Legal
Privacy Policy
How I handle your personal and medical information at Integrative Health Clinic Amsterdam is according and in line with the GDPR and the Dutch Medical Treatment Agreement Act (WGBO).
Last updated: Aug 2026
The Privacy Policy
Integrative Health Clinic (Adriana Guarín) takes the protection of your personal data seriously. This policy explains how your personal data is processed, in line with the GDPR and, where applicable, the Dutch Medical Treatment Agreement Act (WGBO/Wkkgz), structured around the parties involved. By using this website or my services, you agree to this policy.
1. Data Subject
The data subject is the person whose personal data is processed, that’s a client or patient that is receiving treatment, or a visitor to this website.
Your Rights
Access the personal data I hold about you
Correct inaccurate or incomplete data
Request erasure (“right to be forgotten”), where legally permitted
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time
To exercise these rights, contact me.
2. Data Controller
The data controller decides why and how your personal data is processed, and is accountable for it. For this practice and website, that is:
Integrative Health Clinic (Adriana Guarín)
Kiekstraat 71D, 1087 GK Amsterdam, The Netherlands
KvK: 98618644 · VAT: NL868571416B01
Client File
As required under the WGBO/Wkkgz, I keep a client file for every patient. It includes notes on your health, examinations, and proposed treatments, and only with your explicit consent relevant information from other healthcare providers (e.g. your GP, osteopath, or dietitian). Providing this data is necessary to receive treatment or an invoice; without it, I may not be able to help you.
Purpose & Legal Basis
Your data may be used to:
Inform another healthcare provider, with your consent, if your therapy ends or you're referred elsewhere
Order supplements on your behalf through a pharmacy or supplier
Allow a substitute therapist to treat you during my absence
Support anonymized peer review
Prepare your invoice
Any other use requires prior notice and your explicit consent.
I process your data on one of the following legal grounds: your consent, the performance of our treatment agreement, a legal obligation (such as the WGBO or Dutch tax law), or my legitimate interest in running and securing my practice and website. I do not use automated decision-making or profiling.
Healthcare Invoice
When I prepare your invoice for insurance reimbursement, it includes the details your insurer requires:
Name, address, and place of residence
Client number and/or date of birth
Insurance and/or policy number
Treatment date, claim number, and performance code
Brief treatment description and consultation cost
Security Measures
To keep your file safe, I:
Restrict access to your client file to authorized staff only
Am bound by medical professional secrecy, a legal duty of confidentiality
Store and process your data in line with the security requirements of the WGBO and GDPR
Data Retention
Client files are retained for 20 years, as required by the WGBO. Financial records, such as invoices, are retained for 7 years, in accordance with Dutch tax law. Data is securely deleted once the applicable retention period ends.
3. Data Processor
A data processor handles personal data on the controller’s behalf and under my instructions. I work with the following processors, each bound by a data processing agreement:
Website & Cookies
This website (integrativehealthclinic.care) uses cookies, sessionStorage, and localStorage to function properly, stay secure, and remember your preferences. General visit data (browser type, pages visited, date and time, IP address) is also logged automatically for security and performance.
Currently, only necessary cookies are placed automatically. These keep the site secure and functional and don’t require consent. Analytics cookies (Google Analytics) are only activated with your consent via the CookieYes cookie banner; no functional, performance, or advertising cookies are currently in use.
The website is hosted by Hostinger (ISO/IEC 27001:2022 certified). Information you submit via the contact form or email is used only to respond to your inquiry and is not shared with third parties.
Booking System (MijnDiAd)
I use MijnDiAd as my practice management and booking software. When you book an appointment or create an account through this website, your personal data including your name, contact details, and appointment information is processed and stored within MijnDiAd’s system on my behalf. MijnDiAd is ISO 27001 and NEN 7510 certified, meaning independent audits confirm that appropriate information security measures are in place to protect your data.
4. Data Protection Officer
As a small, solo healthcare practice, I am not required under the GDPR to appoint a Data Protection Officer, and I have not appointed one. For any questions about your data, contact me directly.
5. Supervisory Authority
The supervisory authority for data protection in the Netherlands is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). If you believe I am not handling your personal data correctly, you have the right to lodge a complaint with them at autoriteitpersoonsgegevens.nl.
6. GDPR Representative
Not applicable. Integrative Health Clinic is established in the Netherlands, within the European Union, so Article 27 GDPR, which requires controllers based outside the EU to appoint an EU representative, does not apply.
Policy Changes
I may update this policy from time to time; please check this page periodically for changes. Questions about this Privacy Policy? Contact me.
Questions about this Privacy Policy? Please contact me directly.