Privacy Policy

Last updated: April 17, 2025

Introduction

Kristal Physiotherapy, located at Parkweg 371, 3119 CK Schiedam, is responsible for the processing of personal data as described in this privacy policy.

Contact Information

Website: www.kristalfysio.nl
Address: Parkweg 371, 3119 CK Schiedam
Phone: 010-2038133
Email: info@kristalfysio.nl

Personal Data We Process

Kristal Physiotherapy processes your personal data because you use our services and/or because you provide this data to us. Below is an overview of the personal data we process:

• First and last name
• Gender
• Date of birth
• Address details
• Phone number
• Email address
• Citizen service number (BSN)
• Insurance details
• Medical data relevant to your treatment
• Information about your activities on our website

Special and/or Sensitive Personal Data We Process

Kristal Physiotherapy processes the following special and/or sensitive personal data about you:

• Health information
• Citizen service number (BSN)

This data is only processed as necessary for your treatment and for claims with health insurers.

Purpose and Legal Basis for Processing Personal Data

Kristal Physiotherapy processes your personal data for the following purposes:

• Executing the treatment agreement
• Processing your payment
• Sending our newsletter (only if you have registered for this)
• Contacting you by phone or email if necessary for your treatment
• Informing you about changes to our services and products
• Compliance with legal obligations, such as keeping a medical record

Automated Decision-making

Kristal Physiotherapy does not make decisions based on automated processing on matters that can have (significant) consequences for individuals. These are decisions taken by computer programs or systems, without a human being involved.

How Long We Keep Personal Data

Kristal Physiotherapy does not store your personal data longer than strictly necessary to achieve the purposes for which your data is collected. For medical data, we use the legal retention period of 20 years (from the last treatment) in accordance with the Medical Treatment Contracts Act (WGBO).

Sharing Personal Data with Third Parties

Kristal Physiotherapy does not sell your data to third parties and only provides it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Kristal Physiotherapy remains responsible for these processing operations.

We may share your data with:

• Your health insurer (for claims)
• Your general practitioner or other healthcare providers (only with your consent)
• Software suppliers for our electronic patient records and appointment management

Cookies or Similar Techniques We Use

Kristal Physiotherapy only uses technical, functional, and analytical cookies that do not invade your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remember your preferences, for example. They also allow us to optimize our website.

You can opt out of cookies by setting your internet browser to not store cookies. Additionally, you can also delete all information previously saved via your browser's settings.

Viewing, Modifying, or Deleting Data

You have the right to view, correct, or delete your personal data. You also have the right to withdraw your consent to data processing or to object to the processing of your personal data by Kristal Physiotherapy. Additionally, you have the right to data portability, which means you can request that we send the personal data we have about you in a computer file to you or another organization specified by you.

You can send a request for access, correction, deletion, data transfer of your personal data, or a request to withdraw your consent or objection to the processing of your personal data to info@kristalfysio.nl.

To ensure that the request for access has been made by you, we ask you to include a copy of your ID with the request. Make the photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN) black in this copy to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.

How We Secure Personal Data

Kristal Physiotherapy takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you believe your data is not properly secured or there are indications of misuse, please contact us at info@kristalfysio.nl.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be published on our website. It is therefore advisable to consult this privacy statement regularly to stay informed of any changes.

Complaints

Kristal Physiotherapy would also like to point out that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons