3D Tandarts, a trade name of D&D Tandartspraktijk B.V. (Stationsplein 12, 3112 HJ Schiedam, Chamber of Commerce 96669020), is responsible for processing your personal data. We follow the GDPR and the Dutch Medical Treatment Contracts Act (WGBO). Questions? Email [email protected].
Which data and why?
- Identity and contact: name, address, date of birth, phone number, email address, BSN (Dutch citizen service number), health insurer and policy number. Purpose: verifying your identity, scheduling appointments and billing (legal obligation).
- Medical data: questionnaire, treatment history, X-rays, CBCT and intraoral scans, photos and treatment plans. Purpose: your treatment and patient file (legal obligation, WGBO).
- Financial data: estimates, invoices and payments. Purpose: administration and tax obligations.
- Telephone: voicemail messages and their automatic transcription. Purpose: handling your question quickly.
- Camera images: for safety in the practice (legitimate interest).
- Website: data you enter in the appointment, contact or enquiry form (including on our offer pages), so that we can call or email you back. Online appointments are scheduled through Cal.com.
Who do we share data with?
We never sell your data. We share it only when needed for your care or required by law: with your health insurer (via Vecozo), our billing agency Infomedics, dental laboratories, other healthcare providers when referring you, and IT suppliers (storage, telephony, email, appointment scheduling, Cal.com, and Cloudflare for website security and speed). We sign a data processing agreement with processors. If data is processed outside the EU, this only happens with the safeguards required by the GDPR.
Retention periods
- Patient file: 20 years after the last treatment (or longer if good care requires it).
- Financial records: 7 years.
- Voicemail messages and transcripts: at most 30 days. If the content matters for your treatment, we add a summary to your file.
- Camera images: at most 30 days, unless needed for an incident.
- Forms and email without a treatment relationship: no longer than necessary.
Email and WhatsApp
These channels are not secure enough for medical data. Use them only for practical matters, such as making or rescheduling an appointment. Want to share medical information? Ask us for a secure connection via ZorgMail.
Cookies
We use functional cookies that are needed for the website to work. We place analytics and marketing cookies (Google Tag Manager and Google Ads, to measure website use and the results of our advertising) only with your consent. You can give or withdraw it via the cookie banner.
Security
We protect your data with encrypted connections, secured servers with backups, access control and a duty of confidentiality for all staff. In the event of a data breach we follow the statutory notification duty.
Your rights and complaints
You can access your data, have it corrected, have it deleted (as far as we are not obliged to keep it), object, ask for restriction, have your data transferred, and withdraw consent you have given. You can submit a request via [email protected] or at the practice. We may ask you to identify yourself and we respond within one month.
A complaint? Please contact us first at [email protected]. If we cannot resolve it together, you can contact the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
We may amend this policy; the current version is always on our website.
Last updated: October 2026