Privacy statement

The GP practices of Drs J.A. Boodt, C. Frakking/J.J.S. Tjin-A-Ton, M.S. van 't Grunewold, B. v. Kralingen and Praktijk Zwaag-Pijls follow the guidelines of the General Data Protection Regulation (AVG) and the Medical Treatment Agreement Act (WGBO) to protect your personal data. This legislation describes how our staff should handle your data and is partly designed to promote careful handling of your personal data. Among other things, the data must be correct and complete; it must also be used only for the purpose for which you provided it. Of some data, you would like it to be treated confidentially, to be recorded only by the persons or body that needs it and not to be disseminated further than necessary. After all, it is your personal data.

As these laws and regulations are the same for all our practices, we have decided to accommodate this in a privacy regulation we have jointly drawn up for all GP practices in the Marne health centre, called "Privacy regulation GP practices Marne health centre" which is printed below. If the term ''General practice' mentioned, this is therefore about your own GP's individual general practice!

Privacy regulations GP practices Marne Health Centre

General
With effect from 25 May 2018, the General Data Protection Regulation (AVG) is the new law to protect privacy and personal data. Under this law, an organisation working with personal data has certain duties and the person whose data belongs to it has certain rights. In addition to this general law, specific rules apply to privacy in healthcare. These rules are stated, among others, in the Medical Treatment Agreement Act (WGBO). This privacy regulation is intended to inform you of your rights and our obligations under the AVG and the WGBO.

GP practice
At general practice may process various personal data about you. This is necessary to be able to treat you properly medically and necessary for the financial settlement of the treatment. In addition, processing may be necessary for, for example, combating serious danger to your health or to comply with a legal obligation (e.g. mandatory reporting of an infectious disease under the Public Health Act).

The duties of general practice
General practice is, according to the AVG, the controller of the processing of personal data that takes place in the practice. The practice complies with the resulting duties as follows:

• Your data is collected for specific purposes:
  • for care delivery;
  • for effective management and policy;
  • to support scientific research, education and outreach.
• In principle, no processing takes place for other purposes.
• You will be informed that personal data about you will be processed. This may be done by your healthcare provider, but also through a leaflet or through our website.
• All employees within general practice have undertaken to treat your personal data confidentially.
• Your personal data is properly secured against unauthorised access.
• Your personal data will not be kept longer than necessary for proper care.

For medical data, this retention period is in principle 15 years (from the last treatment), unless longer retention is necessary, for example for the health of yourself or your children. This is at the discretion of the practitioner.

Your rights as a data subject:

You have the following rights:

• The right to know whether and what personal data about you is being processed.
• The right to inspect and copy that data (insofar as it does not violate the privacy of another person).
• The right to correct, supplement or delete data if necessary.
• The right to request (partial) destruction of your medical data. This can only be granted if keeping the data is not of significant interest to another person and the data does not have to be kept under a legal regulation.
• The right to add a self-declaration (of a medical nature) to your file.
• The right to oppose the processing of your data in certain cases.

If you wish to exercise your rights, please make this known in writing using an application form to general practice. Your interests may also be represented by a representative (such as a written agent, or your trustee or mentor).

Notes to the 'Request form to inspect, copy, correct or destroy medical data'

You should note that, in principle, medical records are kept for a maximum of 15 years under the law. You will help us look up your records and protect your privacy if you fill in the form as completely as possible. The data you enter will be treated in the strictest confidence by us. General practice is not liable for errors in postal delivery. If you prefer to collect the file in person, or by an authorised representative, please indicate this on the form.

Patient data

Here, you include the details of the person about whom the medical record is concerned. The Medical Contract Act (WBGO) considers patients to be of age from 16 years. Adolescents from 16 years of age who want to inspect/copy their medical records must make the request themselves. If the patient is no longer alive, providing the medical data is only allowed if it can be assumed that the deceased would not have had any objection to this or there are compelling interests to break the healthcare provider's duty of silence. The decision on this lies with the healthcare provider.

Disclosure of your personal data to third parties

The staff of general practice have an obligation to treat your personal data confidentially. This means, for example, that the healthcare provider needs your explicit consent before providing your personal data. However, there are some exceptions to this rule. On the basis of a statutory provision, the healthcare provider's duty of confidentiality may be broken, but also when there is reason to fear a serious risk to your health or that of a third party. Moreover, if necessary, recorded data can be exchanged orally, in writing or digitally with other healthcare providers (e.g. the pharmacist who processes a prescription and thus receives data from the GP).

Protection of your data
General practice has engaged specialised ICT suppliers to maintain and manage our information facilities and has also appointed a data protection officer (FG). These suppliers have been carefully selected by us and clear agreements on confidentiality and security have been made with them through so-called processing agreements. We also keep records of who accesses your medical data and when. Should it happen - despite our measures - that third parties gain unauthorised access to your (medical) data, you will be informed personally by general practice informed and we report this to the FG and -if FG advises or the AVG requires- also to the Personal Data Authority.

Data exchange
General practice after you have given your specific consent, exchanges relevant medical data safely and reliably with the GP out-of-hours surgery (HAP) via the so-called National Switch Point (LSP). If you have visited the HAP in the evening or at the weekend, the HAP in turn shares a truth message with the GP practice. This way, the GP knows exactly what complaints you visited the HAP with and what action was taken as a result.

Medication data can also be shared via the LSP with your pharmacy and your treating medical specialists. This includes the medication prescribed to you by your GP, as well as any intolerances, contraindications and allergies (so-called ICA data). These can be taken into account by other prescribers and dispensers of medication. This is how we, as a GP practice, contribute to medication safety.

As a practice, we have recently been able to access some data from Amstelland Hospital via a secure internet connection using the GP Portal. This is a web application that allows your GP -with/with your permission- to view information from the last year in the hospital system (e.g. X-ray results, laboratory results and letters from specialists). This gives the advantage that the entire care process in the hospital becomes more transparent for your GP, consultation between specialist and GP is easier and no duplicate examinations are requested for you. If you do not want your GP to be able to see your data digitally, you can object by filling in an objection form. This is available through your GP's assistant.

Transfer of your file

If you choose a new GP, it is important that your new GP is aware of your medical history. Your medical history is in your patient file. It is usual for your old GP to transfer the file to your new GP. The old GP does this as soon as possible, at least within a month, after you have asked your old GP to transfer the file to your new GP.

Your medical records are nowadays usually requested electronically by your new GP. Your GP then transfers the data electronically to the new GP via 'Zorgmail Filetransfer', a specially secured e-mail connection. You cannot take the original file with you. However, you are always entitled to inspect your file and to receive a copy. The file can also be transferred to the new GP in person or by registered mail only in exceptional cases.  

Recording telephone calls

In order to monitor and improve the quality of our services, we are monitored by general practice telephone conversations with the assistants are regularly recorded. If you call, you will be reminded of this before the conversation with the assistant.

Camera surveillance

Cameras contribute to security, help to signal and identify at an early stage and, above all, in many cases work preventively. Camera surveillance is used to ensure security at the Marne Health Centre.

These cameras are located at the following locations:

• In GP waiting rooms;
• In the corridors at the GPs;
• In the central hall on the first floor 'left' by the front desk/front office;
• In the central hall by the GPs' right.

In the main hall on the ground floor at the entrance to the health centre, it is clearly indicated that camera surveillance is used.

The images can be recorded if necessary -for example, in case of an incident-, but will be deleted after 3 weeks at the latest.

Question or complaint

Do you have a question or complaint? For example, about who we share data with or our handling of your medical data? Then your general practitioner would be happy to discuss this with you.

These privacy regulations have been modified at points, but largely follow the standard Privacy Statement of the National General Practitioners Association (LHV) (April 2018)