Kadehuis Dental
Privacy notice
What this practice records about you, why it is allowed to, how long it keeps it, and what you can ask it to do. Written to be read rather than to be agreed to.
Who holds your record
Kadehuis Dental, Prinsengracht 812, Amsterdam is the controller of your personal data — it decides what is recorded and why. Write to hello@kadehuis.example.com about anything on this page.
What is recorded, and why
Your name, date of birth, address and contact details, so the practice knows who you are and can reach you. Your dental record — what was found, what was done, what was advised, and the radiographs taken along the way. What you were charged and what you paid. And the messages sent to you about appointments.
A dental record is health data, which the law treats as a special category and protects more tightly than an address or a telephone number. That is why it is kept apart from everything else in this system and why access to it is recorded.
What allows the practice to hold it
- Providing you with care. Article 9(2)(h) of the GDPR permits health data to be processed for medical diagnosis and treatment by a professional bound by confidentiality.
- The contract between you and the practice — Article 6(1)(b) — for appointments, invoices and the practical side of being a patient here.
- Obligations the practice cannot opt out of — Article 6(1)(c) — including keeping your record for the period set out below, which is required by law and is not something the practice chooses.
Consent is deliberately not on that list for your clinical record. Care that stops if you withdraw consent to being recorded is not care, and a legal basis nobody can actually withdraw is not consent. Consent is used where it genuinely applies — whether you are texted rather than emailed, for instance — and you can change that whenever you like in the patient area.
How long it is kept
These are the periods this practice has set, and they are the periods this page is generated from — not a separate statement that has to be kept in step with the policy.
| What | Kept for | Counted | Because |
|---|---|---|---|
| Your dental record | 20 years | from the last time you were treated here | WGBO, Art. 7:454 BW |
| Radiographs and photographs | 20 years | from the last time you were treated here | WGBO, Art. 7:454 BW |
| Consent forms | 20 years | from the last time you were treated here | WGBO, Art. 7:454 BW |
| Letters, emails and texts | 20 years | from the last time you were treated here | WGBO, Art. 7:454 BW |
| Invoices and payments | 7 years | from the date of the record | Algemene wet inzake rijksbelastingen, Art. 52 |
| The record of who looked at your file | 2 years | from the date of the record | NEN 7513 — retained long enough to investigate |
Nothing is deleted automatically when a period ends. A record leaving the practice's care is a decision somebody makes and signs for, and a system that quietly destroyed clinical records on a timer would be a worse system than one that does not.
Who else sees it
- The clinicians and staff at this practice, and only the parts their job needs. A receptionist can see that you have an appointment; they cannot open your clinical notes.
- A dental laboratory, when something is being made for you — the prescription and the impression, not your record.
- Your insurer or funding scheme, where you have asked the practice to claim on your behalf.
- Nobody for advertising. Your record is not sold, shared for marketing, or used to train anything.
What you can ask for
- A copy of everything held about you, free, within a month.
- A correction, if something factual is wrong. A clinical opinion you disagree with is not corrected but your disagreement is recorded alongside it, which is the honest version.
- Deletion — with the limit above. While the statutory period runs, the practice is obliged to keep your record and cannot delete it on request.
- To object to being contacted, at any time, without giving a reason.
A record of who looked
Every time somebody at this practice opens your file, that is recorded — who, when, and which record. You may ask to see that log. Keeping it is required of health systems in the Netherlands by NEN 7513, and the reason it exists is that it is the only way to tell a proper clinical interest from a nosy one.
If you are unhappy
Say so to the practice first if you would like to — most of this is settled in a conversation. You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority. You may complain to them at any time, and you do not have to raise it with the practice first.
This is a demonstration practice. The people, the records and the appointments behind this site are invented, and no real patient data exists anywhere in it.