Stichting ZuidZorg [the ZuidZorg Foundation] is entitled to process the data of its employees and clients. It does so on the basis of the agreement entered into between the Data Subject and Stichting ZuidZorg. This may refer both to the care agreement with a client and to the employment agreement with an employee.
Stichting ZuidZorg processes these data under the responsibility of its Management Board. Stichting ZuidZorg also appointed a Data Protection Officer to oversee the processing of data. This Officer is accessible through the e-mail address FG@zuidzorg.nl for questions and in case of complaints.
ZuidZorg limits the processing of data to those data necessary for the implementation of the agreement. This means that the following categories of personal data are processed:
- Name and address details
- Identifying data, including date of birth
- Contact details
- (contact-) Details of parents/carers
- Citizen service number (BSN)
- Insurance details
- Medical data
Stichting ZuidZorg processes these data on the basis of general interest. However, you may choose not to make use of the care being offered, which we will register in our system before sending both you and the general practitioner a copy thereof. ZuidZorg guarantees that the data are not randomly shared with third parties. Prior permission of the Data Subject always needs to be obtained for the exchange of data unless it is subject to legal grounds. This includes, for example, the exchange of data with municipalities and insurance companies for invoicing. It also includes the duty of due care of our employees. In the exceptional cases where it is the professional judgement of our staff that requesting permission could have very serious consequences for your health, that of your child or that of the care provider, no permission will be asked. In doing so, we meet our duty of care, as also described in the professional code of the V&VN [Dutch professional association for nursing and care staff] and/or of The Royal Dutch Medical Association (KNMG). Your data are processed in the context of care provision. This means that the data will not be used for other purposes. Should this come up, permission will be asked for in advance.
In principle, your data are processed within the EEA. Within the EEA , the same privacy regulations apply, guaranteeing your privacy. In the event that the data are processed outside the EEA, ZuidZorg will ensure that the processor complies with the European standards. We do this by using the clauses matching the Privacy Shield and by preparing a processing agreement under Dutch law.
The data are kept at ZuidZorg for 15 years following the completion of the care, in conformity with the retention periods included in the Dutch Medical Treatment Contracts Act [Wet op de Geneeskundige Behandel Overeenkomst (WGBO)]. After this period the data will be destroyed. This is done once a year.
When your child reaches the age of 4 years, the file will be handed over to the Dutch Joint Health Service of South-East Brabant [GGD Brabant-Zuidoost] with your permission.
Finally, ZuidZorg informs you of your rights as a Data Subject as regards your own data. You are entitled to access the file, to receive a copy thereof, and to the correction of factual inaccuracies. You may also object to the processing of the data. Permission granted previously may be withdrawn at all times. You may address a formal request to the secretariat of the Dutch Youth Healthcare [Jeugdgezondheidszorg] through email@example.com.
If you disagree with the processing of the data or if you want to submit an objection, please contact our Data Protection Officer. If you are not satisfied with the resolution of your objection, you also have the right to lodge a complaint with the Dutch Data Protection Authority.