Privacy policy

Who is responsible

Dr Axel De Lange, plastic, reconstructive and aesthetic surgeon, is the controller of the personal data described in this policy. He practises at Site Botanique (Clinique Saint-Jean), Boulevard du Jardin Botanique 32, 1000 Brussels, and at Arsenal Clinic, Boulevard Louis Schmidt 2B, 1040 Etterbeek. For any question about your data, write to info@docteurdelange.com.

As an individual practitioner he is not required to appoint a data protection officer.

What this website collects

Nothing that you type or send. There is no contact form, account, newsletter, search box or comment field, so the site asks you for no personal data.

Appointments are not booked on this site. The booking buttons take you to an external platform, described below.

Visiting the site: technical data

When your browser asks for a page, our host, Cloudflare, necessarily receives technical data: your IP address, the time, the page requested, your browser's user agent and the page you came from. It uses this data to deliver the site and to protect it against attacks and abuse.

Legal basis: our legitimate interest in running a website that works and is secure (GDPR, Article 6(1)(f)). The data is not used to identify you, to build a profile or to measure audiences, and it is not combined with anything else.

This site runs no analytics and keeps no visitor logs of its own. Cloudflare keeps request data only as long as it needs it to run and secure its network, under its data processing addendum.

If you write to Dr De Lange

The messages you send to the email address on this site are received and stored by the practice's email provider. They are used to answer you (legal basis: steps you ask for before any care, or our legitimate interest in replying; GDPR, Article 6(1)(b) and (f)) and are kept as long as needed to follow up. Anything that concerns your care is added to your medical record (see below).

Please do not send medical details, photographs or documents by email. Ordinary email is not encrypted, and the Order of Physicians advises doctors against exchanging medical data that way. Bring them to your consultation instead.

Booking an appointment

Each clinic books appointments on its own platform, and each booking button on this site opens the platform of that location.

Site Botanique (Clinique Saint-Jean) uses Rosa (rosa.be), run by Rosa ASBL, a non-profit organisation based in Brussels. For the appointment itself, Rosa processes your data on behalf of the healthcare provider, who remains responsible for it. For your Rosa account, its public profiles and its own cookies, Rosa is responsible itself: see its privacy policy.

Arsenal Clinic uses Doctoranytime (doctoranytime.be), run by the Belgian company Doctor Anytime, which is responsible for the data you give it when you book there: see its privacy policy.

The links are set up so that neither platform is told which page of this site you were reading, and this website receives nothing back: it does not learn whether you booked, when, or for what.

Patients: your medical record

When you consult Dr De Lange, he keeps a medical record for you. It is processed under medical professional secrecy, to provide and follow up your care (GDPR, Article 9(2)(h)) and to meet his legal obligations (Article 6(1)(c)), such as keeping the record and, where it applies, reimbursement.

Your data is shared only with the people and bodies involved in your care or entitled to it by law: for example the doctor who referred you, other caregivers treating you (with your consent where the law requires it) and, where reimbursement applies, your health insurance fund.

Clinical photographs taken for your record are part of it; any other use would require your explicit written consent.

Belgian law requires the record to be kept for at least 30 and at most 50 years after your last contact (law of 22 April 2019, Article 35).

You have the right to consult your record and to receive a copy, the first one free of charge, under the law of 22 August 2002 on patients' rights.

When you are treated at Clinique Saint-Jean, the hospital also processes your data, and its own privacy notice applies to that care.

Who receives data

Cloudflare, Inc. (hosting, as our processor) and the practice's email provider (email). The booking platforms receive what you give them on their own sites, as described above; they receive nothing from this website.

Personal data is never sold, rented, used for advertising or used to take automated decisions about you.

Transfers outside the European Economic Area

Cloudflare operates worldwide, so data may be processed outside the EEA, including in the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection; its addendum also includes the Commission's standard contractual clauses.

Your rights

You may ask for access to your personal data, and for its correction, erasure or restriction. You may object to processing based on legitimate interest. Where processing rests on your consent or on a contract, you may also ask to receive your data in a portable format, and withdraw your consent at any time.

Requests are free. Write to info@docteurdelange.com; you may be asked to confirm your identity. You will receive an answer within one month, which the law allows to be extended by two months for complex requests.

For medical records, the law limits some rights: a record cannot be erased, for example, before the end of its legal retention period.

Complaints

If you are not satisfied with an answer, you can complain to the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, or through its online complaint form.

Security

The site is served only over an encrypted connection (HTTPS, with HSTS), and its Content-Security-Policy lets the browser run code from this domain alone: there are no third-party scripts, pixels or embeds.

Changes and language versions

If this website ever starts collecting something new, this policy will say so before it begins. The English, French and Dutch versions are equally valid. The date below is that of the current version.