How your data is handled.

Vitruvia Clinic B.V. is the data controller for the personal and health data processed through this website and our care services. Our registered address and contact details are available on request via the contact details on this site.

This page is maintained by Vitruvia Clinic B.V. to answer common privacy and GDPR questions about our services. It is not a legal certification or a substitute for legal advice.

We collect the information you provide when you book a consultation, complete an intake form, or communicate with our team: name, contact details, date of birth, country of residence, medical history, current treatments, goals, and any test results you choose to share.

Health data is classified as special category data under GDPR. We only process it where you have given explicit consent or where processing is necessary for the provision of health or social care.

Your data is used to assess your suitability for our services, coordinate diagnostics and consultations, issue your personalised protocol, and keep you informed about your care.

We do not use your health data for marketing, advertising, or automated profiling. We do not sell your data to third parties.

We process personal data on the basis of contract performance, legitimate interests, and compliance with legal obligations. We process special category health data on the basis of your explicit consent and/or the provision of health or social care.

Patient data is stored within the European Economic Area using infrastructure providers that meet GDPR-aligned data processing requirements. Technical and organisational measures are in place to protect data at rest and in transit.

Access is limited to your assigned physician, your care coordinator, and any partner clinic clinician actively delivering a scheduled service to you. Access is logged and restricted to what is necessary for your care.

You have the right to access, correct, erase, restrict, or object to processing of your personal data, and the right to data portability where applicable. You also have the right to withdraw consent at any time.

Requests are subject to medical record retention obligations under the applicable laws of the treating physician's jurisdiction. We aim to respond to requests within one month.

We use a small number of cookies to keep sessions secure, measure site performance, and remember your cookie preferences. We do not use third-party advertising cookies. You can manage your preferences via the cookie banner when you first visit.

We retain personal and health data for as long as necessary to provide care and meet legal, regulatory, and professional record-keeping obligations. Retention periods vary by jurisdiction and type of record.

For privacy questions, data requests, or to exercise your GDPR rights, contact us using the details on this site. Please include enough information for us to verify your identity and locate your records.