Privacy policy Osteo Elout

Last updated: 7 November 2026


Osteo Elout handles your personal data with care. In this privacy policy, I explain what information I collect, why I process it, how I protect it and what rights you have.


1. Who is responsible for your personal data?

Osteo Elout is responsible for processing personal data as described in this privacy policy.


Osteo Elout

Eisenhowerlaan 81

2517 KK The Hague

Email: info@osteo-elout.nl

Phone/WhatsApp: +31 6 3928 4774

Chamber of Commerce (KvK): 83058559

AGB practice registration: 90097221

AGB healthcare provider registration: 90122389

NRO registration: NRO-10693


2. What personal data do I process?

When you contact Osteo Elout, book an appointment or receive treatment, I may process your personal data. This includes information necessary for providing appropriate healthcare, communication and administration.


This may include:

  • Name, address and place of residence;
  • Telephone number and email address;
  • Date of birth;
  • Information about your health, symptoms and medical history;
  • Information about previous examinations, treatments or referrals;
  • Information required to maintain your patient records;
  • Details of appointments, treatments and treatment advice;
  • Information required for invoicing, payments and administration;
  • Correspondence via email, WhatsApp, telephone or the contact form.


I only process personal data that is necessary for the purpose for which it was collected.


3. Why do I process your personal data?

I process personal data for the following purposes:

  • Scheduling and confirming appointments;
  • Carrying out osteopathic assessments and treatments;
  • Maintaining patient records;
  • Recording findings, treatment details and advice;
  • Communicating about appointments, treatments or enquiries;
  • Preparing and sending invoices;
  • Financial administration;
  • Complying with legal obligations;
  • Quality assurance and practice management.


Health information is only processed where necessary for treatment, maintaining patient records and providing healthcare.


4. What is the legal basis for processing your personal data?

I process personal data on the basis of the treatment agreement, legal obligations and the legitimate interests of the practice, such as maintaining accurate administration and ensuring accessibility.


Health information is classified as special category personal data. I only process this information where necessary to provide healthcare and maintain patient records.


5. Who do I share your personal data with?

I do not share your personal data with third parties unless this is necessary for treatment, administration or to comply with legal obligations.

In certain circumstances, information may be shared with:

  • Your GP or another healthcare professional, only where necessary and in consultation with you;
  • An accountant or administrative service provider;
  • Software providers responsible for appointment scheduling, patient records, invoicing or administration;
  • A payment service provider, if you make a digital payment;
  • Relevant authorities where required by law.


Personal data is only shared where necessary and in accordance with applicable privacy regulations. Where required, data processing agreements are established with parties that process personal data on behalf of Osteo Elout.


6. How long do I retain your personal data?

Medical records are retained in accordance with statutory retention periods. In the Netherlands, medical records must generally be kept for 20 years.


Administrative information, such as invoices and payment records, is retained for as long as necessary to meet financial administration requirements and legal obligations.


Personal data is not retained for longer than necessary for the purpose for which it was collected, unless a legal obligation requires a longer retention period.


7. How do I protect your personal data?

Osteo Elout takes appropriate measures to protect your personal data against loss, unauthorised access, misuse or unauthorised modification.


I handle patient records carefully and, wherever possible, use secure systems for practice administration, patient record management and communication. Access to personal data is restricted to individuals or organisations that require it to carry out their work.


8. Contact via email, WhatsApp and the contact form

You can contact me by email, WhatsApp, telephone or through the contact form on the website. During treatments, I am usually unable to answer the phone. I therefore prefer to be contacted by email or WhatsApp.


Please be aware that regular email and WhatsApp are not always suitable for sharing detailed medical or sensitive personal information. I therefore recommend sharing only essential information through these channels.


When you use the contact form on the website, I process the information you provide. This information is used solely to respond to your enquiry or contact you.


9. Website and cookies

The Osteo Elout website may use technical cookies or similar technologies that are necessary for the website to function properly.


If analytical cookies or other tracking tools are used, their purpose is to provide insight into website usage and help improve the website. Where cookies require consent, this will be requested through the website.


10. Your rights

Under the General Data Protection Regulation (GDPR), you have various rights regarding your personal data. These include the right to request:

  • Access to your personal data;
  • Correction of inaccurate information;
  • Completion of incomplete information;
  • Deletion of personal data, where legally permitted;
  • Restriction of data processing;
  • Data portability;
  • Objection to the processing of your personal data.


If you wish to exercise any of these rights, please contact info@osteo-elout.nl.


For medical records, deletion may not always be possible where statutory retention obligations apply or where information is necessary for appropriate healthcare or legal obligations.


11. Minors

When treating babies and children, I process personal data relating to the child and, where necessary, their parent(s) or legal guardian(s). This information is used solely for scheduling appointments, providing treatment, maintaining patient records and administration.


For minors, requests relating to access, correction or other privacy rights are assessed in accordance with the applicable rules regarding minors and legal representation.


12. Making a complaint

If you have any questions or concerns about how your personal data is processed, please contact me first at info@osteo-elout.nl. I will be happy to discuss your concerns and work towards a suitable solution.


You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).


13. Changes to this privacy policy

Osteo Elout may update this privacy policy when necessary, for example due to changes in legislation, practice operations or the systems used. The most recent version will always be available on the website.