Privacy policy

Privacy Policy – Osteopathiepraktijk Tervuren

1. Data Controller

Osteopathiepraktijk Tervuren BVBA, Brusselsesteenweg 45, 3080 Tervuren, Belgium

Telephone: 02 256 95 30 | Email: info@osteopathiepraktijk.be

For questions about data protection and privacy, please contact Chris Ruddick at chrisruddick@osteopathiepraktijk.be.

2. What personal data do we process?

We process the following categories of personal data that you provide directly to us or that we collect in the context of our services:

Identification data: first name, last name, date of birth, address, phone number, email address.

Health data: medical history, complaints, medical background, treatment reports and other information relevant to osteopathic treatment.

Financial data: payment history and invoicing data.

Communication data: correspondence related to appointment management and follow-up care.

3. Purposes and legal bases for processing

We process your data solely for the purposes described below and on the basis of the following legal grounds under the GDPR:

Patient care and treatment – Legal basis: performance of a contract (Art. 6.1.b GDPR); legal obligation (Art. 6.1.c GDPR); for health data: provision of health care by a health professional (Art. 9.2.h GDPR).

Appointment management and communication – Legal basis: legitimate interest (Art. 6.1.f GDPR).

Accounting and invoicing – Legal basis: legal obligation (Art. 6.1.c GDPR).

Direct marketing and newsletters – Legal basis: explicit consent (Art. 6.1.a GDPR). You may withdraw your consent at any time.

4. Transfer to third parties

Your personal data is shared with the following processors, solely to the extent necessary to fulfil the purposes set out above:

Introlution BVBA – for online appointment and scheduling software management.

Paul Van Sitteren BVBA – for the secure server storage of patient records.

All processors are bound by a data processing agreement compliant with Art. 28 GDPR and provide sufficient guarantees regarding technical and organisational security.

Your personal data is not transferred to countries outside the European Economic Area (EEA), unless adequate safeguards have been established in accordance with the GDPR. We never sell your data to third parties and do not share it for commercial purposes.

5. Retention periods

Patient records are retained for the period necessary to comply with legal obligations. In accordance with Belgian healthcare legislation (Patient Rights Act), health data is retained for a minimum of 30 years after the last treatment.

Accounting data and invoices are retained for 7 years in accordance with the Code of Economic Law.

Data processed on the basis of consent (e.g. marketing communications) is retained until consent is withdrawn.

6. Your rights

As a data subject, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): you may request a copy of the data we hold about you.

Right to rectification (Art. 16 GDPR): you may request the correction of inaccurate or incomplete data.

Right to erasure (Art. 17 GDPR): you may request the deletion of your data, subject to legal retention obligations.

Right to restriction of processing (Art. 18 GDPR): you may request that processing be limited in certain circumstances.

Right to object (Art. 21 GDPR): you may object to processing based on legitimate interest or for direct marketing purposes.

Right to data portability (Art. 20 GDPR): you may request your data in a structured, commonly used and machine-readable format, or its transfer to another controller.

To exercise these rights, send an email to chrisruddick@osteopathiepraktijk.be with proof of your identity. We will respond within the statutory period of 30 days.

7. Security

Osteopathiepraktijk Tervuren BVBA takes appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, modification or disclosure. Our processors are equally required to maintain appropriate security measures.

8. Cookies

Functional cookies – Technical cookies that are necessary for the proper functioning of the website. These cookies do not require consent.

Analytical cookies – We use Google Analytics to anonymously analyse website usage. IP addresses are anonymised and data sharing with Google is restricted. Analytical cookies are only placed with your consent.

You can change your cookie preferences at any time via the cookie banner or via your browser settings. Please note that refusing certain cookies may affect the functionality of the website.

9. Complaint with the supervisory authority

If you believe that your personal data is being processed incorrectly or unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD):

Data Protection Authority | Drukpersstraat 35, 1000 Brussels

Email: contact@apd-gba.be | Website: www.dataprotectionauthority.be

10. Amendments to this Privacy Policy

Osteopathiepraktijk Tervuren BVBA reserves the right to amend this Privacy Policy at any time to comply with changes in legislation or to update our processing practices. The most recent version is always available on our website. In the event of significant changes, we will endeavour to inform you in a timely manner.

Version: August 2026