Privacy Policy TogetherSamen

Version: April 2026

This Privacy Policy explains how TogetherSamen collects, uses, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and the guidelines of the Dutch Federation of Healthcare (NFG).

 

1. Legal Grounds for Processing

TogetherSamen processes your personal data exclusively based on the following legal grounds (GDPR Art. 6):

  • Performance of a contract: To provide the agreed-upon psychosocial therapy, coaching, community therapy or meditation & mindfulness classes

  • Legal obligation: To comply with medical record-keeping duties (WGBO) and tax retention obligations.

  • Consent: For the use of non-functional cookies or marketing purposes.

  • Legitimate interest: For a secure website and the improvement of our services.

 

2. Personal Data and Purpose

TogetherSamen processes the following data:

  • General data: Name, address, phone number, email address, and billing information.

  • Special categories of personal data: Health data, BSN (Citizen Service Number), and date of birth. These are treated with strict confidentiality and are only processed because they are necessary for your treatment and insurance claims.

 

3. Cookies and IP Addresses

TogetherSamen registers IP addresses of website visitors to track visited pages, improve functionality, and identify interests.

  • Functional cookies: Necessary for the technical operation of the website.

  • Analytical cookies: To optimize the product range. We request your consent for non-essential cookies during your first visit. You can withdraw this consent at any time via your browser settings.

 

4. Sharing with Third Parties

Your data is not sold or shared with third parties, unless:

  • It is necessary for the performance of the contract (e.g., secure billing software).

  • There is a legal obligation.

  • There is an emergency (in accordance with the Dutch Reporting Code for Domestic Violence and Child Abuse). Whenever possible, you will be consulted beforehand.

 

5. Security and Retention Periods

TogetherSamen implements appropriate technical and organizational measures to secure your data.

  • Medical records (WGBO): At least 20 years after the last entry in the file.

  • Financial administration: 7 years (statutory tax retention period).

  • Other data: No longer than necessary for the purpose (maximum 2 years after last contact).

 

6. Your Rights

You have the right to accesscopyrectificationerasure (to be forgotten), restriction of processing, and data portability. You also have the right to object to the processing.

 

7. Contact and Complaints

To exercise your rights or if you have questions: TogetherSamen | Attn: Kimberley Pope Email: kimberley@togethersamen.nl | KvK: 96809477

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the Data Protection Officer of the NFG.