Privacy Policy

Data Controller

Dr. Olivia Mathot is the controller responsible for processing your personal data. You can contact us via the contact page of this website.

What Data We Collect

We collect the following personal data:

• Identification data: surname, first name, date of birth
• Contact data: phone number, e-mail address, address
• Health data: medical history, diagnoses, treatments, prescriptions
• Administrative data: billing, insurance information

Health data is collected only with your explicit consent and is subject to enhanced confidentiality. All data is stored exclusively within the practice itself and is never stored online.

Why We Use Your Data

Your data is used for:

• Providing medical care and dermatological treatments
• Managing appointments
• Billing and reimbursement via your health insurance fund
• Complying with legal obligations related to medical record-keeping

Legal Basis for Data Processing

We process your data on the following legal grounds:

• Performance of a medical treatment agreement: for the provision of care
• Legal obligation: for medical records and tax purposes
• Legitimate interest: for administrative purposes
• Explicit consent: where applicable for specific processing activities

Who Has Access to Your Data

Your data is only accessible to Dr. Olivia Mathot and, where applicable, administrative staff of the practice bound by professional secrecy. Your data may be shared with:

• Your health insurance fund, solely for invoice processing and reimbursement
• Other medical professionals, only if you have given explicit consent
• Legal authorities, only in response to a justified legal request

We never share your data with third parties for commercial or marketing purposes.

Data Retention

Your medical data is retained in accordance with Belgian legislation:

• Medical record: at least 30 years after the last consultation
• Billing and accounting data: at least 7 years, in accordance with Belgian accounting law

Data Security

All data is stored exclusively within the practice itself, not online. We take the following measures to protect your data:

• Physical security of the practice premises
• Access to data restricted to authorized persons
• Professional secrecy applies to all staff members

Your Rights

Under GDPR, you have the following rights:

• Right of access: you may obtain access to your personal data
• Right to rectification: you may have inaccurate data corrected
• Right to erasure: you may request deletion of data, insofar as legal retention periods allow
• Right to restriction: you may request restriction of the processing of your data
• Right to data portability: you may request your data in a readable format
• Right to object: you may object to certain processing activities

To exercise your rights, please contact us via the contact page of this website.

Cookies and Tracking

This website uses minimal tracking, solely for technical operation and anonymous website statistics. No personal data is collected via the website. You can block cookies via your browser settings.

Changes to This Privacy Policy

We reserve the right to amend this privacy policy. The most recent version is always available on this website. We recommend consulting this statement regularly.

Data Protection Authority

If you believe that your data is not being processed in accordance with GDPR, you may file a complaint with the Belgian Data Protection Authority (DPA):

• Website: www.dataprotectionauthority.be
• Address: Rue de la Presse 35, 1000 Brussels.