When we process your data, you have several rights as a data subject. We summarise your rights below. The full overview of your rights can be found in the privacy statement below.
Right of access and copy
You have the right to know in accordance with the applicable legal provisions what personal data we hold about you, what exactly we do with it and why we do this. You also have the right to obtain a copy of this information free of charge.
Right to correction and completion
If you find that we keep incomplete or incorrect data about you, you have the right to have this data corrected or completed free of charge.
If the data is incorrect or incomplete, a completion can be allowed upon simple request. A correction is possible with the agreement of the attending physician or the chief physician.
If you request a correction of a subjective opinion or data, a supplement may be allowed on request, but not an improvement.
Right to erasure
You may consider that it is no longer necessary to keep your data, that there are no legitimate grounds to keep your data or that we process your data unlawfully. If so, you can ask to have your data erased.
In practice, an erasure request often has to be refused for various reasons. This is the case, for example, when:
- the attending physician or the chief physician believes that the preservation of your data is important from a medical or ethical point of view, from your life expectancy, from the defence of your legitimate interests or those of your assigns, or for reasons of public interest.
- the data are part of an archive kept for the purpose of scientific research and the deletion of your data threatens to make further research impossible.
- the data are necessary for the establishment, exercise or substantiation of legal claims.
Right to restrict processing
In a limited number of cases, you can request that your personal data be kept but not processed ('putting on hold' the processing). For example, as a patient you may still need the personal data, e.g. in the context of a legal claim, even if we no longer need this data.
In some cases, the right to restricted processing does not apply and we can still process your personal data.
Right to data portability
When we process data with your explicit consent, as a patient you have the additional right to have an electronic copy of your personal data transferred to yourself or directly to another institution or person of your choice. Such transfer must be in a simple machine-readable format.
Right to object
If the processing of your data is based solely on the legitimate interests of UZ Gent, you may lodge a reasoned objection. We will respect the reasoned objection unless we invoke compelling legitimate grounds that outweigh your interests, rights and freedoms or unless the data are related to the establishment, exercise or substantiation of a legal claim.
You can never oppose the processing of personal data that we need for the performance of a contract or legal obligations.
Right to withdraw your consent at any time
If the processing of personal data is based on prior consent, you can withdraw that consent at any time. This implies that we may no longer process the data concerned.
Right to oppose automated support
For a limited number of specific applications, we use technology that allows automated individual support. We always ask for your consent before using these applications. In case you have given your consent for the use of such technology and you have questions about the functioning of the technology or the support used, please do not hesitate to contact your treating physician. We do not use automated decision-making.
Right to exclude access to your health data
Even if there is a therapeutic relationship, you have the right to deny a particular healthcare provider access to your health data. To do so, you can provide the name of the healthcare provider to the data protection officer via this contact form or by email to dpo@uzgent.be.
Please note that it takes 10 days to process the exclusion request.
Right to complain to the Data Protection Authority
If you believe that you have a complaint about the protection of privacy, you may complain directly to the Belgian Data Protection Authority (www.dataprotectionauthority.be) at Drukpersstraat 35, 1000 Brussel, at +32 (0)2 274 48 00, or at contact@apd-gba.be.