This statement provides information on how VitaSana deals with personal data that is processed in relation to the PME services.

Contact details

VitaSana

Castellum complex

Building D, Ground floor

Loire 116

2491 AJ The Hague

Email: info@vitasana.eu

Telephone number: +31 (0)70 21 777 00

Purposes and basis for the processing

VitaSana processes the personal data of clients for the purposes of the PME.

The purpose of processing client data is to conduct PMEs and for their administrative and financial settlement. The data processed include:

• Name, street name and number, town/city, telephone number and e-mail address
• Date of birth
• Citizen Service Number (BSN)
• Insurance details
• Personal health data, including the results of eye, hearing, ECG, lung function, ergometric, cycling, ultrasound, bone density, body fat, blood pressure, pulse, oxygen, blood, urine, psychological and vitality tests.

Client data is processed in accordance with medical laws and regulations, including the Medical Treatment Contracts Act (WGBO) and the Use of Citizen Service Number in Healthcare Act.

VitaSana processes personal data solely for the purpose for which the data is gathered.

Source of the processed data

You provide the data to be processed during the intake or the data is gathered during the PME via the various tests. If you do provide the processed personal data yourself, the source of the data may be one of the following, for example:

• GP
• Therapist
• Hospital.

This data is only gathered with your explicit consent.

Transfer of personal data

Client data may be transferred to cooperating organisations in relation to blood and urine tests. Data may also be transferred to hospitals, GPs and other care providers for referral.

Transfer outside the EU or to an international organisation

In principle, personal data is not transferred outside the EU or to international organisations. Transfers are explicitly recorded and communicated to the data subject if legal grounds other than the GDPR do not take precedence.

The term for saving the data

VitaSana does not save data for longer than is necessary for the purpose for which the data was gathered, to comply with legal obligations or to execute contracts.

The terms for saving client data comply with the rules for saving medical data.

Your rights as a data subject

You have several rights pursuant to the GDPR. If you wish to exercise them, you may send a written request via the contact details shown at the top of this privacy statement. It is important that you identify yourself using a valid identity document. Your rights are listed below.

Right of access

You can ask which of your personal data VitaSana processes, for which purpose and for how long the data is kept.

Right to rectification

If you believe that certain data has not been processed correctly, you have the right to request rectification of this data.

Right to erasure (right to be ‘forgotten)

If you wish your personal data to be erased, you can submit a request for this.

Right to restriction of processing

If you wish to restrict the processing of personal data by VitaSana, you can submit a request for this.

Right to transferability of data

If you wish to transfer personal data processed by VitaSana to another healthcare provider, you can submit a request for this.

Right to object

You have the right at all times to file an objection to the processing of your personal data due to your specific situation. If you wish to exercise this right, you can send in a request for this.

Right not to be subjected to automated individual decision-making, including profiling

Because VitaSana does not perform automated individual decision-making and profiling, the exercise of this right does not apply.

Withdrawal of consent

If VitaSana processes personal data based on your consent, you have the right at all times to withdraw that consent. You can notify us of this in writing.

Potential restrictions on the exercise of your rights pursuant to the GDPR 

VitaSana makes every effort to comply with your rights pursuant to the GDPR. However, these rights may conflict with other statutory provisions, such as the Medical Treatment Contracts Act (WGBO) and the Use of Citizen Service Number in Healthcare Act. In such cases, VitaSana carefully considers which of these matters carries the most weight and decides how we will deal with your request. You will be notified of this in writing. 

Complaints concerning the processing of your personal data by VitaSana

If you have any complaints concerning the processing of personal data by VitaSana, please let us know via the contact details at the top of this privacy statement. You may also submit a complaint to the supervisory authority, the Dutch Data Protection Authority. Visit the website at www.autoriteitpersoonsgegevens.nl.

This privacy statement was drawn up on 10 July 2020.