Last updated 1 June 2026
Omnia Dental processes personal data and medical data in order to provide you with good dental care. We treat this data carefully and confidentially and comply with the General Data Protection Regulation (GDPR) and the Dutch Medical Treatment Agreements Act (WGBO). This statement explains which data we process, why we do so and which rights you have.
Controller
The controller for your data is Omnia Dental, located at Manenburgdreef 101, Unit 2.8, 2135 GW Hoofddorp. The practice owner and treating dentist is Drs. N. Gangaram Panday, registered in the BIG register under number 19917414702.
For questions about privacy you can contact us at info@omniadental.nl or by phone at +31 6 11437329.
Which data we process
In order to provide proper treatment we record the data we need. This includes the following categories.
- Contact and identification data: name, address, date of birth, telephone number, email address and citizen service number (BSN).
- Details of your health insurer, such as policy number and insurance details.
- Medical data: your dental record with examinations, diagnoses, treatment plans, photos and X-ray images, medication and relevant medical history.
- Financial and appointment data, such as invoices, payments and appointment history.
Purpose and legal basis
We process your data in order to provide dental care, keep a record, schedule appointments, handle claims and invoices and to comply with legal obligations.
The legal basis for processing your medical data is the treatment agreement and the statutory duty to keep a record under the WGBO. For the financial administration the statutory retention obligation and the performance of the agreement apply as the basis.
Who has access to your data
Only staff involved in your treatment have access to your record. Everyone who works with us is bound by professional secrecy or a duty of confidentiality.
We do not share your data with others, except with parties needed for your treatment or administration and only to the extent necessary. Referral to another care provider only takes place with your consent.
Processors and third parties
For some tasks we engage external parties. We conclude a processing agreement with these parties so that your data is properly protected there as well. This includes the following parties.
- The supplier of our practice and patient software, for managing your record and the scheduling.
- A dental laboratory, for producing crowns, bridges, dentures and other technical work.
- Your health insurer and Vecozo, for verifying your insurance and submitting claims.
- A factoring company, which handles the invoicing and payment of your treatment on our behalf.
Retention periods
Under the WGBO we keep your medical record in principle for twenty years, counted from the last change in the record, or as much longer as is reasonably necessary for good care.
Data from our financial administration is kept for seven years in connection with the statutory tax retention obligation. After a retention period ends we destroy or anonymise the relevant data.
Your rights
Under the GDPR you have a number of rights regarding your data. You can exercise these rights by contacting us. We may ask you to identify yourself so that we can be sure the request comes from you.
- The right to access the data we process about you.
- The right to rectification of incorrect data.
- The right to erasure of data, in so far as no statutory retention obligation applies.
- The right to restriction of processing and the right to object.
- The right to data portability, whereby you receive your data in a common format.
Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. This includes access controls, encrypted connections and agreements with our suppliers.
If, despite these measures, a data breach should occur, we handle it carefully and report it where necessary to the Dutch Data Protection Authority and to you.
Questions and complaints
If you have a question about how we handle your data, or if you wish to exercise a right, please contact us at info@omniadental.nl. Within the practice the practice owner is the point of contact for privacy.
If we cannot resolve the matter together, you have the right to lodge a complaint with the Dutch Data Protection Authority, the national supervisory authority for privacy.