We process data regarding the medicines or necessities of our patients. Because of the sensitivity of this data, we attach great importance to privacy. In our privacy statement you can read which personal data we process and for what purpose. The privacy statement also states which rights you have. If you have any questions or would like to exercise your rights, please contact email@example.com.
Privacy statement application
This privacy statement applies to the following pharmacies.
Name pharmacy: Regenboog Apotheek Hoogvliet BV (trading as Welcome Meds)
Address: Aveling 211, 3193 LE, Hoogvliet
Data Protection Officer: Jan-Pieter Dupon
Email address: firstname.lastname@example.org
1.1 Necessary for our services
In order to provide good care, we collect personal data from you. This is necessary for the prescription of medication, to contact you and to take care of the billing. Because we do not provide all services ourselves, but engage other service providers for some services, it is sometimes necessary to share data. For example, if you collect medication from a service pharmacy, we will share your medication file. We only do this with your permission.
1.2 Legal obligations
Healthcare providers are obliged to keep medical records, including the medication file, for 15 years. If the legal retention period has expired and you are no longer a patient with us, the data will be destroyed. If you remain a patient, we will keep the personal data for future medication expenses.
1.3 To whom does this privacy statement apply?
This privacy statement applies to all our patients. In addition, this privacy statement also applies if you visit our website, are a former patient, want to become or wanted to become a patient, but this ultimately did not happen and we observe for your pharmacy.
2. Personal data and processing thereof
2.1 What are personal data?
Personal data is data that can be traced back to a natural person. There are different categories of personal data, such as data regarding medication, billing and referrals. When you become a patient with us, we ask you for a number of personal data, such as your name, address, date of birth, account number, telephone number and e-mail address.
When you are a patient with us, information is recorded in the medication file about the medicines you are taking, contraindications, intolerances and other information that is important for prescribing the correct medication.
2.2 What does processing mean?
The meaning of the term 'processing' is broad and includes: collecting, storing, consulting, using, linking and providing to third parties who perform certain services for us.
3. What do we do with your data?
If you register, you must next to 2.1. the mentioned data also include your citizen service number. We must check this on your proof of identity. We do not make a copy or scan of it. If this is the case, we will ask you for your file with your previous care provider.
3.2 Sharing information
We share your information with various parties. We may share your information through our exchange system with a service pharmacy, a compounding pharmacy, the hospital, the general practitioner, an acting doctor or other healthcare providers. We only share this information if you have given permission to share the information with the relevant party. We receive the prescribed prescriptions from your doctor.
When you visit our website, we can process a number of data via cookies. It is also possible to order medication via the website. You enter your details yourself. These personal data are also treated confidentially.
3.4 Reporting incidents
If something unexpected has gone wrong with the protection of your personal data - or we suspect that this is the case - we will report this to the Dutch Data Protection Authority. If this incident relates to your personal data and could pose a high risk to your rights and freedoms for you, we will notify you as soon as possible.
It may be necessary for data to be shared with third parties, such as an IT supplier of ours or an administration office. If this third party qualifies as a processor, we will conclude a processor agreement with this party, so that your privacy is protected.
We naturally use your data to be able to provide the right care and to deliver the right medicines. In that context, we automatically screen the medication data in order to provide you with optimal guidance.
4. Obligations of care provider
Healthcare providers are bound by professional confidentiality and are basically not allowed to pass on anything to others. All our employees who process or become aware of patient data are bound by confidentiality.
In order to comply with our accountability obligations, we keep records of processing operations and any data leaks.
5. What are you entitled to?
5.1 Right to access and copy
You have the right to inspect the data in your file. You can view your file by appointment under the guidance of the healthcare professional. You are also entitled to a copy of your file. Personal notes are not covered by this right of access. Data from third parties in your file will in principle be made invisible.
5.2 Right to correction
You have the right to rectify incorrect personal data. You can also complete your file. For example, with a second opinion from another healthcare provider or your own vision of a treatment. Also make sure that you report changes to your details, for example your home address when moving or changing a telephone number. For simple changes you can simply call or email the pharmacy. For a more complex request, you can find at the bottom of the statement where you can submit a request.
5.3 Right to erasure
You have the right to data erasure. This removal is not possible in all cases. Consideration must be given to the substantial interest of another person in retaining the data (such as a lawsuit or heredity) and other legal regulations that oppose destruction.
5.4 Right to Complain
If you have a complaint about the processing of your personal data, we ask you to contact us. If that does not lead to the desired result, you have the option to submit a complaint to the Dutch Data Protection Authority, the supervisory authority in the field of privacy.
5.5 Other Rights
You also have the right to information, restriction of data processing, the right to object to the data processing and the right to obtain your data in electronic form.
If you wish to exercise one of your rights, we ask you to submit a written request. At the bottom of the regulations you can find where you can submit a request. We aim to respond to your request within four weeks.
If you want to exercise one of your rights or if you have any questions, please contact Jan-Pieter Dupon via email@example.com