
b. visitors to the practice of A.M.J.T. Notermans;
c. visitors to the website psychotherapie-eindhoven.nl of A.M.J.T. Notermans
d. job applicants;
e. all other persons who contact A.M.J.T. Notermans or whose personal data A.M.J.T. Notermans processes, with the exception of its employees.

2 Processing of personal data
A.M.J.T. Notermans processes personal data that:
a. a person has provided in person (during a discussion or meeting), by telephone, or digitally (via e-mail or web forms on the website), such as contact details or other personal data;
b. with the consent of the person concerned, they are requested from other care providers or referrers;
c. were recorded by camera images during a visit to the practice building of A.M.J.T. Notermans. Camera images are taken on the outside of the practice and the waiting room, in order to know who is in the building in the event of an emergency and to ensure that unauthorized persons do not gain access to the practice. In principle, camera images are destroyed after 7 days;

3 Purposes of processing
A.M.J.T. Notermans processes personal data for the following purposes:
a. the execution of a medical treatment agreement and the declaration for work performed;
b. maintaining contact, by means of invitations to meetings and information requested by a data subject;
c. Improving the practice website psychotherapie-eindhoven.nl
d. Keeping track of user statistics. User statistics of the website provide information about the number of visitors, the duration of the visit, which parts of the website are viewed and the click behaviour. These are generic reports, which cannot be traced back to individual visitors;
e. Monitoring access to the practice and protecting confidential data.

4 Legal basis
A.M.J.T. Notermans processes personal data on the basis of one of the following legal grounds:
a. Consent of the data subject. This consent can be withdrawn at any time, without affecting the lawfulness of the processing based on the consent before the withdrawal;
b. execution of – or with a view to – concluding a medical treatment agreement, including billing to third parties, such as the health insurance company, etc.;
c. a legal obligation, such as the obligation to keep a medical record or to register the BSN,
d.legitimate interest, such as the use of contact details to invite you to a meeting
e. Processors
A.M.J.T. Notermans may engage service providers (processors) for the processing of personal data who process personal data exclusively in accordance with the instructions of A.M.J.T. Notermans. A.M.J.T. Notermans concludes a processing agreement with processors that meet the requirements of the AVG (General Data Protection Regulation (GDPR)).

6 Sharing personal data with third parties
A.M.J.T. Notermans shares personal data with third parties if this is appropriate in the context of the processing (e.g. a referral) or is necessary to comply with a legal obligation. A.M.J.T. Notermans does not share personal data with third parties for commercial purposes.

7 Transfer outside the EEA
In principle, A.M.J.T. Notermans does not transfer personal data to countries outside the European Economic Area (EEA). If this is necessary, A.M.J.T. Notermans will ensure that the transfer only takes place if the European Commission has indicated that the country in question offers an adequate level of protection or if there are appropriate safeguards within the meaning of the AVG (General Data Protection Regulation (GDPR)).

8 Data Retention
A.M.J.T. Notermans does not store personal data any longer than necessary.
In principle, A.M.J.T. Notermans applies the following retention periods:
a. Medical data: at least 20 years after the end of the treatment agreement
b. (financial) administrative data: 7 years after recording the data;
c. data of employees and self-employed persons, other than (financial) administrative data: 5 years after termination of employment or after the end of the contract for services;
d. Applicant data: 6 months after completion of the application procedure;
e. Visitors to the website: 5 years after the last visit to the website, unless an objection is made earlier, in which case destruction will be carried out.

9 Changes to the privacy statement
A.M.J.T. Notermans retains the right to amend this privacy statement at any time. An up-to-date version of the privacy statement will be published on the website of A.M.J.T. Notermans. It is wise to consult this privacy statement regularly, so that you are aware of any changes.

10 Rights, questions and complaints
You have the right to ask A.M.J.T. Notermans to inspect, rectify, delete, transfer, restrict and object to the processing of personal data. You can contact A.M.J.T. Notermans by sending an e-mail to a.notermans@psychotherapie-eindhoven.nl.
If you have any questions or complaints about the way in which A.M.J.T. Notermans processes personal data, you can also contact A.M.J.T. Notermans by sending an e-mail to a.notermans@psychotherapie-eindhoven.nl. We will try to resolve a complaint to your satisfaction. If that does not work, you can turn to the Autoriteit Persoonsgegevens (AP); (Dutch Data Protection Authority (DPA)).