Our Privacy Policy

In order to function properly Medisch Laser Centrum processes personal data. This includes both general and medical data. According to the GDPR law we need your permission to do so.

Who we are

Medisch Laser Centrum – also known as ‘Medische Praktijk voor Laserbehandelingen’ at the Chamber of Commerce under number 33263606 - is housed at the Cornelis Schuytstraat 55, 1071 JG in Amsterdam. Medisch Laser Centrum is responsible for the processing of personal data as described in this privacy policy. For further information about our clinic you can visit the ‘About Us’ tab on our website.

GDPR law

In May 2018 the General Data Protection Regulation (GDPR) came into effect, in order to better protect your personal data. Every company that processes (this means: collects and uses) personal data needs a legitimate reason to do so. In the case of medical data we require your explicit permission. This means that if we do not have your explicit permission to process your medical data, we cannot treat you.

Personal data we process and why

General data, received via email, telephone, or personal contact. This includes your name, address, telephone number, date of birth, email address, and your Citizen Service Number (BSN). We use this data in order to fulfil the following contractual obligations to you:

• To contact you
• To book, cancel, or rearrange an appointment for you
• For sending prescriptions to your pharmacy (only in case you need medication).
• For requesting medication from our pharmacy (the Lairesse Apotheek in Amsterdam) for you in relation to a treatment.

We also use this data to fulfil the following legal obligations:

• The creation, retrieval, and updating of a personal medical record
• The registration of revenue through daily, weekly, monthly, and yearly turnover reports.

Medical data, filled in by you on your health declaration and received by the practitioner from you during consultation and treatment appointments. Sometimes we also receive this information from you through contact with you through the phone or over email. Medical data includes your medical treatment history, medication use, complications, complaints, and medical conditions. We use this data to fulfil treatment agreements we have with you and to fulfil the following legal obligations:

• The creation, retrieval, and updating of a personal medical record
• Deciding whether or not a treatment can take place
• For the correct execution of a fitting treatment

We also use this data to fulfil the following legal obligations:

• Submitting yearly reports to the Dutch Inspection of Healthcare and Youth (‘Inspectie voor Gezondheid en Jeugd’ - IGJ). This is a legal obligation for us. In these reports all your data has been made anonymous.
• Management analyses for the continuous improvement of our clinic. In these analyses all your data has been made anonymous as well.

Financial data, filled out in your personal record. This includes all of your expenses to products and treatments in our clinic. We use this data to fulfil the following legal obligations:

• Tax declarations - your data is made anonymous
• The registration of revenue through daily, weekly, monthly, and yearly turnover reports.
• Furthermore we require your permissions to use this data, after being made anonymous, for management analyses.

In our clinic we use an electronic patient record system. This system is provided and maintained by an external party. Because it is necessary for this third party to have access to our system and your data, we have made clear contracts. For example, they are only allowed to access the system with our permission in the case they have to repair an error. Only authorized personnel is allowed to access the system in all cases.

Apart from the abovementioned third parties (Inspection for Health care and Youth, your pharmacy, our pharmacy (the Lairesse Apotheek in Amsterdam), and our electronic patient record system provider) your personal data is only processed internally.

Your rights

You also have a number of important rights in relation to your personal data that we process:

Data portability

• You can receive a machine-readable copy of all your data (your record).

Access

• You can access your record and request information about the personal data we process.

Rectification

• You can request to have any incorrect data in your record changed by us. However, medical history, like treatments you have had in our clinic, can not be changed at your request.

Restrict processing

• You have the right to temporarily restrict the processing of your data.

Object

• You can object to any further processing of your data.

Erasure

• You have the right to be forgotten. However, we are legally obliged to keep your medical record for 15 years. In this case you cannot resort to your right to be forgotten.

Furthermore it is important to note that we do not use automated decision making processes. This means that there is always a person involved when decisions are made regarding your personal data.

Finally you have the right to file a complaint with the Personal Data Authority (‘Autoriteit Persoonsgegevens’) about our processing of your personal data.

Important

Without your permission we are unfortunately not allowed to treat you. This is because all the processing of personal data mentioned in this privacy policy is essential to properly carry out treatments, fulfil our legal obligations, and the effective functioning of our clinic. Giving this permission does not mean we can share your personal data with third parties apart from those mentioned in this privacy policy. You also have the right to withdraw your permission at all times. This means that we are no longer allowed to process your data and can no longer treat you. However, we would still be required to keep your medical record for 15 years.