Read which personal data we process, why we process it and which rights you have.
Your privacy and medical confidentiality are central when you contact us or book an appointment.
This policy explains how Surgiplast Clinic, Doctena and our technical service providers handle personal data.
Surgiplast Clinic, company number BE 0563.489.529, located at Pampertstraat 54, 3590 Diepenbeek, is the controller of personal data processed through this website, its contact form and appointments with the practice.
For privacy questions, contact us at info@surgiplast.be or by phone at 011 22 78 11.
When you contact us, we process the information you provide, such as your name, email address, phone number and message. We use it only to answer your question, prepare an appointment and follow up our communication with you.
For online booking, your selected reason for visiting, name, date of birth, contact details, appointment information and any information you voluntarily add may be processed. A reason for visiting or medical explanation can reveal health information and therefore receives special protection.
Technical information, such as pages visited, device category and general usage data, is processed through Google Analytics only when you accept analytical cookies. We do not send reasons for visiting, medical information, form contents or other patient data to Google Analytics.
We process ordinary personal data when necessary to take steps at your request before entering into a healthcare or service agreement, to perform that agreement, to meet legal obligations or on the basis of our legitimate interest in handling questions safely and carefully.
Health data is processed where necessary for healthcare or the management of healthcare services, under the responsibility of a healthcare professional bound by professional secrecy (Article 9(2)(h) GDPR). Analytics measurement takes place only on the basis of your consent.
Surgiplast Clinic determines the purpose of processing appointment and patient data and is the controller for that processing. Doctena processes this data on our behalf as processor. Doctena is separately a controller for an optional Doctena patient account and its own security and platform data.
The secure Doctena booking service opens after you follow a link from our website to the external appointment page. Doctena manages live availability, identity verification, consents, confirmations and creation of the final appointment. Surgiplast Clinic must maintain an Article 28 GDPR Data Processing Agreement with Doctena.
More information is available in the Doctena Trust Center and Doctena privacy policy.
We share personal data only where needed for the purposes described, with authorised staff and carefully selected service providers. These include Doctena for appointments, Netlify for hosting and form processing, and technical suppliers supporting website security and operation.
Google Analytics is loaded only after your consent. Where a supplier processes data outside the European Economic Area, we require a valid transfer mechanism and appropriate safeguards, such as an adequacy decision or Standard Contractual Clauses.
We keep contact and appointment data no longer than needed to answer your question, organise and follow up healthcare, meet legal obligations and defend legal rights. Medical and administrative records may be subject to statutory retention periods.
For data processed on our behalf, Doctena applies the retention periods set out in the agreement and the practice’s instructions. Contact us for information about the period that applies to your situation.
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time, without affecting earlier lawful processing.
To exercise your rights, contact us using the email address above. We may request additional information to verify your identity. You may also lodge a complaint with the Belgian Data Protection Authority.
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and unlawful disclosure. Access is limited to people who need the data for their duties and who are bound by confidentiality or professional secrecy.
Please avoid including medical information in a general contact form unless it is needed to answer your initial question. Use the secure booking service for appointments or contact the practice by phone.
We may update this privacy policy when our services, suppliers or legal obligations change. The date of the most recent version appears at the top of this page.
