Privacy policy

Who is responsible?

This website is run by Dr Els Pastijn BV, J.B. Devlemincklaan 62, 1930 Zaventem, Belgium, enterprise number 0810.522.892. Dr Els Pastijn BV is responsible for processing your data through this website. For questions about your data, contact info@drelspastijn.be.

Dr. Els Pastijn is a physician registered with the Belgian Order of Physicians and bound by the Belgian Code of Medical Ethics and medical confidentiality.

Cookies and consent

This website does not set any cookies itself. Visitor statistics are only collected if you consent through the notice at the bottom of the page. If you decline, or make no choice, nothing is measured.

To remember your choice, we keep it (allowed or declined, with the date) in your browser's local storage under the name analytics-consent. This is needed to respect your choice and is not sent anywhere. If you consent, PostHog also stores a code in your browser (see below). After six months we ask again. You can change your choice or withdraw your consent at any time via "Privacy settings" at the bottom of every page.

If you choose to book an appointment, the Calendly booking window loads. Calendly asks for consent for its optional cookies in that window itself; it may set technically necessary cookies without consent.

Visitor statistics (only with your consent)

If you consent, we use PostHog to measure how the website is used, in order to improve it. For example, we see:

• which pages are visited, for how long and how far visitors scroll;
• which buttons and links are clicked;
• how fast pages load and which technical errors occur;
• the type of browser and device, the approximate location (country or region) and which website or campaign brought you to the site;
• whether an appointment was booked (without the type of consultation, your name or email address).

If you consent, PostHog stores a random code in your browser's local storage (names starting with ph_), together with the campaign that brought you to the site. This lets us recognise returning visits and look at visits over several days together, for example which campaign eventually led to an appointment. The code says nothing about who you are (pseudonymisation): we do not link it to your name, email address or any other details. We do not use cookies. The code is deleted as soon as you withdraw your consent, and otherwise on your first visit after six months, when we ask for consent again. No screen recordings are made and we do not ask PostHog to identify you.

Your IP address is only used to determine your approximate location and is not stored afterwards. The data is processed on PostHog servers in Frankfurt (Germany). We do this based on your consent (Article 6(1)(a) GDPR). Because we also measure whether you book an appointment, and an appointment with a doctor can say something about your health, we ask for explicit consent for this (Article 9(2)(a) GDPR). You can withdraw it at any time via "Privacy settings"; this does not affect measurements made before.

Booking an appointment

Online appointments are booked through Calendly. In the booking window you enter your name, email address and phone number; these are needed to schedule and confirm the appointment and to reach you. Without them we cannot book an appointment. The "Additional information" field is optional: only share what is needed for the appointment. Calendly processes this data on our behalf. More information is available in Calendly's privacy policy. The booking window is only loaded when you hover over, select or click a booking button.

We process this data to schedule a consultation at your request (Article 6(1)(b) GDPR) and because, as a physician, we are legally required to keep a patient record, of which managing appointments is part (Article 6(1)(c) GDPR). Because booking a consultation says something about your health, this is health data. It is only processed by or under the responsibility of a physician bound by medical confidentiality (Article 9(2)(h) GDPR).

On-site appointments in Zaventem are handled by Mirha, which applies its own privacy policy.

Medical information you share during a consultation goes into your medical record. It is covered by medical confidentiality, kept as required by law and not processed through this website.

Contact by email

If you send an email, we only use your details to reply to your message. We do this based on our legitimate interest in answering questions, or to prepare a consultation at your request (Article 6(1)(f) and 6(1)(b) GDPR).

Hosting and external links

The website is hosted on GitLab Pages. As with any website, the hosting provider may log technical data, such as your IP address, for a limited time for security and troubleshooting. This is based on our legitimate interest in offering a secure website (Article 6(1)(f) GDPR).

Links to other websites (such as Mirha, Instagram or a webinar registration page) open a website with its own privacy policy.

Transfers outside the European Union

Calendly (Calendly LLC) and GitLab (GitLab Inc.) are US companies, and PostHog (PostHog Inc.) also has its headquarters in the United States. PostHog's statistics are stored on servers in the EU. Where data is transferred to the United States, this is based on the EU-US Data Privacy Framework (Calendly) or on the European Commission's standard contractual clauses.

How long do we keep your data?

• Visitor statistics: one year in PostHog. The code in your browser is removed when you withdraw your consent, and otherwise on your first visit after six months.
• Your choice about statistics: six months in your browser.
• Calendly bookings and emails: up to two years after the last contact.
• Technical data at the hosting provider: for a limited time, for security and troubleshooting.

Your rights

You have the right to access, correct or delete your data, to restrict its processing and to data portability. You also have the right to file a complaint with the Belgian Data Protection Authority. If you gave consent, you can withdraw it at any time via "Privacy settings". For your other rights, email info@drelspastijn.be. Because we do not identify you in the visitor statistics, we usually cannot link them to you.

Right to object: where we process data based on our legitimate interest (emails and hosting), you can object at any time via info@drelspastijn.be.

We do not make decisions based solely on automated processing.