Updated: April 23, 2025

At BioHernia, we are committed to protecting your personal data and ensuring transparency about how we collect, use, and safeguard your information. This Privacy Policy outlines our practices in compliance with the General Data Protection Regulation (GDPR) and Dutch healthcare laws, including the Medical Treatment Agreement Act (WGBO).

1. Scope of This Policy

This policy applies to all personal data collected through our website, consultation forms, communications, and during the course of providing our medical services.

2. Data We Collect

We collect personal data that you provide directly to us, including:

• Identification Information: Name, date of birth, contact details (address, phone number, email).

• Health Information: Medical history, current health conditions, treatment details.

• Administrative Data: Insurance information, payment details.

• Technical Data: IP address, browser type, operating system, and browsing behavior on our website.

3. Purpose of Data Collection

Your data is collected for the following purposes:

• Medical Care: To provide accurate diagnosis, treatment, and follow-up care.

• Communication: To contact you regarding appointments, treatment plans, and administrative matters.

• Legal Compliance: To fulfill our obligations under Dutch law, including data retention requirements.

• Quality Improvement: To enhance our services through internal audits and patient feedback.

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit permission for specific processing activities.

• Contractual Necessity: To fulfill our obligations under the treatment agreement.

• Legal Obligation: To comply with legal requirements, such as data retention under the WGBO.

• Legitimate Interests: For purposes like quality improvement, provided your rights do not override these interests.

5. Data Retention

In accordance with Dutch healthcare law (Wet op de geneeskundige behandelingsovereenkomst – WGBO), we are legally required to retain your medical records for a minimum of 20 years from the date of your last treatment.

This retention period may be extended if:

• It is necessary for your health or the health of your children.

• There is a medical or legal reason to do so.

If you request that your data be deleted earlier, we will assess whether this request is compatible with our legal and professional obligations before taking action.

6. Data Sharing

We do not sell or rent your personal data. We may share your data with:

• Healthcare Providers: Involved in your treatment, under strict confidentiality.

• Service Providers: Who assist with administrative tasks, bound by data processing agreements.

• Legal Authorities: When required by law or court order.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Access Controls: Limiting access to authorized personnel.

• Encryption: Securing data during transmission and storage.

• Regular Audits: Monitoring our systems for vulnerabilities.

8. Your Rights

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data.

• Rectification: Correct inaccurate or incomplete data.

• Erasure: Request deletion of your data, subject to legal and medical constraints.

• Restriction: Limit processing of your data under certain conditions.

• Objection: Object to processing based on legitimate interests.

• Data Portability: Receive your data in a structured, commonly used format.

To exercise these rights, please contact us at info@biohernia.com.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience. For detailed information, please refer to our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically.