Arkin is aware that you place your trust in our organization. Arkin is committed to the privacy of clients and visitors to our locations and the website. We therefore see it as our responsibility to protect your privacy.

This privacy statement describes how Arkin processes personal data. In addition to the privacy statement, Arkin has a privacy regulation, which describes the rules that Arkin employees must adhere to when dealing with personal data and files of clients. Arkin is not obliged under the General Data Protection Regulation (hereinafter: GDPR) to have a privacy regulation or to make them public.

Personal data
Arkin respects privacy and ensures that the personal information it captures and provides is treated confidentially.

Personal data is all information that can be traced directly or indirectly to a person. Think of normal personal data: name, address, place of residence, telephone number and special personal data such as: information about your health.

Purposes of processing
Arkin processes your data for certain purposes. Below you will find the purposes for which Arkin may use your data:

• Execution of the treatment agreement with clients
• The management of the institution, such as the (financial) administration of Arkin
• Scientific research or statistical purposes
• Handling a claim, (disciplinary) complaint or other legal claim
• Improving our services

Legal basis for processing
Arkin needs a legal basis for processing your data. The legal bases that Arkin mainly uses for processing data are:

• The consent given
• Preparing or executing an agreement
• Compliance with a legal obligation
• Protecting the vital interest
• Representing the legitimate interest

Data processing clients
We need the personal data we receive from you, among other things, to be able to provide the care you request, to account for the costs (health insurer or municipality) and to account for the content of the care (Health and Youth Care Inspectorate). If we do not receive this data, we will not be able to provide the requested quality of care, we will not be paid for the care provided or chain partners will not be able to provide their services to you or Arkin.

Arkin maintains an electronic client file for each client. Your electronic record is securely stored on Arkin's closed network and is stored for 20 years. Technical and organizational security measures have been put in place to protect your electronic record against unauthorized access, modification and destruction.

In addition to the regular protection measures that apply to all your personal data, sensitive personal data is sent securely and encrypted, so that an unauthorized third party cannot take note of that data.

Everything you discuss with a practitioner is covered by professional secrecy. Your practitioner will only discuss your situation with the treatment team. During the intake procedure, we will ask you who may be informed about your treatment.

Have you previously been in care at one of Arkin's specialties? Then our practitioners can view the relevant parts of your existing client file at Arkin in order to assess your referral and prepare for your intake and treatment.

We do not provide information about your treatment to third parties without your permission. A practitioner may only deviate from this on the basis of legal provisions.
There are (by law) exceptions to these privacy rules, including:

• The health insurer receives a limited number of data. If you do not want to make your diagnosis known, you can use a special privacy statement.
• The Dutch Healthcare Authority (NZa) also receives a limited amount of data. You can also use the privacy statement for this. You can fill in this statement and take it with you to your practitioner. The practitioner will ensure that the statement is included in the medical file and that certain information is not provided to the NZa. This submission does not contain any treatment-related information.
• The Health Care Inspectorate (IGJ) is entitled to data if an incident has to be reported. Arkin uses the Code of Conduct for the Disclosure of Medical Incidents (GOMA) when dealing with incidents.
• In the context of the Youth Act and the WMO 2015, the municipality receives the required information to implement the law, to be able to pay the bill and to prevent fraud.
• Quality checks (incident reports and prism research as a quality instrument). If you object to this, you can make this known to your practitioner.
• Audits and quality reviews – quality testing in which a file can be assessed for the quality of care by a random sample. If you object to this, you can make this known to your practitioner.
• In special (emergency) situations such as: suicide risk or suspicions of child abuse or domestic violence, Arkin acts in accordance with the guidelines of the professional group and legal regulations, such as the 'Mandatory Reporting Code for Domestic Violence and Child Abuse Act' and the resulting child check.

Scientific research
At Arkin, medical-scientific research is conducted. Medical data can often be used to conduct scientific research, statistical research and/or for educational purposes. The data is used in encrypted form. This means that your name, address and phone number have been removed or replaced with a code or number.
In principle, permission is requested for the use of personal data for scientific research. The permission can always be withdrawn. Asking for permission separately is not always necessary, for example if the research data cannot be traced back to the person or if it is not possible to request permission (for example, someone is deceased or very difficult to reach).
If you do not wish your data to be used at all for scientific research, you can let us know via onderzoek@arkin.nl

The data relating to scientific research are kept for as long as necessary to complete the scientific research. After that, your data will be deleted.

Website data processing
We collect the personal data necessary to help you make better use of the Arkin website through this website.

What are your rights?

Right of inspection and copy
You have the right to inspect and obtain a copy of your (special) personal data that is processed.

Specifically, you have the right to inspect and receive a copy of your client file. You can request this from your directive practitioner. If you do this in writing, we ask you to enclose a copy of your proof of identity with the request to ensure that the request for access was made by you. We hereby ask you to black out your passport photo and Citizen Service Number (BSN) in this copy.

Right to rectification
If your personal data is factually incorrect or incomplete, you have the right to have this data corrected or supplemented. For your client file, only an addition to your file can be made and no improvement.

Right to erasure
The right to erasure of data is possible in some cases. Arkin can refuse this request if an exception applies, for example because scientific research is being done with your data.

Specifically, you can submit a request to the medical director to destroy your client file. A request for annulment must always be submitted in writing. The request for removal can be refused, for example in order to be able to provide the requested care.

Right to restriction of processing
You have the right that your data is (temporarily) no longer processed. This is only possible if:

• you believe that the personal data is incorrect,
• the processing of personal data is unlawful and does not want your data to be deleted,
• Arkin no longer needs the data for a specific purpose (apart from storage) but you need it yourself to file a legal claim,
• Or pending your (right to) object, you do not want your data to be processed.

Right to portability of your data
You have the right to obtain the personal data that you have provided to Arkin yourself for the legal basis of consent or preparation and execution of the agreement. You also have the right to ask Arkin to have this personal data transferred to another controller (e.g. another healthcare provider).

Right to object
If you believe that your personal data should not be processed for an explicit and justified purpose, you can submit an objection. Arkin may decide not to accept the objection if it believes that your personal data should nevertheless be used for compelling reasons (the legitimate purpose).

Withdrawing consent
If you have given us permission for certain processing, you can also withdraw this consent at any time.

Cookie Policy
Would you like to know more about the way in which Arkin handles the personal data of its clients and visitors? Then take a look at our page about cookie policy.

Contact
Arkin takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized changes.

Our general contact details are:
Arkin Foundation
Klaprozenweg 111
1033 NN Amsterdam
Email address: info@arkin.nl
Telephone number: 020-5900 5000

If you believe that the processing of personal data is not carried out in accordance with the law (GDPR and GDPR), you can submit a complaint to the Data Protection Officer via: functionarisgegevensbescherming@arkin.nl

It is also possible to submit your complaint to the national data protection supervisor: the Dutch Data Protection Authority.

Alterations
The last changes made to this privacy statement date from: 25/09/2024.