Privacy Policy

Data Controller

New Explanation Psychology is responsible for the processing of your personal data as described in this privacy policy. We process data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Medical Treatment Contracts Act (WGBO).

What data do we process?

• • Contact details: name, email address, phone number
• • Main concern: your description of the reason for registration
• • Questionnaires: scores and responses to screening questionnaires (PHQ-9, GAD-7, ISI)
• • Appointments: date, time and status of appointments
• • Treatment notes: notes made during treatment

Storage and Security

Your data is securely stored on servers in the European Union (Frankfurt, Germany), in accordance with GDPR. We apply the following security measures:

• • Encrypted connections (SSL/TLS)
• • Role-based access control
• • Audit logging of all access to patient data
• • Regular backups
• • Compliance with NEN 7510 guidelines

Retention Period

We retain your medical data in accordance with WGBO for at least 20 years after the end of the treatment relationship. Contact details from registrations that do not lead to treatment are deleted after 1 year.

Your Rights

You have the following rights regarding your data:

• • Access: You can request which data we hold about you
• • Correction: You can have incorrect data corrected
• • Deletion: You can request deletion of your data
• • Portability: You can request your data in a transferable format
• • Objection: You can object to the processing

Contact

For questions about this privacy policy or to exercise your rights, you can contact us by email. You also have the right to file a complaint with the Dutch Data Protection Authority.