Holistische Arts
🇬🇧 en
Legal

Privacy Policy

How we protect and process your personal data and medical information.

Holistische Arts (trading as HPV Health) values the protection of your personal data. This privacy policy explains which data we collect, why we collect it, how we protect it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Medical Treatment Agreement Act (WGBO).

Last updated: 11 April 2026

1. Data controller

Holistische Arts (HPV Health) is the data controller responsible for processing your personal data.

Locations:
Bonnerveen 32, 9511 PN Gieterveen
Huizermaatweg 15, 1273 NA Huizen (Business Centrum Huizen, room 15.4 and 15.5)

Contact: info@hpvhealth.nl

2. Which data do we process?

Depending on the nature of your contact with us, we may process the following data:

  • Contact details: name, email address, phone number
  • Appointment details: date, time, location and type of consultation
  • Health data: medical history, smear test results, HPV status, complaints and symptoms, completed questionnaires
  • Treatment data: intake notes, treatment plan, follow-up advice and consultation reports
  • Financial data: billing address and payment details for consultations and treatments
  • Website data: anonymized visitor statistics (only after your consent via the cookie banner)

3. Why do we process this data?

We process your personal data solely for clearly defined purposes:

  • To contact you in response to your message or request
  • To schedule, conduct and administer consultations
  • To design and carry out a careful treatment plan
  • To comply with legal obligations (such as keeping a medical record under the WGBO)
  • To invoice you for the services provided
  • To improve our website and services (based solely on anonymized statistics)

4. Legal basis for processing

We base the processing of your data on the following legal grounds under the GDPR:

  • Consent (art. 6(1)(a)): when filling out the contact form, for website analytics, and for processing health data you voluntarily share with us
  • Performance of a contract (art. 6(1)(b)): for carrying out the treatment agreement
  • Legal obligation (art. 6(1)(c)): for maintaining a medical record and financial administration
  • Explicit consent for health data (art. 9(2)(a)): your consent on the contact form counts as explicit consent for processing the health data you provide

5. How long do we keep your data?

We do not keep your data longer than necessary:

  • Medical records: 20 years after the last contact, as required by the WGBO
  • Financial records: 7 years, as required by the Dutch tax authorities
  • Contact form requests (without follow-up appointment): maximum 12 months
  • Website analytics: anonymized and maximum 12 months

6. With whom do we share your data?

We do not share your data with third parties unless necessary for our services or legally required. For some technical services we work with carefully selected processors:

  • Formsubmit: for handling contact form messages via email
  • Email provider: for sending and receiving our business email
  • Analytics provider (in the EU): for anonymized website statistics, only after your consent

We have appropriate agreements with these parties (or are putting them in place) to safeguard the protection of your data. We never sell your data to third parties.

7. Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. We use encrypted connections (HTTPS), access controls on our systems, and confidentiality as a guiding principle in everything we do.

As healthcare providers, we are also bound by medical professional confidentiality.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — you may see what data we hold about you
  • Right to rectification — you may have incorrect data corrected
  • Right to erasure — where the legal retention obligation allows
  • Right to restriction of processing
  • Right to data portability — you may receive your data in a structured format
  • Right to object to the processing
  • Right to withdraw consent, without affecting processing that took place prior to the withdrawal

To exercise these rights, please contact info@hpvhealth.nl. We will respond to your request within four weeks.

9. Cookies and analytics

Our website does not use tracking cookies. To improve our website, we use anonymized website analytics that are only activated after you have given consent via the cookie banner. If you decline, no analytics data is collected.

You can change your choice at any time by clearing your browser cookies or by contacting us.

10. Complaints

If you disagree with how we process your personal data, please contact us first at info@hpvhealth.nl — we are happy to look for a solution together.

You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). More information is available at autoriteitpersoonsgegevens.nl.

11. Changes

This privacy policy may be updated from time to time, for example due to legislative changes or new services. You can always find the most recent version on this page. For significant changes, we will inform you in advance.

More information

Read more about this topic.

Read more