Arkin recognizes the trust you place in our organization. We value the privacy of our clients and visitors to our locations and website. We therefore consider it our responsibility to protect your privacy.
This privacy statement explains how Arkin processes personal data. In addition to this statement, Arkin has a privacy policy that outlines the rules our staff must follow when handling personal data and client records. Under the General Data Protection Regulation (GDPR), Arkin is not legally required to have a privacy policy or to make it publicly available.
Personal Data
Arkin respects your privacy and ensures that any personal information collected and provided is treated confidentially.
Personal data refers to all information that can be directly or indirectly linked to an individual. This includes standard personal data such as name, address, city of residence, and phone number, as well as sensitive data such as health information.
Purposes of Data Processing
Arkin processes your data for specific purposes, including:
-
Executing treatment agreements with clients
-
Managing the organization, including financial administration
-
Scientific research or statistical analysis
-
Handling claims, disciplinary complaints, or legal proceedings
-
Improving our services
Legal Grounds for Processing
Arkin requires a legal basis to process your data. The main legal grounds we rely on are:
-
Your explicit consent
-
Preparation or execution of an agreement
-
Compliance with a legal obligation
-
Protection of vital interests
-
Legitimate interest
Client Data Processing
We require your personal data to provide the care you request, to account for costs (to insurers or municipalities), and to report on the quality of care (to the Health and Youth Care Inspectorate). Without this data, we cannot deliver the required quality of care, receive payment, or enable partner organizations to provide services to you or Arkin.
Each client has an electronic health record, securely stored on Arkin’s closed network and retained for 20 years. Technical and organizational measures are in place to protect this data from unauthorized access, alteration, or destruction.
Sensitive personal data is additionally encrypted during transmission to prevent unauthorized access.
All discussions with your care provider are confidential. Your situation is only discussed within the treatment team. During the intake process, we ask who may be informed about your treatment.
If you’ve previously received care from one of Arkin’s specialties, our care providers may access relevant parts of your existing record to assess your referral and prepare for your intake and treatment.
We do not share information about your treatment with third parties without your consent, unless legally required. Legal exceptions include:
-
Health insurers receive limited data. If you prefer not to disclose your diagnosis, you may use a special privacy statement.
-
The Dutch Healthcare Authority (NZa) also receives limited data. You may submit a privacy statement to your care provider, who will ensure it is added to your medical record and that certain data is withheld from NZa. No treatment-related information is shared.
-
The Health and Youth Care Inspectorate (IGJ) may access data in case of incident reporting. Arkin follows the Code of Conduct for Transparency in Medical Incidents (GOMA).
-
Municipalities receive required data under the Youth Act and the Social Support Act (WMO 2015) for legal compliance, billing, and fraud prevention.
-
Quality control measures such as incident reporting and PRISMA analysis. You may object to this with your care provider.
-
Audits and quality assessments may involve random file reviews. You may object to this with your care provider.
-
In exceptional situations such as suicide risk or suspected child abuse or domestic violence, Arkin acts in accordance with professional guidelines and legal obligations, including the Mandatory Reporting Code for Domestic Violence and Child Abuse.
Scientific Research
Arkin conducts medical-scientific research. Medical data may be used for research, statistics, or educational purposes. These data are coded, meaning your name, address, and phone number are removed or replaced with a code.
Consent is generally requested for each study. You may withdraw consent at any time. In some cases, consent is not required—for example, if data cannot be traced back to individuals or if consent cannot reasonably be obtained (e.g. due to death or inaccessibility).
If you do not wish your data to be used for research at all, you may notify us at: onderzoek@arkin.nl
Research data is retained only as long as necessary to complete the study, after which it is deleted.
Website Data Processing
We collect personal data via our website to improve your experience and functionality.
Your Rights
Right of Access and Copy You have the right to access and receive a copy of your (sensitive) personal data. Specifically, you may request access to your client record via your lead practitioner. If you submit a written request, please include a copy of your ID (with photo and Citizen Service Number blacked out) to verify your identity.
Right to Rectification If your personal data is factually incorrect or incomplete, you may request correction or supplementation. For client records, only additions can be made—no alterations.
Right to Erasure You may request deletion of your data in certain cases. Arkin may deny this request if exceptions apply, such as ongoing scientific research.
You may submit a written request for destruction of your client record to the medical director. Requests may be denied if data is still needed to provide care.
Right to Restriction of Processing You may request temporary suspension of data processing if:
-
You believe the data is inaccurate
-
Processing is unlawful and you prefer restriction over deletion
-
Arkin no longer needs the data, but you require it for legal claims
-
You are awaiting a decision on an objection
Right to Data Portability You may request the personal data you provided to Arkin (based on consent or contract) and ask us to transfer it to another data controller (e.g. another care provider).
Right to Object You may object to the processing of your data if you believe it is unjustified. Arkin may reject the objection if there are compelling legitimate grounds.
Withdrawal of Consent You may withdraw your consent for specific data processing at any time.
Cookie Policy
Want to know more about how Arkin handles personal data on its website? Visit our cookie policy.
Contact
Arkin takes data protection seriously and implements appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized changes.
Contact details:
Stichting Arkin
Klaprozenweg 111
1033 NN Amsterdam
Email: info@arkin.nl
Phone: +3120 5900 5000
If you believe that the processing of personal data is not being carried out in accordance with the law (GDPR and UAVG), you may file a complaint with the Data Protection Officer via: functionarisgegevensbescherming@arkin.nl
You may also submit your complaint to the national data protection authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Updates
The most recent changes to this privacy statement were made on: 25/09/2024.