Skip to main content

Privacy statement

Last updated: 11 October 2026

Fundament Partners GGZ handles your personal data with care. This privacy statement explains which data we process when you visit our website or register through it, why we do so, how we protect your data and what rights you have.

Who we are

Fundament Partners GGZ B.V. is responsible for processing your personal data through this website.

  • Address: Couwaelstraat 35, 3034 PB Rotterdam, the Netherlands
  • Chamber of Commerce (KvK) number: 98433245
  • Email: info@fundamentpartners.nl
  • Phone: +31 85 060 2628

When you visit our website

Our website is hosted by Vercel. On every visit, the server processes technical data such as your IP address, your browser type and the page you request. This is needed to run and secure the website. These data are kept briefly and are not used to track you or build a profile of you.

We place no cookies for visitors of the website, and we do not measure website use with analytics tools such as Google Analytics. You can read more in our cookie policy.

When you register through the website

Which data do we process?

Through the registration form we process:

  • your name, initials, date of birth, gender and marital status;
  • your phone number, email address and address;
  • your citizen service number (BSN) and the type and number of your identity document;
  • the name and address of your GP and their practice;
  • your preferred practitioner, if you choose one;
  • your GP's referral letter, if you include it.

Your registration shows that you are seeking care from a mental health care provider. A referral letter often also contains information about your health. These are health data: special categories of personal data that receive extra protection.

We do not make a copy of your identity document. We only ask for its type and number. Your practitioner checks your identity document at your first appointment.

Why do we process these data?

We use your data to handle your registration, match you with a suitable practitioner and prepare your intake.

On what legal basis?

  • Performance of a contract: we process your data at your request, in order to enter into a treatment agreement (Article 6(1)(b) GDPR).
  • Legal obligation: care providers must establish your identity and BSN (Dutch Act on additional provisions for the processing of personal data in health care, Wabvpz). For this we process your BSN and the details of your identity document (Article 6(1)(c) GDPR).
  • Health data: we process these as a care provider, insofar as this is necessary for good care and for managing our organisation (Article 9(2)(h) GDPR and Article 30(3)(a) of the Dutch GDPR Implementation Act, UAVG). Only people bound by professional secrecy or a duty of confidentiality have access.

Are you required to provide these data?

Your BSN and the details of your identity document are required by law. We need the other data in the form to handle your registration; only fields marked as optional may be left empty. Without the required data we cannot process your registration.

How do we protect your registration?

  • Your registration is encrypted immediately after you send it and kept in protected storage in Frankfurt (Germany). Your referral letter is encrypted too.
  • We do not forward your registration by email. Our staff only receive a notification without personal data: a reference number and a link.
  • Only designated Fundament staff can open your registration, using their own administrator account.
  • Photos you include (JPG or PNG) are saved again without extra data, such as the location where the photo was taken.
  • Once your registration has been processed, we delete it from the website. This happens automatically 30 days after receipt at the latest.

Who receives your data?

  • The Fundament staff who process registrations.
  • The practitioner you are matched with, for your intake and treatment.
  • The service providers listed below, who work only on our instructions.

Confirmation email

After you register, we send a confirmation to your email address. That email contains your name but no other details from your registration. Because even receiving an email from a mental health care provider can say something about you, we keep its content as limited as possible. If you reply to the confirmation, your message arrives at our general email address.

Practitioners on our website

For the practitioners affiliated with Fundament, we show details such as their name, photo, profession, approach, languages, treatments, waiting time and business contact details. We do this to help clients find a suitable practitioner. We do not show personal details such as date of birth or gender.

Service providers

We work with the following service providers (processors). We have agreements with them about the security and confidentiality of your data.

  • Vercel Inc. — hosting of the website and encrypted storage of registrations. The servers and the storage are located in Frankfurt (Germany).
  • Neon (via Vercel) — the database with the website content and practitioner details, in Frankfurt (Germany).
  • Resend (Plus Five Five, Inc.) — sending emails, such as the confirmation email and the notifications to our staff. Resend stores data in the United States.

We do not sell your data and do not share it for advertising purposes.

Transfers outside the European Union

Vercel and Resend are American companies. Resend processes your name and email address for the confirmation email in the United States. Vercel staff may access systems from the United States, for example for maintenance and support. These transfers are covered by the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework. Your registration itself is stored only in encrypted form.

How long do we keep your data?

  • Your registration on the website: until it has been processed, and no longer than 30 days after receipt.
  • Your client file: if you start treatment, the data needed for your care are included in your client file. The retention period of the Dutch Medical Treatment Contracts Act (WGBO) applies to it: in principle 20 years.
  • Emails: our email service keeps the delivery details of emails for a limited time, in principle 30 days.
  • Technical data from website visits: briefly, only as long as needed to run and secure the website.

Automated decisions

We do not make decisions about you based solely on automated processing. Your registration is assessed by people.

Your rights

You have the right to:

  • access your data;
  • have incorrect data corrected;
  • have your data deleted, unless we are required by law to keep them;
  • have the processing restricted;
  • object to the processing;
  • receive your data or have them transferred to another party.

Send your request to info@fundamentpartners.nl. We respond within one month. We may ask you to confirm your identity; we will not ask for a copy of your identity document for this. If you are under 16, your parents or guardian can exercise these rights on your behalf.

Do you disagree with how we handle your data? Please contact us first. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

We may update this privacy statement, for example when our way of working or the law changes. The latest version is always available on this page.

Contact

Do you have questions about this privacy statement or your data? Email info@fundamentpartners.nl or call +31 85 060 2628.