Privacy Statement – Ayurveda Works
Veronica Rivera-Santander / Ayurveda Works is responsible for processing your personal data. Your data is handled with care and in accordance with the General Data Protection Regulation (GDPR).
Professional Memberships:
I am a registered member of the Dutch professional association VBAG (www.vbag.nl) and of the Register of Complementary Care Professionals (RBCZ) – www.rbcz.nu.
1. Client File and Medical Data
To provide effective treatment, I am legally required (under the Dutch WGBO and Wkkgz) to maintain a client file. This file includes:
-
Notes on your health, lifestyle, and consultations
-
Treatment results
-
Information received from other healthcare professionals (only with your explicit consent)
These details are confidential and accessible only to me as your therapist. I am bound by professional confidentiality.
2. Purpose of Data Use
Your personal data is used solely for:
-
Your treatment and guidance
-
Communication with other professionals (with your written consent)
-
Replacement during my absence
-
Anonymous intercollegial consultation
-
Financial administration (e.g. for invoicing)
Any other use of your data will only take place with your explicit written consent.
3. Retention Period
Your client file is retained for 20 years, as required by Dutch law.
4. Information on Your Invoice
Your invoice will include only the necessary details for health insurance purposes:
-
Your name, address, and city of residence
-
Date of birth and/or client number
-
Insurance and policy number
-
Date and description of the service provided
-
Treatment code and costs
5. Third-Party Services
I collaborate with third parties for administration and marketing purposes. Data processing agreements are in place to ensure your data is securely handled in compliance with the GDPR.
These third parties include:
-
GetHealthy.com (digital client administration)
-
Google (email and cloud storage)
-
Facebook / Instagram (social media and marketing)
-
External accountant
-
Website administrator
-
IT support provider
6. Your Rights Under the GDPR
You have the right to:
-
Access your personal data
-
Request corrections or deletion
-
Withdraw your consent
-
Object to data processing
-
Request a copy of your data (data portability)
Please send your request to info@ayurvedaworks.eu. To confirm your identity, include a copy of your ID (with your photo, MRZ, BSN, and ID number masked). You will receive a response within four weeks.
If you believe your data is not being handled correctly, you may file a complaint with the Dutch Data Protection Authority:
https://autoriteitpersoonsgegevens.nl/en/contact-dutch-dpa/contact-us
7. Cookie Policy
Functional Cookies:
This website uses only essential cookies to ensure proper functionality.
Google Analytics:
We use Google Analytics to monitor website usage anonymously. IP addresses are anonymized. Google adheres to the EU-U.S. Data Privacy Framework.
Social Media Cookies:
Facebook and Instagram may place cookies through embedded social media buttons. Please refer to their privacy policies for more information.
8. Data Breach Protocol
In case of a (suspected) data breach, Ayurveda Works follows the official Dutch GDPR Data Breach Protocol. This includes:
-
Assessing the impact and scope of the breach
-
Documenting the incident
-
Reporting to the Dutch Data Protection Authority and affected individuals, if necessary
This protocol is part of the internal privacy documentation.
9. Changes to This Privacy Statement
This privacy statement was last updated on 13 May 2025. Ayurveda Works reserves the right to amend this policy at any time. Please check this page periodically to stay informed.