CMC Tasly Group/Chinese Medical Center processes personal data from our clients, visitors of the office, visitors of the websites and other relations.
You have the right to us to handle your personal data carefully and confidentially. This is legally regulated in the General Data Protection Regulation (GDPR). The information of the partners with whom we work (digitally) is also protected and complies with the rules of the GDPR and is regulated through so-called “processor agreements”.
We take the protection of your data seriously. We take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification.
Why do we process your data?
If you are a client, we collect and register your personal data to provide you a proper treatment and file a treatment history. This process is obligated by the WGBO (Wet op de geneeskundige behandelingsovereenkomst). We also register your personal data to send you the ordered products Furthermore, we process your personal data to send you an invoice after each treatment which you can submit to your health insurer.
We also collect video recordings from the visitors to our office for the purpose of the safety of our employees, visitors and properties. Visitors are made aware of the recording by the posting signs that say CCTV is in operation at the entrance and the reception.
If you are a visitor to our website, we collect personal information that you voluntarily provide to us when you register on the website contact form, expressing an interest in obtaining information about us or our products and services. We use your personal information to make contact with you.
We also may use your personal data to keep you informed about TCM Clinic, our products or services by sending you newsletters.
How do we get your data?
First of all, we receive your data during the treatment. Your personal data and treatment information will be documented in a file. Your other personal data that you provide to us are also registered in our accounting system to further process the shipment and invoicing of your order.
Your e-mail address provided earlier to us when ordering a product of left on the website, we use them to send you the newsletters, since information provided in the newsletters is in your interest and this is not a further adverse invasion of your privacy.
Which data do we process?
We process your treatment information and contact details. This concerns your name, address, date of birth and e-mail address.
For the visitors to our office, we collect video recordings, which may include images of you.
How long do we keep your data?
As a healthcare provider, we have an obligation to retain medical information for 20 years after your last treatment. Personal information recorded in the accounting system is required to be retained for 7 years obliged by the fiscal laws.
Video recordings are deleted after 14 days.
Contact information left on the website contact form is used till the correspondence is followed up.
Share with others
We only provide your medical data to other organizations if this is necessary to comply with a legal task. Otherwise, we will ask you first for consent to share your data with external parties.
For some processes, we make use of external parties with which we share your personal data, for example hosting of the webshops and websites. We conclude a processor agreement with organizations that process your data on our behalf. This is to ensure the same level of security and confidentiality of your data. We remain responsible for this use of your personal data.
What are your rights?
You can invoke the following Privacy Rights.
Right to access data
You can ask us to inspect your personal data. You can receive a statement of which of your personal data TCM Clinic processes without giving a reason. In this way it must be clear to you where the data come from and with whom we possibly share or have shared the data. You can only request information about yourself, not about others. This is only possible if you can demonstrate that you are requesting data on behalf of someone and/or have obtained permission for this.
Right to adjust, supplement, limit, transfer or delete the data
Are the correct personal data not registered or is it incomplete? Then we can adjust, supplement or delete data at your request. This is not always possible. For example, if legal proceedings are ongoing in which those data are important.
Withdrawing your consent
If you have given us permission to process your personal data, you can also withdraw this permission. You do this by sending an email to: email@example.com with the statement: “Withdrawal of permission for the use of personal data”.
Objection to data processing
You can object to the processing of your personal data. You can then ask us to stop using your personal data. This is not always possible. In such a case, you must be able to demonstrate that the processing can have adverse consequences for you.
How do you do this?
If you want to invoke one or more of your privacy rights, the following applies:
- You can submit a request by post.
- You must identify yourself at the reception of TCM Clinic.
We will process your request within 1 month. Is your application complex? Then we have an extra two months for this.
Objection and appeal
If your request is not or partially granted, it will always be explained why this is the case. You are entitled to have this recorded in a decision. You can lodge an objection against this with the controller. This is the board of TCM Clinic. The decision describes how to do this.
To file a complaint
Are you not satisfied with the actions of TCM Clinic in dealing with your privacy or processing your personal data? Or do you think TCM Clinic has incorrectly processed your personal data? Then you can submit a complaint to the TCM Clinic via the email address: firstname.lastname@example.org.
If we cannot resolve it together, you can go to court. You can read more about this in the handling of your complaint. In addition, you can always submit a complaint to the supervisory authority, the Dutch Data Protection Authority, if you believe that your rights have been violated. You can read more about this on the website of the Dutch Data Protection Authority (AP), under “Complaint about use of personal data”.
Your website visit
So-called cookies are placed when you visit our website. We use functional cookies and analytical cookies. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website.
The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and, for example, remember your preferred settings. Cookies also keep track of your surfing behaviour and preferences. This allows us to improve our services to you. Still, you can choose to opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously saved via your browser settings.
Do you have questions about privacy? Please contact email@example.com.
For general information about privacy, please visit the website of the Dutch Data Protection Authority (AP).