Privacy and the use of your data
The Body Clinic takes the protection of your data seriously. We handle your personal information confidentially and carefully. We only use your data to carefully maintain your medical file, to provide good care, and to inform you about your scheduled appointments and, if desired, to send you our newsletter and related topics. And to serve you better on our site.
The Body Clinic only records the data needed for our services. We handle your information with care. We do not share your data with third parties, except:
- If you authorize us to do so
- If the law requires us to do so
To ensure smooth customer contact, we record data:
- the personal data you provide when visiting our site.
- the data we need to adequately handle your requests for information or other questions.
Examples include your email address or contact details. This data allows us to handle customer contact properly. We only use the data for the purpose for which you provided it to us.
The Body Clinic applies legal principles
- Legal basis: personal data is only processed when 1) unambiguous consent has been given by the data subject, or 2) it is necessary for a number of exhaustively listed interests (including the broad standard of "legitimate interest").
- Purpose limitation: personal data is only processed for explicitly described and legitimate purposes, and not simply for other purposes.
- Data minimization: no more personal data is processed than necessary.
- Appropriate security: we always ensure appropriate technical and organizational measures to secure the processing of your personal data.
We use your data in accordance with the General Data Protection Regulation (GDPR). This also applies to parties we engage in providing our services.
What is personal data?
Personal data is information that can be used to identify you. Personal data can identify you directly or in combination with other data. Examples of personal data include your name, address, city of residence, date of birth, phone number, and email address. A national identification number, login details, and IP addresses are also personal data.
Collection and purpose of processing personal data
The legal basis for the processing of your personal data can be found in the GDPR, Article 6, on the lawfulness of processing personal data.
The Body Clinic may collect personal data from anyone we provide services to, anyone we are in contact with, anyone working for or with us, or anyone who visits our website. We always process your personal data lawfully, fairly, and transparently, and we do not store your personal data for longer than necessary.
We collect the following categories of personal data:
- Personal details (such as name, address, city of residence, date of birth, gender, (mobile) phone number). To schedule an appointment, we process your name, address, city of residence, date of birth, national identification number (BSN), gender, (mobile) phone number, and email address. We need this to provide you with our services and to prevent identity fraud at the clinic. We process this data based on consent. We are legally required (under the Dutch Medical Treatment Agreement Act, WBGO) to retain your file for 20 years. We do not process your data for longer than necessary to provide good care. We also process your personal details when you place an order in our webshop. For this we apply a period of three years after the last purchase of the product/service.
- Email address: we use your email address as a communication channel with you. We also send emails relevant to your treatment (for example, aftercare tips, combination effects with other treatments). We consider this a service to our customers. We also use your email address in an anonymized (hashed) form to create marketing audiences. In this process, your email address will not be stored with a third party.
- Response data on emails. Every email contains invisible codes. This allows us to track how many people read our emails and which messages they click on. We do not look at what specifically interests you. We are only interested in general information about our emails so we can serve our customers even better. You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of the newsletter.
- Interaction data (such as your IP address, operating system, cookie IDs, browsing behavior and which pages you visit on our website, open and click behavior via our emails, preferences, opinions, needs, use of social media, or contact with customer service). We keep statistics on website usage, but this is always done anonymously. We use these statistics to improve our platform. Consent to the collection of data can be withdrawn at any time via cookie consent.
The Body Clinic collects this data itself and, where applicable, via third parties who provide services on behalf of The Body Clinic. In addition, The Body Clinic ensures that when this information is no longer relevant, it is destroyed. This destruction is also carried out securely. The security of personal data is crucial, which is why we take no risks when it comes to securely erasing your personal information.
The Body Clinic processes personal data for the following purposes
- To properly carry out our services and care provision.
- To improve the usability of our websites.
- For internal (quality) analyses, marketing, and product development. This allows us to improve our products and services for you.
All communication channels used by The Body Clinic fall under this privacy statement.
Live chat
The Body Clinic uses a chat function on the website that allows visitors to easily ask questions. This chatbox works like a digital contact form: messages are automatically forwarded to our mailbox so we can respond as quickly as possible. While using the live chat, certain technical data about visitors may be collected, such as IP address, browser type and version, operating system type and version, estimated location, etc. Technical information stored in cookie files is used exclusively to ensure the live chat services function properly. If you do not want this data to be stored, please do not use the live chat, but instead send an email to info@bodyclinic.nl or call us at 085 760 0035.
Sending medication letters and medication
The Body Clinic uses Postbode.nu for printing and sending medication letters. They have temporary access to the content of the letter; this data is automatically deleted from their system after two weeks.
The actual dispatch of medication is handled by AMP. Occasionally, we also use PostNL for this. Both parties receive only the data necessary for correct delivery (name, address, and contact details).
Agreements have been made with all the above-mentioned parties regarding the processing of personal data in accordance with the GDPR.
Emails are confidential
The information in an email is confidential and intended only for the recipient. If you receive an email that was not intended for you, please contact the sender by email. We also ask you to delete the received email and not disclose its contents. If you make an appointment with us, you will receive a confirmation from us by email and text message. This will state who you have an appointment with, where, the date and time, and some tips. If you no longer receive emails or texts from us confirming your appointment, you can contact us via info@bodyclinic.nl or 085 760 0035.
Your rights as a data subject
You have a number of rights as a data subject:
- You have the right to access your personal data;
- You have the right to rectify your personal data;
- You have the right to restrict the processing of your personal data;
- You have the right to erasure of your personal data;
- You have the right to object to the processing of your personal data;
- You have the right to request that your data be transferred to another controller;
- You have the right to withdraw previously given consent;
- You have the right not to be subject to automated decision-making;
- You have the right to file a complaint with the Dutch Data Protection Authority (AP) if you are not satisfied with how The Body Clinic handles your data. The AP is required to handle these complaints.
As the controller, The Body Clinic is responsible for properly verifying the identity of the requester. Once the requester's identity has been verified, the requester has the right to access their personal data. When you submit a request, The Body Clinic will respond within four to six weeks.
Duty of confidentiality
The processing of your data takes place under the responsibility of Ziatac Communications (www.ziatac.net). We have signed a data processing agreement with Ziatac Communications. They are also bound by a duty of confidentiality.
Access, correction, and right to object
You can always request the data we have on record for you. You can also request correction or supplementation of this data. Finally, you can object to certain types of processing. You can submit these requests to us.
Cookie statement
The Body Clinic uses cookies. A cookie is a small text file placed on your computer, tablet, or mobile phone when you visit the site. Cookies make it easier and faster for visitors to use the site. Consent to the collection of data can be withdrawn at any time.
Your privacy is safeguarded
We value your privacy and guarantee that:
- we compile visitor statistics anonymously;
- we do not display third-party advertisements on our site;
- we do not sell or provide information to third parties.
All our activities, including our internet and online activities, comply with the legal provisions of the GDPR.
Data retention
We do not retain your personal data for longer than necessary to guarantee you a quality and careful service and to meet your needs. When we no longer need your data, it is destroyed. We are legally required (under the WBGO) to retain your file for 20 years from the last change made to it. We do not process your data for longer than necessary to provide good care.
You also have the right to be forgotten. In short, as a data subject you have the right to have your personal data erased without undue delay in a number of cases:
- The personal data is no longer necessary for the purposes for which it was collected or processed;
- The data subject withdraws their consent to the processing or objects to the processing;
- The personal data has been processed unlawfully;
- The personal data must be erased in compliance with a legal obligation under EU or national law;
We apply the statutory retention periods where required. Where these are not set out in law, we ensure data minimization.
Security
Your data is appropriately secured by us against theft, loss, or other unlawful use that could be made of this data. We have taken the necessary measures to prevent your personal data from being lost, stolen, or accessed by persons outside The Body Clinic.
Data breach
If we identify a data breach, we will report it to the AP immediately, and in any case within 72 hours.
Contact
You have the right to access, correct, or delete your personal data. You can send a request for access, correction, or deletion to info@bodyclinic.nl. The Body Clinic will respond to your request as soon as possible, but within 6 weeks.
Do you have questions or comments about this privacy statement? Please contact us. You can do so by sending an email to Djilly Ybema: djilly@bodyclinic.nl. Or call us with your questions at our phone service: 085 760 0035.
Changes
The Body Clinic reserves the right to make changes to this privacy statement. We recommend that you read this privacy statement regularly. This page was last updated on August 5, 2026.
References
References to external sites or hyperlinks are provided for informational purposes only. They do not guarantee the accessibility or content of the sites in question. We accept no liability for the functioning of, or the information on, external sites.
The Body Clinic can be reached as follows:
Postal address: Achillesstraat 85, 1076 PX Amsterdam Clinic location Amsterdam: Achillesstraat 85, 1076 PX Amsterdam Phone: 085 760 0035 Email address: info@bodyclinic.nl Contact person: Djilly Ybema