Privacy Policy

Praxis Loten Loten 1 — B-4700 Eupen — Belgium Phone: +32 87 55 56 70 Email: praxisloten@gmail.com

Controller: Philippe Banaszak

We may collect the following categories of data:

• Contact data: name, surname, phone number, email address — when you fill in a contact or appointment form. • Health data (care context only): information shared during your treatment. Processed with maximum protection as required by Article 9 GDPR. • Technical data: IP address (anonymised), browser type, OS, pages visited, visit duration — automatically collected via Google Analytics 4. • Navigation data (cookies): see our Cookie Policy.

Each processing activity is based on a legal basis under Article 6 GDPR:

• Appointment management and patient relationship: performance of a contract (Art. 6.1.b). • Responding to contact requests: legitimate interests (Art. 6.1.f). • Audience statistics via Google Analytics: consent (Art. 6.1.a) — you may freely accept or refuse on your first visit. • Legal obligations (retention of care records): legal obligation (Art. 6.1.c) — Belgian law requires 30-year retention of medical records.

• Care records: 30 years after the last consultation (legal obligation). • Contact data and correspondence: 3 years after last contact. • Analytics data (Google Analytics): 14 months. • Cookie data: see our Cookie Policy.

Your data is never sold or transferred to third parties for commercial purposes. It may be shared with:

• Google LLC (Google Analytics 4) — anonymised audience measurement. Google is subject to Standard Contractual Clauses (SCCs) for US transfers. • Vercel Inc. — website host. Technical data transits via GDPR-compliant Vercel servers. • Partner healthcare professionals — only for continuity of care and with your explicit agreement. • Legal authorities — when required by law.

Google Analytics and Vercel process data on servers located in the United States. These transfers are governed by the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914).

You can disable Google Analytics at any time via our Cookie Policy or by installing the official browser add-on: https://tools.google.com/dlpage/gaoptout

Under Articles 15–22 GDPR, you have the following rights:

• Right of access (Art. 15): obtain a copy of your data. • Right to rectification (Art. 16): correct inaccurate data. • Right to erasure (Art. 17): request deletion (subject to legal retention obligations). • Right to restriction (Art. 18): temporarily restrict processing. • Right to data portability (Art. 20): receive your data in a structured format. • Right to object (Art. 21): object to certain processing based on legitimate interests. • Right to withdraw consent (Art. 7.3): at any time, without affecting past processing.

To exercise these rights, contact us at praxisloten@gmail.com. We will respond within 30 days.

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Data Protection Authority (APD/GBA):

Autorité de Protection des Données / Gegevensbeschermingsautoriteit Rue de la Presse 35 — 1000 Brussels Tel.: +32 2 274 48 00 contact@apd-gba.be www.autoriteprotectiondonnees.be

Praxis Loten implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or destruction. The website is served exclusively over HTTPS (TLS 1.3).

This policy may be updated at any time. The version in force is the one published on this page, with the last update date indicated at the top.