Data protection

Privacy policy

This policy describes the data processed in the context of the medical practice and this website, the purposes of that processing and the rights available to you.

Data controller

The data controller is ZEN MEDICAL SRL, company number 1031496515, represented by Dr Selim Zengin, Médecin généraliste, INAMI number 10769683003.

Contact: contact@zenmedical.be.

Data collected

The data collected varies according to the context: contact request, medical consultation, follow-up.

Contact form
Name, e-mail, phone, preferred practice, reason and message.
Medical record
History, current treatments, allergies, clinical examination, procedures performed, products used and batch numbers.
Photographs
Standardised photographs of the face taken at the practice.
Technical data
Data strictly necessary for the website to function, with no advertising tracker. Only with your consent: visit statistics by Google Analytics (pages viewed, device, approximate city), with no name, email or phone number.

Purposes and legal basis

Contact data is processed to respond to your request and arrange an appointment, on the basis of your consent and pre-contractual measures.

Health data is processed for the purpose of medical care, on the basis of Article 9.2.h of the GDPR and the legal obligations to keep a medical record.

Visit statistics, if you accept them, are used to see which pages are useful and to improve the website; their legal basis is your consent, which you can withdraw at any time from the Cookies page. No data is used for advertising, profiling or canvassing purposes.

Document request

The data controller is Zen Medical SRL, Dr Selim Zengin, Avenue du Roi-Soldat 102, 1070 Anderlecht. Contact: selim@zenmedical.be.

Data collected
The data processed is your email address and, where provided, your mobile phone number.
Purposes and legal basis
It is used to send you the document you requested and to contact you about that request if you gave separate consent.
Legal basis
The legal basis is your consent under Article 6.1.a of the GDPR.
Retention period
This data is retained for 24 months from the date of the request, then deleted automatically.
Recipients
It is shared with no recipient other than the technical email delivery provider, which processes it on our behalf and does not use it for any other purpose.

You have rights of access, rectification, erasure, objection and portability, available by writing to selim@zenmedical.be. You may lodge a complaint with the Autorité de protection des données, rue de la Presse 35, 1000 Bruxelles.

Online appointment booking

When you book online, we process your first name, last name, mobile number, e-mail address, language of communication, the chosen reason and slot, and an anonymous fingerprint of your network address to limit abuse. No medical information is requested.

These details are used only to manage your appointment: confirmation, reminder, cancellation, rescheduling and waiting list. The legal basis is taking steps at your request before a contract (Article 6.1.b GDPR).

They are kept for 12 months, then deleted or anonymised automatically. Processors: Lovable Cloud hosting, Resend e-mail delivery. Your first name, last name, mobile number and appointment time, without the reason, are also entered in the doctor's iCloud calendar (Apple Distribution International, Ireland), which Apple may host in the United States under the European Commission's standard contractual clauses. You can exercise your rights by writing to selim@zenmedical.be.

Photographs of the face

Processed locally, never hosted online

Photographs of the face constitute health data and, where they serve to identify a person, biometric data within the meaning of Article 9 of the GDPR.

They are processed locally at the practice, are never transmitted to any processor and are not hosted on any online service. They are kept in the medical record for the legal period and are never published.

Retention period

Medical record, including photographs
30 years from the last contact, in accordance with Belgian legislation.
Contact requests without follow-up
12 months maximum, then deletion.
Visit statistics (Google Analytics)
14 months, then automatic deletion. Cookies valid for 13 months at most.
Accounting documents
Legal retention period applicable to accounting records.

Recipients

Data is only accessible to the physician and, where applicable, to persons bound by professional secrecy involved in your care.

It may be shared with another healthcare professional with your agreement, or with an authority where the law so requires. No medical data leaves the European Economic Area, with one exception: for the practice's calendar, your first name, last name, mobile number and appointment time, without the reason, are entered in the doctor's iCloud calendar (Apple Distribution International, Ireland), which Apple may host in the United States under the European Commission's standard contractual clauses. Visit statistics, if you accept them, are processed by Google Ireland Limited, which may transfer them to the United States under the EU–US Data Privacy Framework.

Your rights

  • Access, obtain a copy of the data concerning you.
  • Rectification, have inaccurate data corrected.
  • Erasure, within the limits of the legal obligations to keep the medical record.
  • Restriction and objection, for processing based on consent or legitimate interest.
  • Portability, receive the data you provided in a readable format.
  • Withdrawal of consent, at any time, without affecting processing already carried out.

Exercising your rights

Send your request by e-mail to contact@zenmedical.be or by post to the practice. Proof of identity may be requested.

A reply will be provided within one month, which may be extended by two months for complex requests.

Supervisory authority

You may lodge a complaint with the Autorité de protection des données, Rue de la Presse 35, 1000 Bruxelles, contact@apd-gba.be.