Privacy Policy

1. Introduction

RytelZorg considers the protection of personal data of clients, their representatives, employees and website visitors to be of great importance.

Personal data is handled with care and processed and secured in accordance with applicable laws and regulations.

This privacy policy explains how RytelZorg collects, uses, stores and protects personal data in the context of providing home care services.

2. Data Controller

3. Applicable Laws and Regulations

• General Data Protection Regulation (GDPR / AVG)
• Implementation Act GDPR (UAVG)
• Medical Treatment Agreement Act (WGBO)
• Healthcare Quality, Complaints and Disputes Act (Wkkgz)
• Healthcare Providers Entry Act (Wtza)

4. Processing of Personal Data

Identification Data

• Name
• Date of birth
• Citizen Service Number (BSN), where legally required

Contact Details

• Address
• Phone number
• Email address

Healthcare and Medical Data

• Care file
• Care plan
• Nursing reports
• Treatment information

Administrative Data

• Care agreements
• Insurance information
• Billing information

Medical data is processed only when necessary for the provision of healthcare services.

5. Purposes of Processing

• Providing professional home care services
• Executing care agreements
• Coordinating care and treatment
• Administrative and financial processing
• Complying with legal obligations
• Ensuring and improving the quality of healthcare services

6. Sharing Personal Data with Third Parties

Personal data may be shared with authorized parties if this is necessary for healthcare provision or required by law.

• Municipalities (Wmo)
• Care offices (Wlz)
• Health insurance companies (Zvw)
• Treating healthcare professionals
• External data processors in accordance with Article 28 GDPR
• Supervisory authorities such as the Health and Youth Care Inspectorate (IGJ)

7. Data Retention Periods

• Medical records: 20 years
• Financial administration: 7 years
• General contact data: 2 years

8. Data Security

• Secure systems and servers
• SSL/TLS encryption
• Access restrictions for employees
• Internal privacy and security procedures

9. Rights of Data Subjects

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing

Requests can be submitted via info@rytelzorg.nl.

RytelZorg will respond within one month.

10. Data Breaches

RytelZorg complies with the data breach notification obligation as described in Articles 33 and 34 of the GDPR.

11. Complaints

Complaints regarding the processing of personal data can be submitted via info@rytelzorg.nl.

You also have the right to lodge a complaint with the supervisory authority:

www.autoriteitpersoonsgegevens.nl