Mental health care for LGBT+
Kaleidos is located in Amsterdam and is registered under number 89099087 with the Chamber of Commerce. We value the protection of personal data. This privacy statement explains how Kaleidos handles information about an identified or identifiable natural person, as referred to in the General Data Protection Regulation (AVG in Dutch).
Application
This privacy policy applies to the following categories of natural persons for whom Kaleidos processes personal data:
1. (potential) clients;
2. visitors to the premises of Kaleidos;
3. visitors of www.kaleidos.nl;
4. participants in Kaleidos' meetings;
5. all other individuals who contact Kaleidos or whose personal data Kaleidos processes.
Processing of Personal Data
At Kaleidos, we process personal data that:
1. an individual has personally provided (during a meeting or gathering), by telephone, or digitally (via email or web forms on the website), such as contact details or other personal information;
2. are requested with the consent of the individual from other caregivers or referrers;
3. have been generated during a visit by an individual to Kaleidos' website through completion of the registration form;
4. during sessions (always with the consent of the individual), session summaries and/or audio or video recordings may be captured for quality purposes. These are stored encrypted and immediately deleted after discussions with colleagues.
Purposes of Processing
At Kaleidos, we process personal data for the following purposes:
1. executing a medical treatment agreement and invoicing for services rendered;
2. maintaining contact, by sending invitations to meetings and providing information requested by an individual;
3. improving the practice website www.kaleidos.nl;
4. maintaining user statistics. User statistics for the website provide information about the number of visitors, duration of visits, which parts of the website are viewed, and click behavior. These are generic reports that cannot be traced back to individual visitors.
Legal Basis
At Kaleidos, we process personal data based on one of the following legal bases:
1. consent of the individual. This consent can always be withdrawn without affecting the lawfulness of processing based on consent before the withdrawal;
2. execution of - or with a view to - a medical treatment agreement, including billing to third parties such as health insurance companies, etc.;
3. a legal obligation, such as the obligation to maintain a medical record or register the Citizen Service Number (BSN);
4. a legitimate interest, such as using contact information to invite individuals to a meeting.
Data Processors
At Kaleidos, we may engage service providers (data processors) to process personal data solely according to Kaleidos' instructions. We enter into data processing agreements with data processors that meet the requirements of the General Data Protection Regulation (AVG in Dutch).
Sharing Personal Data with Third Parties
At Kaleidos, we share personal data with third parties if it is necessary within the context of treatment (e.g., referral) or required to fulfill a legal obligation. At Kaleidos, we do not share personal data with third parties for commercial purposes.
Transfer outside the EEA
At Kaleidos, we generally do not transfer personal data to countries outside the European Economic Area (EEA). If necessary, Kaleidos ensures that transfers only occur if the European Commission has determined that the country provides an adequate level of protection or if appropriate safeguards are in place in accordance with the General Data Protection Regulation (AVG in Dutch).
Data Retention
At Kaleidos, we do not retain personal data longer than necessary. In principle, we follow these retention periods:
1. medical data: at least 15 years after the end of the treatment agreement;
2. (financial) administrative data: 7 years after recording the data;
3. data of employees and freelancers, other than (financial) administrative data: 5 years after leaving employment or after the end of the contract;
4. data of job applicants: 6 months after completion of the application process.
Changes to Privacy Policy
Kaleidos can change this privacy policy at any time. An up-to-date version of the privacy policy will be published on the Kaleidos website. It is advisable to regularly consult this privacy policy to stay informed about any changes.
Rights, Questions, and Complaints
You have the right to request Kaleidos to access, rectify, delete, transfer, restrict processing, and object to the processing of personal data. You can contact Kaleidos by sending an email to info@kaleidos.nl for this purpose.
For questions or complaints about how Kaleidos processes personal data, you can also contact us by sending an email to info@kaleidos.nl. We aim to resolve complaints to your satisfaction. If that is not successful, you can turn to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - AP in Dutch).
(Model D LVVP)
