Huisartsenpost Maastricht en Heuvelland

Life threatening situation? Always call 112 Dentist Central: 0900-1515

Loading

Loading

Life threatening situation? Always call 112 Dentist Central: 0900-1515
Home ยป Privacy

Privacy

1. General

We record data about you. This is necessary to give you good emergency medical care.
We do this in line with the General Data Protection Regulation (GDPR).
Under this law, an organization that works with personal data has certain obligations and the person to whom the data belongs has certain rights.
In addition to this general law, specific rules apply to privacy in healthcare. These rules are stated in the Medical Treatment Agreement Act (WGBO), among other things.

On this page you can read more about your rights and our obligations under the GDPR and the WGBO.

2. Use of your personal data

We process your personal data if you:

  • visit the General Practitioner
  • contact us
  • A general practitioner comes to your home for emergency care.

We record the data in an electronic patient file. This is necessary to be able to provide you with good medical care and to financially handle your treatment.
In addition, processing may be necessary for, for example, combating a serious danger to your health or to comply with a legal obligation.
At busy times, we work together with other Limburg GP Emergency Stations. Healthcare providers at these posts can view and record data in your file.

We process the following categories of personal data:

  • Name, address and place of residence (name and address) details
  • Date of birth
  • Gender
  • Phone number
  • Citizen service number (BSN)
  • Insurance details
  • Your GP
  • Medical data

We also receive data from other healthcare providers, for example your own GP or pharmacy.
This only happens if you have given permission to do so with your GP or other healthcare provider.

We record our phone calls. This way we can keep an eye on the quality and make it better.
We use the recordings, for example, if there is a complaint or an incident. We keep the recordings for a maximum of 1 year.
Sometimes a doctor will ask you to send photos. We also keep these for a maximum of 1 year.

There are cameras in the General Practitioner’s waiting room. This is for your and our safety.
We can then store images after an incident and use them to handle the incident.

3. Why do we process your data?

According to the GDPR, the Stichting General Practitioner Maastricht en Heuvelland is responsible for the processing of your personal data. We collect your data for:

  • the provision of emergency care by employees on a General Practitioner and by the acting general practitioner;
  • declaring the care provided to you to the health insurer;
  • monitoring the organisation’s own quality and business operations;
  • accounting for care provided to health insurers, based on anonymised data;
  • support for scientific research, education and information.

4. Costs

General practitioner care is insured through the basic insurance. Costs for GP care are not deducted from your deductible. Are we unable to claim the costs of your visit to the General Practitioner directly from your insurer? Then, we will send you a payment request by SMS. This text message contains a link to a trusted payment environment.

5. Scientific research

The data we register can be used for statistics on illness and health and for scientific research into medical treatments. Strict rules apply to protect your privacy. Data that can prove your identity (such as your name and address) will be deleted first. If it is necessary for the investigation to know who you are, we will always ask for your explicit permission first.
If you have any questions or do not want your data to be used, please contact us via info@hapmaastricht.nl.

6. Retention period of your data

We do not store your personal data for longer than is necessary for the proper provision of care. For medical data, this retention period is in principle 20 years (from the last treatment), unless longer retention is necessary, for example for the health of yourself or your children. Telephone conversations are kept for 1 year. In the event of a report or incident, we will retain telephone conversations in accordance with the statutory retention period.

7. Who has access to your data?

Only healthcare providers and employees who are directly involved in the treatment of your care request can consult your data.
These are, for example:

  • the triage nurse (qualified doctor’s assistant) with whom you have telephone contact
  • the GP who treats you
  • the General Practitioner’s doctor’s assistant on duty.

They will only look at your file if necessary for your treatment.
If you have a complaint, it may be necessary for the General Practitioner’s complaints officer and supervisor to also have access to your file and possibly to the recordings of telephone conversations and/or camera images.
You give separate permission for this.

8. Disclosure of personal data to third parties

Our employees have the obligation to treat your personal data confidentially.
They are not allowed to pass on your data to others just like that. Your permission is required for this.

Sometimes a situation requires your data to be passed on. For example, if the healthcare provider has to break the duty of confidentiality on the basis of a legal requirement. Or when there is a fear of serious danger to your health or that of someone else.

We may also exchange your data with other healthcare providers. This is done orally, in writing and/or digitally. Other care providers include the ambulance service, a specialist in the hospital or the pharmacist.

9. Exchange of data

To improve the quality of patient care, the most important data from your medical file of your own GP and pharmacy can be viewed by the triage nurse and the GP on duty at the General Practitioner via the LSP or Whitebox. This data can only be requested by us if you have given specific permission to your own GP and/or pharmacy. If you have had contact with us by phone, been to the General Practitioner or have been visited by the GP, we will send a summary of your contact or visit to your own GP. This allows your GP to know exactly what complaints you have had contact with the General Practitioner about and what has been done in response to them.

10. Security Measures

We have taken several organizational and technical security measures to protect your data. In this way, all employees are informed and made aware of the privacy sensitivity of your data and how they should handle it carefully and under strict confidentiality. In addition, we have taken various technical measures to protect our computer systems and network connections against unauthorized access. If, despite these measures, third parties gain unauthorized access to your data, we will report this to the Dutch Data Protection Authority.

11. Your rights

You have the right to inspect your data. If it turns out that data about you is incorrect, you have the right to have it corrected, supplemented or deleted by us. It may be that it is not possible to (fully) comply with a request, for example if your access leads to an infringement of the privacy of others or if deletion of data results in you not being able to provide you with proper care. If you wish to exercise your rights, you can make this known verbally or in writing using the contact details below. Your interests can also be represented by a representative (such as a written representative, or your curator or mentor).

12. Self-triage service “Do I need to go to the doctor?”

What does “Do I Need to Go to the Doctor?”

“Do I have to go to the doctor?” offers digital self-triage via an app. By filling in information about your age, gender and complaints, you can determine within 1 minute whether you need to see a doctor and if so, how urgent it is.

Self-triage via the app

If you use the self-triage via the app, you enter personal data. We collect the following data from you:

  • Gender
  • Date of birth
  • Your answers to the questions about your complaints
  • Unique identifier (UID) for the device you’re using to use the app

Callback request

You can request a callback via the app. Your General Practitioner will then call you back. To request a callback, please leave personal data. We only send and process this personal data if you give us permission to do so.

We may request this information:

  • Name
  • Phone number
  • Address
  • Name of your GP
  • Citizen service number (BSN)
  • Description of your complaint
  • Photo of your complaint

Scientific research

Together with General Practitioners Emergency Stations, ‘Do I have to go to the doctor’ is participating in research to make the app better and safer. For this study, we use the following data: patient ID (anonymous and unique patient number in the GP Post Information System, HAPIS), the triage duration, age in years or date of birth, gender, the entry complaint based on the Dutch Triage Standard (NTS), urgency (urgency of the complaint) and the call result (care advice after self-triage). Scientists at Radboudumc, IQ Healthcare department, are investigating this data to determine how well the app works for GP emergency rooms. They do this to ensure that the app works as well as possible and as safely as possible for patients.

Why do we collect your personal data?

We collect this data to answer the question ‘Do I need to see a doctor?’ and to determine how urgent your care question is. Your privacy is important to us and that is why we handle your data properly. To improve the app, we process your data anonymously.

Learn more

For more information about what data we collect and how we use it, you can read our extensive privacy statement on our website. By using the app, you automatically agree to the terms of use on our website.

Note: If you have any questions about the result of the self-triage or if you are unsure whether you should see a doctor, please contact your GP or General Practitioner. They can advise you further and answer your health question.

Do I need to go to the doctor (MINDD)

Our website uses the self-triage service “Do I need to go to the doctor?” (hereinafter referred to as: the App), developed by MINDD B.V. in Apeldoorn. The App helps users determine whether contact with a doctor or general practitioner is necessary. Because personal data is processed in this process, we would like to inform you about how your data will be handled.

Data controller and joint processing

The App is technically and content-wise managed by MINDD B.V. Both MINDD B.V. and the General Practitioner Maastricht & Heuvelland (hereinafter referred to as the HAP) process personal data entered via the App:

  • MINDD B.V. processes the data for the operation, security, analysis and improvement of the App.
  • The HAP receives the results of the triage to follow up on the user’s care needs.

In this context, both parties are joint controllers within the meaning of the General Data Protection Regulation (GDPR).

MINDD B.V. and the HAP have made written agreements about this in a cooperation agreement in which the responsibilities for security, retention periods and rights of data subjects are laid down.

What data is processed?

When using the App, you enter personal data about yourself or about someone else. The App uses a unique session code (UID) so that not all data can be traced back to an individual.

The following data is processed via the App and is visible to both MINDD B.V. and the HAP:

  • Gender
  • Date of birth
  • Answers entered during triage
  • The outcome of the triage (urgency)

In addition:

  • When you request a callback, additional data will be processed: name, telephone number, address, GP, possibly a photo and the description of your complaint.
  • These callback requests are only visible to the HAP  and are automatically deleted after 72 hours.
  • MINDD B.V. does not have access to the content of callback requests, but can technically check whether the transmission has been correct.

Purposes of the processing

The personal data is processed for the following purposes:

  • Carrying out the triage and giving appropriate advice.
  • Forwarding triage results to the affiliated healthcare organization for follow-up.
  • Improving and analyzing the quality, security, and performance of the App.
  • Scientific research into the use and effectiveness of the App.

The data will not be used for marketing purposes and will not be shared with third parties outside the context of the care or research as described below.

Scientific research

MINDD B.V. conducts scientific research into the operation of the App in collaboration with GP surgeries and universities. Triage data is used for this purpose in anonymised form, whereby individuals cannot be traced. The research partners therefore do not receive any personal data that can be traced back to a user.

Data security

The App only uses secure (HTTPS) connections. Both MINDD B.V. and the HAP have taken appropriate technical and organizational measures to protect personal data against loss or unauthorized access.

All data is stored within the European Economic Area (EEA).

Retention periods

Triage results: are stored by MINDD B.V. for as long as this is necessary for analysis and improvement of the App, in accordance with MINDD’s main privacy statement.

Callback requests: Remain visible to the HAP for up to 72 hours and are then automatically deleted.

Statistical and research data: will only be kept in anonymized form.

Your rights

For questions or requests about inspection, correction, deletion or restriction of processing, please contact the Data Protection Officer of the HAP (info@hapmaastricht.nl)

General Practitioner Maastricht and Heuvelland

P. Debyelaan 25

6229 HX Maastricht

Changes

This addendum may be modified if the operation of the App or the cooperation with MINDD changes. The most current version is available via our website. More information about the security and data processing by MINDD can be found in the privacy statement of MINDD B.V.

13. Question or complaint

If you have a question or complaint about the way we handle your data, please contact our Data Protection Officer. The contact details are given below. If you cannot resolve the matter with our Data Protection Officer, you have the right to file a complaint with the Dutch Data Protection Authority.

14. Contact details

Maastricht and Heuvelland GP Post Foundation
Attn. Data Protection Officer
P.O. Box 5800
6202 AZ Maastricht
Tel: 043-387 7538
Email: info@hapmaastricht.nl