PRIVACY STATEMENT

ARTICLE 1. APPLICABILITY OF PERSONAL DATA

1. IKARIA Clinics BV, located at Nieuwe Gracht 102, 2011 NL Haarlem, is responsible for the processing of personal data as reflected in this privacy statement.
2.Contact details: IKARIA Clinics bv, Nieuwe Gracht 102, 2011 NL, Haarlem, telephone: 023-303 46 07, www.ikaria.nl, contact@ikaria.nl
3.These regulations apply to all processing of personal data of website visitors and customers within IKARIA Clinics BV.
4.IKARIA Clinics BV ensures that it complies with all applicable privacy legislation and regulations, including the General Data Protection Regulation (AVG) and all other applicable codes of conduct and guidelines.

ARTICLE 2. PROCESSING OF PERSONAL DATA

1. Below is an overview of the personal data IKARIA Clinics BV processes in the EPD:
a. First and last name
b. Gender
c. Date of birth
d. Address details
e. Telephone number
f. E-mail address
g. Other relevant personal data that you actively provide in correspondence with IKARIA Clinics BV.
h. Bank account number
i. Citizen service number (BSN)
j. Health information you provide during medical consultations and which are relevant to IKARIA Clinics BV's consultation. Examples include medical history and medication use.

2. IKARIA Clinics BV processes your personal data for the following purposes:
a. Calling or e-mailing you if this is necessary to carry out our services.
b. Making an appointment; in this case we use your name and address details and your date of birth.
c. File handling SPD; in this case we use your name and address details and your date of birth. Identification; in this case we check your proof of identity and note the number.
d. Providing tailor-made services regarding the treatment(s) to be carried out; this is done within the framework of the treatment agreement.
e. Invoicing of consultations and treatments.

ARTICLE 3. CONDITIONS FOR LAWFUL PROCESSING
a. Personal data will only be processed for the purposes described in Article 2 and will not be further processed in a manner incompatible with the purposes for which they were obtained.
b. Personal data shall only be processed by persons who have a duty of confidentiality by virtue of profession, pursuant to an (employment) agreement.
c. Personal data shall only be processed insofar as they are adequate, relevant and not excessive in view of the purposes described in Article 4 (AVG).
d. Personal data will only be processed if one of the processing grounds in Article 6 (AVG) applies, namely:
1. The client has given his unambiguous consent for the processing.
2. The data processing is necessary for the performance of a treatment agreement to which the client is a party.
3. The data processing is necessary to fulfil a legal obligation.
4. It serves a legitimate interest.

ARTICLE 4. ACCESS TO PERSONAL DATA
a. IKARIA Clinics BV uses an electronic patient file (EPD). Dr I. Kuiper of IKARIA Clinics BV has access to this system. 
b. IKARIA Clinics BV has a strict duty of confidentiality regarding the data of which it gains knowledge on the basis of that access. This means that, in principle, IKARIA Clinics may not pass on any of your medical data to others. For example, as a care provider IKARIA Clinics BV may only provide data to a third party if this is permitted under the T&C and if IKARIA Clinics BV has a reason to break medical confidentiality. For example if you have given permission for this. IKARIA Clinics BV may then share patient data with those who are directly involved in your treatment. These can be other healthcare providers as well as, for example, secretaries or financial staff involved in your treatment.

ARTICLE 5. SECURITY OF PERSONAL DATA

a. To safeguard the principle of integrity and confidentiality, IKARIA Clinics BV takes all technical and organisational security measures to prevent unauthorised access or use of personal data.
b. Your medical data are stored in our EPD, which complies with the NEN 7510/ISO 27001 security requirements.
c. IKARIA Clinics BV complies with the duty to report data breaches, as described in the policy rules of the duty to report.

ARTICLE 6. PROVISION OF PERSONAL DATA

IKARIA Clinics BV does not simply provide your details to others. However, IKARIA Clinics BV may do so if permission has been given or if it is obliged to do so on the basis of the law or a court ruling or if such provision serves the purposes of processing personal data.

ARTICLE 7. INSPECTION AND DELETION RIGHTS

a. The client has the right to inspect and obtain a copy/deletion of the data relating to them. The client must submit a written request to this effect.
b. A request, as referred to in this article, will be fulfilled within 4 weeks after receipt of the request, and/or you will receive a response from IKARIA Clinics BV. The right to inspection will only be granted to the client or the client's authorised representative. Where appropriate, the client or their authorised representative must be able to identify themselves and/or prove their authorisation.
c. In case of data deletion, this is requested by using the form ‘destruction of data file’. This form includes a statement that the data have been deleted at the client's request.  
d. Exceptions to the right of deletion apply if: freedom of expression applies; data are a statutory duty of the responsible party; data are required for public tasks of the administrative body; data are required for the protection of public health; data are required for archives, scientific, statistical or historical research, insofar as, inter alia, the right to information precludes these interests; data are necessary for the exercise or defence of any right in court.

ARTICLE 8. RIGHT TO OBJECT

a. If data are the subject of processing under Article 4.4 (AVG), the client may lodge an objection to this with IKARIA Clinics BV in connection with his/her special personal circumstances if there is a legitimate interest.
b. IKARIA Clinics BV will assess whether the objection is justified within four weeks of receiving the objection. If the opposition is justified, it will immediately terminate the processing.
c. IKARIA Clinics BV would also like to point out that you have the option of submitting a complaint to the national supervisory authority, the Authority for Personal Data. This can be done via the following link: https://autoriteitpersoonsgege...

ARTICLE 9. RIGHT TO OBTAIN PERSONAL DATA

a. Client has the right to obtain his personal data provided to IKARIA Clinics BV in a structured, common and readable form.
b. Client has the right to transfer these data to another responsible party, without being hindered in doing so by IKARIA Clinics BV to which the personal data were provided.
c. IKARIA Clinics BV will ensure a current and usual format in which the Customer can receive the data. If requested, the format can - on the instructions of the client - also be forwarded to a third party.

ARTICLE 12. RELEVANT LEGAL PROVISIONS

The following laws are valid within the medical management of IKARIA Clinics: