Data protection
Privacy policy
This policy describes the data processed in the context of the medical practice and this website, the purposes of that processing and the rights available to you.
Data controller
The data controller is ZEN MEDICAL SRL, company number 1031496515, represented by Dr Selim Zengin, Médecin généraliste, INAMI number 10769683003.
Contact: contact@zenmedical.be.
Data collected
The data collected varies according to the context: contact request, medical consultation, follow-up.
- Contact form
- Name, e-mail, phone, preferred practice, reason and message.
- Medical record
- History, current treatments, allergies, clinical examination, procedures performed, products used and batch numbers.
- Photographs
- Standardised photographs of the face taken at the practice.
- Technical data
- Data strictly necessary for the website to function, with no advertising tracker. Only with your consent: visit statistics by Google Analytics (pages viewed, device, approximate city), with no name, email or phone number.
Purposes and legal basis
Contact data is processed to respond to your request and arrange an appointment, on the basis of your consent and pre-contractual measures.
Health data is processed for the purpose of medical care, on the basis of Article 9.2.h of the GDPR and the legal obligations to keep a medical record.
Visit statistics, if you accept them, are used to see which pages are useful and to improve the website; their legal basis is your consent, which you can withdraw at any time from the Cookies page. No data is used for advertising, profiling or canvassing purposes.
Document request
The data controller is Zen Medical SRL, Dr Selim Zengin, Avenue du Roi-Soldat 102, 1070 Anderlecht. Contact: selim@zenmedical.be.
- Data collected
- The data processed is your email address and, where provided, your mobile phone number.
- Purposes and legal basis
- It is used to send you the document you requested and to contact you about that request if you gave separate consent.
- Legal basis
- The legal basis is your consent under Article 6.1.a of the GDPR.
- Retention period
- This data is retained for 24 months from the date of the request, then deleted automatically.
- Recipients
- It is shared with no recipient other than the technical email delivery provider, which processes it on our behalf and does not use it for any other purpose.
You have rights of access, rectification, erasure, objection and portability, available by writing to selim@zenmedical.be. You may lodge a complaint with the Autorité de protection des données, rue de la Presse 35, 1000 Bruxelles.
Online appointment booking
When you book online, we process your first name, last name, mobile number, e-mail address, language of communication, the chosen reason and slot, and an anonymous fingerprint of your network address to limit abuse. No medical information is requested.
These details are used only to manage your appointment: confirmation, reminder, cancellation, rescheduling and waiting list. The legal basis is taking steps at your request before a contract (Article 6.1.b GDPR).
They are kept for 12 months, then deleted or anonymised automatically. Processors: Lovable Cloud hosting, Resend e-mail delivery. Your first name, last name, mobile number and appointment time, without the reason, are also entered in the doctor's iCloud calendar (Apple Distribution International, Ireland), which Apple may host in the United States under the European Commission's standard contractual clauses. You can exercise your rights by writing to selim@zenmedical.be.
Photographs of the face
Photographs of the face constitute health data and, where they serve to identify a person, biometric data within the meaning of Article 9 of the GDPR.
They are processed locally at the practice, are never transmitted to any processor and are not hosted on any online service. They are kept in the medical record for the legal period and are never published.
Retention period
- Medical record, including photographs
- 30 years from the last contact, in accordance with Belgian legislation.
- Contact requests without follow-up
- 12 months maximum, then deletion.
- Visit statistics (Google Analytics)
- 14 months, then automatic deletion. Cookies valid for 13 months at most.
- Accounting documents
- Legal retention period applicable to accounting records.
Recipients
Data is only accessible to the physician and, where applicable, to persons bound by professional secrecy involved in your care.
It may be shared with another healthcare professional with your agreement, or with an authority where the law so requires. No medical data leaves the European Economic Area, with one exception: for the practice's calendar, your first name, last name, mobile number and appointment time, without the reason, are entered in the doctor's iCloud calendar (Apple Distribution International, Ireland), which Apple may host in the United States under the European Commission's standard contractual clauses. Visit statistics, if you accept them, are processed by Google Ireland Limited, which may transfer them to the United States under the EU–US Data Privacy Framework.
Your rights
- Access, obtain a copy of the data concerning you.
- Rectification, have inaccurate data corrected.
- Erasure, within the limits of the legal obligations to keep the medical record.
- Restriction and objection, for processing based on consent or legitimate interest.
- Portability, receive the data you provided in a readable format.
- Withdrawal of consent, at any time, without affecting processing already carried out.
Exercising your rights
Send your request by e-mail to contact@zenmedical.be or by post to the practice. Proof of identity may be requested.
A reply will be provided within one month, which may be extended by two months for complex requests.
Supervisory authority
You may lodge a complaint with the Autorité de protection des données, Rue de la Presse 35, 1000 Bruxelles, contact@apd-gba.be.