Privacy policy

(M3 Healthcare B.V. trading as Kaakchirurgie Zuidas)

Version: 18 August 2025

At Kaakchirurgie Zuidas, we highly value the protection of your personal data. This privacy policy explains how we handle your information, in compliance with the General Data Protection Regulation (GDPR) and the Dutch Medical Treatment Agreement Act (WGBO).

1. Data Controller

M3 Healthcare B.V. trading as Kaakchirurgie Zuidas
Gelrestraat 314
1079 MZ Amsterdam
Chamber of Commerce (KvK): 89362632
E-mail: info@kaakchirurgie-zuidas.nl
Tel: +31 (0)20-3086055

2. What personal data do we process?

We process the following types of personal data:

• Identification data: name, address, date of birth, citizen service number (BSN), gender

• Contact details: telephone number, e-mail address

• Insurance and financial details (for invoicing/claims)

• Medical information: treatment history, medical records, referral letters

• Login and usage data of the patient portal (OASE Dental)

• Technical data: IP address, cookie information (Google Analytics, Google Maps)

3. Purposes and legal bases

We process your personal data for the following purposes:

1. Medical care – providing treatments and maintaining medical records (WGBO / GDPR Article 9(2)(h)).

2. Administration and invoicing – submitting claims to health insurers, invoicing via Infomedics (legal obligation).

3. Patient portal (OASE Dental) – providing secure access to appointments and your medical file (performance of treatment agreement).

4. Communication – contacting you by phone or e-mail regarding appointments or treatment plans (legitimate interest).

5. Website and usage statistics – measuring website usage via Google Analytics (consent via cookie banner).

6. Map display (Google Maps) – showing directions on our contact page (consent via cookie settings).

We do not use personal data for commercial marketing without your explicit consent.

4. Sharing of data

Your data may be shared with:

• Health insurers (for claims)

• Referring general practitioners, dentists, orthodontists, and medical specialists

• Infomedics (invoicing)

• Software providers of the electronic patient record (EPR)

• OASE Dental (patient portal)

• IT service providers for hosting and security (within the EU)

• Google (Analytics, Maps) – only with your consent via cookies

No transfers outside the EU take place without appropriate safeguards.

5. Retention periods

• Medical records: at least 20 years (as required by WGBO)

• Invoices and administrative records: 7 years (tax obligation)

• Cookies and analytics data: according to the retention periods set in Google Analytics

6. Security

We take appropriate technical and organisational measures, including:

• Encrypted storage and communication (SSL/HTTPS, encryption)

• Access restrictions: only authorised staff can view your data

• Regular backups and security checks

• Compliance with NEN 7510 guidelines for information security in healthcare

7. Your rights

You have the right to:

• Access your personal data

• Rectify or update your data

• Request deletion of your data (where legally permitted)

• Restrict or object to the processing of your data

• Receive your data in a portable format (data portability)

Requests can be submitted via info@kaakchirurgie-zuidas.nl. We will respond within one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

8. Cookies and tracking

Our website uses cookies and similar technologies:

• Necessary cookies: to ensure the functioning of the website and the patient portal

• Analytical cookies: via Google Analytics, only with your consent

• External content: Google Maps on the contact page may process your IP address

When you first visit our website, you will be asked to set your preferences via the cookie banner.

9. Changes

We reserve the right to amend this privacy policy. Updates will be published on our website and will apply from the date of publication.