Privacy

Privacy statement

Your data belongs to you. Here you can read, in plain language, what we process, why, how long we keep it and what your rights are.

Version: July 2026. This statement is reviewed legally from time to time and supplemented where needed.

Who we are

Calla Medical, based in Amsterdam, is the controller for the processing of personal data described in this statement. Questions about privacy? Email privacy@callamedical.nl.

Which data we process

  • Contact details if you email or call us: your name, email address and whatever you send us. Purpose: answering your question. Retention: no longer than 2 years after our last contact.
  • Appointment details: name, contact details, chosen treatment, location and time. Purpose: carrying out the appointment. Retention: in line with the statutory administrative obligation. These data are processed by our email service AgentMail, with which we have a data processing agreement. You receive a confirmation of this by email.
  • Medical data from the intake and the treatment record. These fall under the twenty-year medical retention obligation set out in Dutch law and under the doctor's duty of confidentiality. They are never used for marketing.

What we do not do

  • We place no tracking cookies and therefore show no cookie banner. Our website statistics are cookieless and anonymous.
  • The map on the homepage comes from Google Maps and loads on wider screens. Your browser then shares data with Google in the United States, including your IP address. We use the map only to show our locations; we do not link any profile or advertising identifier to it.
  • We do not sell or share your data for advertising.
  • We do not send newsletters unless you have signed up for them yourself.

Who we work with

For hosting, email and statistics we use a small number of suppliers, with a preference for European ones. You will find the full list, with region and purpose, on our transparency page. We conclude a data processing agreement with every processor.

Your rights

You may access your data, have it corrected or have it deleted, although statutory limits apply to medical records, and you may object to a processing activity. Email privacy@callamedical.nl and we will respond within 30 days. If we cannot resolve it together, you may lodge a complaint with the Dutch Data Protection Authority.