Privacy Policy

Last updated: November 2026

At Chiropractie Rugcentra A.B. van Beest, we place great importance on your privacy and the careful handling of your personal and medical information.

In this Privacy Policy, we explain which personal data we collect and process, why we process it, with whom we may share it, how we protect it, and what rights you have.

1. Who is responsible for your personal data?

The data controller is:

Chiropractie Rugcentra A.B. van Beest D.C. B.V.
Nassaulaan 3a
6006 PB Weert
The Netherlands

Chamber of Commerce registration number: 12047903
Telephone: +31 (0)495 545345
Email: secretariaat@rugcentrum.nl

This Privacy Policy applies to our chiropractic practices and our websites, including www.rugcentrum.nl.

Chiropractie Rugcentra A.B. van Beest employs chiropractors who are affiliated with different professional associations and/or registers, including the Dutch Chiropractic Federation (DCF) and the Nederlandse Chiropractoren Associatie (NCA).

Professional association membership and registration may vary between chiropractors. Where possible, our website indicates which professional association and/or register each chiropractor is affiliated with.

2. What personal data do we process?

When you become a patient, contact us, book an appointment or use our website, we may process your personal data.

Depending on the circumstances, this may include:

Your name, address and place of residence
Date of birth
Gender
Telephone number and email address
Appointment details
Administrative and financial information
Information you provide to us
Information about your health and medical history
Details of your symptoms and complaints
Examination results and clinical findings
Information about your treatment and its progress
Treatment notes and other information contained in your patient record
Relevant information lawfully received from other healthcare professionals involved in your care
Correspondence with you and, where applicable, other healthcare professionals involved in your treatment
Technical information processed when you use our website, such as your IP address and cookie data

We do not process more personal data than is necessary for the purposes for which it is collected and used.

3. Health information and your patient record

To provide you with appropriate chiropractic care, we need to process information about your health.

Health information is classified as a special category of personal data and is therefore handled with particular care.

We maintain an electronic patient record for our patients. This may include your medical history, symptoms, examination findings, treatment plans, treatments provided, correspondence and information about the progress of your treatment.

We use ClinicBuddy to manage patient information, appointments and related practice processes.

Access to your patient record is restricted to employees and healthcare professionals who need this information to perform their duties.

All employees and healthcare professionals are required to maintain confidentiality and, where applicable, comply with professional confidentiality obligations.

4. Why do we process your personal data?

We process your personal data for purposes including:

Registering you as a patient
Scheduling, changing and confirming appointments
Carrying out examinations and chiropractic treatments
Creating and maintaining your patient record
Monitoring the progress and results of your treatment
Communicating with you about appointments and treatment
Sending appointment reminders and other information relevant to your care
Communicating with other healthcare professionals involved in your treatment when necessary and permitted
Managing our administration, invoicing and payment processing
Responding to questions, comments and complaints
Monitoring quality and improving our care and services
Complying with legal and professional obligations
Ensuring the security and proper functioning of our website and digital systems

We process your personal data only when there is a valid legal basis for doing so.

Depending on the processing activity, this may include the performance of a treatment agreement, compliance with a legal obligation, a legitimate interest or your consent.

Additional legal requirements apply to the processing of health information.

5. ClinicBuddy

We use ClinicBuddy for practice administration, appointment management and electronic patient records.

Through ClinicBuddy, personal and medical information may be processed where necessary for purposes including:

Managing your patient record
Managing appointments
Recording examination and treatment information
Practice administration
Communication relating to appointments and treatments

As a healthcare provider, we remain responsible for ensuring that your personal data is processed carefully and appropriately.

Where necessary, we enter into agreements with service providers that process personal data on our behalf, covering matters such as confidentiality, data security and the processing of personal information.

6. With whom do we share your personal data?

We do not sell your personal data to third parties.

We share personal data only when necessary for your treatment or our business operations, when another valid legal basis applies, or when we are legally required to disclose information.

Depending on the circumstances, personal data may be processed by or shared with:

Other healthcare professionals involved in your treatment
ClinicBuddy, as the provider of our practice management and electronic patient record system
IT, hosting and security service providers
Administrative and payment service providers
Professional associations, professional registers, complaints officers or dispute resolution bodies when necessary or permitted
Government authorities when we are legally required to provide information

When sharing medical information, we comply with medical confidentiality obligations and applicable legal requirements.

Where your consent is required before medical information can be shared with another healthcare professional or third party, we will ask for your permission.

7. DCF and NCA

Chiropractie Rugcentra A.B. van Beest employs chiropractors who belong to different professional associations.

Some of our chiropractors are affiliated with the Dutch Chiropractic Federation (DCF), while others are members of the Nederlandse Chiropractoren Associatie (NCA).

The professional association and any applicable complaints or dispute resolution procedure may therefore depend on the chiropractor providing your treatment.

Where possible, our website identifies the relevant professional association and/or professional register for each chiropractor.

Do you have a complaint about your treatment? We recommend contacting us first.

If necessary, we will inform you about the complaints or dispute resolution procedure applicable to your chiropractor.

8. Data retention periods

We do not retain personal data for longer than necessary for the purposes for which it was collected, unless a legal obligation or another legitimate reason requires us to retain it for a longer period.

Medical patient records are generally subject to a statutory retention period of 20 years from the date of the last amendment to the record.

Under certain circumstances, medical information may or must be retained for longer, for example when necessary to provide appropriate care or when another legal obligation applies.

Different statutory or necessary retention periods may apply to administrative, financial and other personal data.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, unlawful modification, destruction or disclosure.

We restrict access to patient information to individuals who need it to perform their duties.

We also expect organisations that process personal data on our behalf to implement appropriate security measures.

10. Website and cookies

When you visit our website, technical information may be processed, including your IP address, browser type, device information and details about how you use our website.

Our website may use cookies and similar technologies.

Some cookies are necessary for the technical operation and security of the website.

For cookies and similar technologies that legally require consent, we will ask for your permission in advance through our cookie settings or cookie banner.

Details of the cookies and external services used on our website are provided in our Cookie Policy and/or the cookie settings available on the website.

Where applicable, you can change or withdraw your cookie preferences through our website.

11. Contact and appointment forms

When you complete a contact or appointment form on our website, we process the information you provide to respond to your request or arrange an appointment.

We ask that you do not include extensive medical information in a general contact form unless that form has been specifically designed to process such information securely.

If you book an appointment online directly through ClinicBuddy or a connected service, the information you enter may be processed within the relevant appointment system.

12. Email, telephone and other communication

When you contact us by email, telephone or another communication channel, we process the information necessary to answer your questions, arrange appointments or provide our services.

If the communication is relevant to your treatment, the information may be included in your patient record.

Please be aware that ordinary email is not always suitable for sending detailed or highly sensitive medical information.

If you are unsure, please contact us by telephone.

13. Your privacy rights

Under applicable data protection legislation, you have various rights concerning your personal data.

Depending on the circumstances, these may include the right to:

Request access to the personal data we process about you
Request a copy of your personal data or patient record
Have inaccurate or incomplete personal data corrected
Request the deletion of personal data in certain circumstances
Request restrictions on the processing of your personal data in certain circumstances
Object to certain types of processing
Request the transfer of personal data in certain circumstances
Withdraw previously given consent
Request information about who has accessed your medical record, insofar as this right applies under the law

Specific legal requirements apply to medical records. As a result, we cannot automatically comply with every request to amend or delete information.

If you wish to exercise any of your privacy rights, please contact us at:

secretariaat@rugcentrum.nl

To prevent personal information from being disclosed to the wrong person, we may ask you to verify your identity using an appropriate method.

We will not request more information than is necessary.

14. Minors

Special legal requirements apply to the treatment of minors and the processing of their personal data.

The rules regarding consent, information, access to patient records and the exercise of privacy rights depend, among other things, on the minor’s age.

We take these legal requirements into account when processing personal data relating to minors.

15. Third-party websites

Our website may contain links to websites operated by other organisations, including professional associations and other healthcare-related organisations.

This Privacy Policy does not apply to third-party websites.

We therefore recommend reviewing the privacy policy of any external website you visit.

16. Privacy complaints

Do you have questions about this Privacy Policy, or are you dissatisfied with the way we handle your personal data?

Please contact us: