Privacy Policy

Hairtec Hair Clinic is the controller for the processing of personal data, as described in this privacy policy.

Postal address: Olof Palmestraat 20, 2616 LS Delft
E-mail address: [email protected]
Phone number: 015-7009755
Chamber of Commerce number: 86158406

Hairtec Hair Clinic has drawn up this privacy policy to provide insight into the use of personal data on the website and related domains.

What data is collected via the website

Data collected through the website includes:

• Name and contact details (via forms).
• IP address and browser information (via cookies).

This data is used for:

• Processing contact requests and appointment bookings.
• Providing information and answering questions.
• Optimising the website through statistical research.
• Protecting the website against cyber attacks.

What data is processed

Hairtec Hair Clinic processes data in the patient file via ClinicMinds. This includes:

• Contact details (name, date of birth, BSN, address, phone, e-mail).
• Photos of the face.
• Medical file (consultation reports, medical history, allergies, medication, questionnaires).
• Financial information (invoices, payments, quotes).
• Questionnaires for consultation, treatment or research.

Purposes of processed personal data

Personal data is used to assess whether someone is suitable for a hair transplant.
Legal bases under GDPR:

• Consent of the user (can be withdrawn).
• Necessity for the performance of the agreement.

In addition, data is used for:

• Telephone or e-mail contact.
• Changes to services or products.
• Newsletter or advertising brochure.
• Analysis of visitor behaviour to improve the website.

Access to personal data

Data can only be viewed by healthcare providers involved in your care.
For treatment agreements, written consent must be given in advance.

Access during internal quality controls

During internal quality controls, files may be reviewed on a random basis.
This is done under strict confidentiality by authorised staff.

Your rights

Under the GDPR, you have the following rights:

• Right to a copy of the medical file.
• Right to access or modification.
• Right to destruction of the file.
• Right to data portability.
• Right to restriction of processing.
• Right to object.
• Right to lodge a complaint with the Dutch Data Protection Authority.

Right to information

This privacy policy provides information about the source, recipients, purposes, legal bases, retention periods and rights.

Right of access

For access requests, identity will be verified.
One copy is provided free of charge (unless multiple copies are requested).

Right to rectification

Incorrect data can be corrected.
Recipients are informed of this unless impossible or disproportionate.

Right to erasure

Data can be erased when GDPR conditions are met.

Right to restriction of processing

When applicable, data may only be processed:

• with the user’s consent,
• for legal claims,
• for the protection of another person’s rights,
• for important public interest reasons.

Right to data portability

Data can be transferred to another controller in a commonly used format.
This applies to data processed on the basis of consent or agreement.

Right to object

You may object to the processing of your personal data.
Processing will be stopped unless there are compelling legitimate grounds.

Retention periods

Medical data: at least 20 years (in accordance with the WGBO).
Financial data: 7 years (in accordance with tax legislation).
Website data: maximum 26 months (Google Analytics).

Security

Hairtec Hair Clinic takes appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

Questions or complaints

For questions about this privacy policy or to exercise your rights, please contact us via [email protected].