Your personal data and your privacy in our general practice


The GDPR is the new law for the protection of privacy and personal data. Under this law, an organization that works with personal data has certain obligations and the person whose data it has has certain rights. In addition to this general law, specific rules apply to privacy in healthcare. These rules are stated, among other things, in the Medical Treatment Contracts Act (WGBO). These privacy regulations are intended to inform you of your rights and our obligations under the GDPR and the WGBO.


General practice

In our general practice, various personal data about you can be processed. This is necessary in order to be able to treat you properly and necessary for the financial handling of the treatment. In addition, processing may be necessary, for example, to combat serious health risks or to comply with a legal obligation (for example, the mandatory reporting of an infectious disease under the Public Health Act).

The duties of the general practice

According to the GDPR, Huisarts@Holtenbroek is responsible for the processing of personal data that takes place in practice. Practice fulfills the resulting duties as follows:

  • Your data is collected for specific purposes:

    • for care provision;

    • for efficient management and policy;

    • to support scientific research, education and information.

  • In principle, no processing takes place for other purposes.

  • You will be informed that your personal data is being processed. This can be done by your healthcare provider, but also via a folder or via our website.

  • All employees within Huisarts@Holtenbroek have undertaken to treat your personal data confidentially.

  • Your personal data is well protected against unauthorized access.

  • Your personal data will not be kept longer than is necessary for proper care provision.


For medical data, this retention period is in principle 15 years (from the last treatment), unless longer storage is necessary, for example for the health of yourself or your children. This is at the discretion of the practitioner.


Your rights as a data subject

You have the following rights:

  • The right to know whether and which of your personal data is processed.

  • The right to inspect and copy this information (insofar as it does not harm the privacy of another).

  • The right to correction, addition or deletion of data if necessary.

  • The right to request (partial) destruction of your medical data. This can only be met if the retention of the data is not of significant importance to another and the data must not be retained on the basis of a statutory regulation.

  • The right to add a personal statement (of a medical nature) to your file.

  • The right to object to the processing of your data in certain cases.


If you want to exercise your rights, you can inform Huisarts @ Holtenbroek verbally or by using an application form. Your interests may also be represented by a representative (such as a written proxy, or your trustee or mentor).

Explanation of the application form

You must take into account that medical data is, in principle, stored for a maximum of fifteen years. You can help us look up your file and protect your privacy by completing the form as completely as possible. We will treat the data you have entered as strictly confidential. Huisarts@Holtenbroek is not liable for errors in postal delivery. If you prefer to collect the file personally, or by an authorized representative, you can indicate this on the form.

Patient data

Please state the details of the person about whom the medical file is concerned. The Medical Agreement Act (WBGO) regards the patient as an adult from the age of 16. Young people from the age of 16 who want to view / copy their medical file must submit the application themselves. If the patient is no longer alive, the provision of the medical data is permitted if it can be assumed that the deceased would not have objected to this or if there are compelling interests to break the care provider's obligation to remain silent. This decision rests with the healthcare provider.

Provision of your personal data to third parties

The employees of Huisarts@Holtenbroek have an obligation to treat your personal data confidentially. This means, for example, that the healthcare provider requires your explicit permission to provide your personal data. However, there are some exceptions to this rule. On the basis of a statutory regulation, the healthcare provider's obligation to remain silent can be broken, but also when there is a fear of a serious danger to your health or that of a third party. In addition, recorded data can, if necessary, be exchanged orally, in writing or digitally with other care providers (for example, the pharmacist who processes a prescription and is thus provided with data by the general practitioner).

Exchange of data
After you have given specific permission, Huisarts@Holtenbroek exchanges relevant medical data safely and reliably with the GP service (HAP) via the National Switch Point. If you have been to the HAP in the evenings or during the weekend, it will in turn share an observation message with the general practitioner. This way, the GP knows exactly with which complaints you have been at the HAP and what has been done as a result.

Medication data can also be shared with your pharmacy and your attending medical specialists. This concerns the medication that your GP has prescribed for you, but also any intolerances, contraindications and allergies (ICA data). Other prescribers and providers of medication can take this into account. In this way, we as a GP practice contribute to medication safety.

Transfer of your file

If you choose a new general practitioner, it is important that your new general practitioner is aware of your medical history. Your medical history is in your patient record. It is usual for your old GP to transfer the file to your new GP. The old doctor will do this as soon as possible, at least within a month, after you have asked your old doctor to transfer the file to your new doctor.

Your medical file will then be transferred by your GP personally or by registered mail. You cannot get the original file. However, you are always entitled to inspect your file and a copy of your file. The file can (if possible) also be transferred to the new GP by e-mail. Both GPs must then ensure that their computer and internet connections are sufficiently secured.

Question or complaint

Do you have a question or a complaint? For example, with whom we share data or how we handle your medical data? Then your doctor will be happy to discuss this with you.

©2020 by Huisarts@Holtenbroek. Proudly created by N.L. Rijkers-Koorn